Privacy Policy

Last updated: October 18, 2026

ListingScene is owned and operated by AI Software Ltd ("we", "our", "us"). AI Software Ltd is responsible for the personal information processed through listingscene.com, the ListingStage app available on the Canva Apps Marketplace, and the ListingScene plugin in ChatGPT and Codex. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect your email address and, if you sign in with Google, your name and profile picture. This information is used to authenticate you and manage your account. If you choose password sign-in, we store an Argon2id password hash, never your readable password. We store hashes of single-use password setup and reset tokens, which expire after 20 minutes. To prevent abuse, we keep keyed hashes of email addresses and client IP addresses with attempt counters; expired counters are removed during subsequent password setup or reset requests. Password safety checks send only the first five characters of a SHA-1 password hash to Have I Been Pwned, never your email, readable password, or full hash.

Images You Upload

When you use our virtual staging or photo enhancement features, you upload images of rooms or properties. These images are processed to generate or enhance the images using Google Gemini. ListingScene processes uploaded originals in memory and does not save them to our Amazon S3 result storage. Generated results are stored in Amazon S3 with shareable image URLs. Anyone with a result URL can view that image; do not submit confidential property photos. Some larger inputs are temporarily uploaded to Google's Files API as part of processing.

Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number. We receive and store your Stripe customer ID, subscription status, and plan type.

Usage Data

We collect information about how you use the service, including generation history (type of request, timestamps, and output URLs), credits usage, and basic request logs.

ListingStage Canva App

If you use our ListingStage app through the Canva Apps Marketplace, Canva provides us with a user identifier to associate your usage with your account. We do not access your Canva designs or other Canva data beyond what is necessary to process your staging and enhancement requests.

ChatGPT and Codex Plugin

Connecting the plugin uses OAuth to associate your ListingScene account with the client and permissions you approve. We store the connection's client details, permission scopes, authorization records, and hashed access and refresh tokens. Access tokens expire after one hour and refresh tokens after 30 days. Photo editing receives only the photo reference, selected room type, style, correction, and optional editing instructions provided to the tool. We do not request or retrieve your full conversation history. Account and history tools return the account information, allowance, and saved results needed for your request. Original-photo previews are provided to the client's embedded editor separately from the model-visible result. Generated result URLs and requested tool results are returned to ChatGPT or Codex for display and follow-up edits.

2. How We Use Your Information

Service Providers and Recipients

Provider processing is subject to each provider's terms and privacy practices. See Google Gemini API terms for image-processing data handling. ListingScene does not sell your personal data or use your photos to train its own models.

3. Data Retention

Your account data is retained for as long as your account is active. Generated images are stored indefinitely unless you request deletion. If you request account deletion through support, we will delete your personal data and stored results within 30 days. Generation history includes your edit settings, result URLs, room type, timestamps, and links between edits for as long as your account is active unless you request deletion. Disconnecting the plugin stops future client access but does not delete your ListingScene account or saved results. Temporary Google Files API uploads are automatically deleted after 48 hours under Google's file retention policy; Google's processing records are governed by its API terms.

4. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls on our infrastructure. However, no method of transmission over the Internet is 100% secure.

5. Your Rights

You have the right to:

6. Cookies

We use essential cookies for authentication and session management. Public marketing pages use Google Analytics to understand website usage; account, password, dashboard, and plugin authorization pages do not load analytics. We do not use advertising cookies.

7. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@listingscene.com.