1. Information We Collect

We collect the following information when you use FlowLister:

Account information: email address and password hash.
eBay connection: OAuth tokens to publish listings on your behalf.
Photos: images you upload for listing generation.
Listing data: titles, descriptions, and item specifics generated by our AI.
Payment information: processed securely by Stripe. We do not store credit card numbers.

2. How We Use Your Information

To provide and improve the FlowLister service.
To generate and publish eBay listings on your behalf.
To process payments and manage your subscription.
To send account-related emails (verification, receipts).

3. Data Sharing

We do not sell your personal data. We share data only with:

eBay: listing data necessary to publish on your behalf.
Stripe: payment processing.
AI providers: photos and text sent for listing generation (not stored by providers beyond processing).

4. Data Security

We use encryption at rest and in transit to protect your data. eBay OAuth tokens are encrypted before storage. All connections use HTTPS.

5. Data Retention

We retain your account data and listings as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.

6. Cookies

FlowLister uses essential cookies for authentication. We also use the Meta Pixel for advertising measurement (see the next section), which may set cookies such as _fbp to help measure ad performance.

7. Advertising Measurement

We use the Meta Pixel and the Meta Conversions API to measure the performance of our advertising — for example, to understand when a visit, account signup, or subscription resulted from one of our ads. This may involve sharing hashed identifiers (such as a hashed email address) with Meta. We do not sell your personal information.

8. FlowLister Crosslister Browser Extension

The FlowLister Crosslister extension is optional. This section applies only if you choose to install it. It posts listings you have already created in FlowLister to your own marketplace accounts, using the browser session you are already signed in to.

What it accesses:

Your FlowLister pairing token and the progress of your listing jobs, stored locally in your browser so work resumes if the browser restarts.
The listing content you created in FlowLister — titles, descriptions, photos, prices and item details — in order to fill in the marketplace's own listing form.
On the marketplace sites listed below, the security token (CSRF token) that site requires in order to accept your own authenticated request.

What it does not do: the extension never sees, stores or transmits your marketplace passwords. You sign in to those sites yourself, in your own browser. It does not read your browsing history, and it does not run on any site other than flowlister.com and the marketplaces you have asked it to post to.

Sites it runs on: flowlister.com, poshmark.com, mercari.com, depop.com and vinted.com (including its country domains).

Diagnostics: when a posting attempt finishes or fails, the extension may send us a limited technical record of the requests it made, so that we can diagnose problems. This is capped at 50 records. Credential headers — cookies, authorization headers and CSRF tokens — are stripped before anything is sent, and any record that still contains one is discarded rather than stored.

We do not sell this data, and we do not use it for advertising or for any purpose unrelated to posting your listings. You can uninstall the extension at any time; the data it stored in your browser is removed with it.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

Questions about your privacy? Contact us at founder@flowlister.com.

Privacy Policy