Privacy Policy
Last updated · May 12, 2026
Who we are
listin.bio (“listin.bio”, “we”, “us”) is operated by illsn, an individual developer based in Mumbai, Maharashtra, India. We act as the data fiduciary under India’s Digital Personal Data Protection Act, 2023 for the personal data described below.
Questions, requests, or complaints? Email hi@illsn.com.
What we collect
- Account data. Email address, name, and (if you sign in with Google) the basic profile information Google releases. Optional fields you fill in: bio, avatar URL, date of birth.
- Content you create. Pages, lists, items, follows, comments, and uploaded images. This is the content you’re publishing under your slug — the public/private flag on each page and list controls who else can see it.
- Engagement. One row per signed-in account, per day, per page or list visited (the “impression” record). Owners can see aggregate counts of impressions on their own pages and lists.
- Technical. IP address, user-agent string, and timestamps are processed by our auth provider for security, abuse prevention, and rate limiting. We don’t store these in our application database.
- Payment data. Paid plans are sold and processed by Paddle (Paddle.com Market Limited), which acts as the merchant of record for every transaction. We store only your subscription tier and the customer/subscription references Paddle returns to us. Card numbers, UPI handles, and bank details never touch our servers — they go directly to Paddle, whose own privacy policy governs that data.
How we use it
- To run the service, sign you in, and show you what you create.
- To show creators their analytics and let followers find pages and lists.
- To respond to support requests, abuse reports, and legal demands.
- To bill paid plans and prevent fraud (when paid plans are live).
- We do not sell your personal data, and we do not use it to train AI models.
Who we share it with
We use a small number of vetted processors to deliver the service. Each only receives the data needed for their specific role:
- Nhost — authentication, database, and file storage. Personal data is stored on infrastructure managed by Nhost.
- Google — only if you choose to sign in with Google. Google sees your sign-in event; we receive your email and basic profile.
- Our hosting provider — receives requests to the application as part of normal traffic.
- Paddle (Paddle.com Market Limited) — our merchant of record and payment processor. Paddle handles checkout, billing, invoices, and the tax (VAT/GST/sales tax) on paid plans, and receives the billing details needed to take payment.
We may also disclose data when required by Indian law, a binding court order, or to protect the rights and safety of our users.
Where your data lives
Personal data is processed on infrastructure managed by Nhost. Some processors may transfer data outside India for routine operations; in those cases we rely on the contractual safeguards offered by the processor.
How long we keep it
We keep your account data for as long as your account is active. When you delete your account, your pages, lists, items, follows, and impression history are deleted within 30 days. Some records (for example, payment receipts) may be retained longer where required by law.
Your rights
Subject to Indian law, you have the right to access, correct, update, or delete your personal data, to withdraw consent for optional processing, and to nominate someone to exercise these rights on your behalf in case of incapacity. To exercise any of these rights, email hi@illsn.com. We respond within 30 days.
You can also delete your account from your profile settings at any time.
Cookies and local storage
We set a session cookie (via Nhost) so you stay signed in. We use your browser’s sessionStorage to remember which pages you’ve already counted an impression for in the current session, so we don’t inflate analytics on refresh.
We do not use third-party advertising cookies or cross-site tracking pixels.
Children
listin.bio is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has signed up, please email us and we’ll delete the account.
Changes to this policy
We may update this policy as the service grows. When we do, we’ll bump the “Last updated” date at the top. Material changes will be communicated by email or in-app notice.
Contact
illsn
Mumbai, Maharashtra, India
hi@illsn.com
See also · Terms of Service