Privacy Policy

Last updated: May 31, 2026

ListingStage ("we", "us") respects your privacy. This policy explains what we collect, why, and how you can control it.

What we collect

Waitlist email: when you sign up, we store your email address to notify you when the product opens.
Account information (post-launch): name, email, brokerage, California-agent status — collected when you create an account.
Listing images: photos you upload for staging are processed by our AI and stored in your account. We never use your images to train any model.
Payment information: processed entirely by Stripe; we never see or store your full card number.
Usage analytics: page views, button clicks, generation counts via PostHog (anonymized at the IP level).
Google Ads conversion tracking (gtag.js): if you visit ListingStage after clicking one of our Google ads, Google's tag stores an anonymous click ID in your browser and reports back to Google when you complete a purchase. We use this only to measure which ads convert — not to retarget you elsewhere or build an advertising profile. You can opt out at adssettings.google.com.

What we don't do

We never sell your data.
We never train AI models on your images.
We never share your client property data with third parties (except Stripe for payments and our hosting providers as a necessary technical step).
We never email you outside of the product context (no third-party marketing partners).

Who we share data with

Stripe for payment processing (privacy policy)
Supabase for database, auth, and file storage hosting (privacy policy)
Replicate for AI image generation; images sent for inference, not retained or used for training (privacy policy)
Resend for transactional email (privacy policy)
PostHog for product analytics (privacy policy)
Vercel for hosting (privacy policy)
Google for ad conversion measurement only (Google Ads gtag.js); receives the click ID + conversion event, not your account or listing data (privacy policy)

Your rights (CCPA + GDPR)

California residents and EU residents can request:

A copy of all personal data we hold about you
Deletion of your account and all associated data
Correction of inaccurate data
To opt out of any future communications

Email privacy@listingstage.ai and we'll respond within 30 days.

Public original-image URLs (AB 723 compliance)

Images we publish at listingstage.ai/orig/<hash> are intentionally public — they're the "unaltered original" your QR code links to per California AB 723. The hash is non-guessable, but the URL is shareable by anyone who scans the QR code. This is a feature of the compliance requirement, not a bug.

You can delete any original at any time from your dashboard, which also breaks the QR link (consider regenerating the staged image with a new compliance overlay if you do).

Cookies

We use cookies for: keeping you signed in (Supabase session), remembering your preferences (compliance toggle), product analytics (PostHog, anonymized), and Google Ads conversion measurement (gtag.js click-ID only). We do not use cookies to retarget you on other sites or build a third-party advertising profile.

Data retention

Waitlist emails: until launch + 90 days, then deleted if not converted to account
Account data: until you delete your account
Images: until you delete them or your account
Billing history: 7 years (Stripe / tax requirement)

Changes

We'll email account holders if we make material changes to this policy. Continued use = acceptance.

Contact

Email privacy@listingstage.ai with any privacy questions.