Your information, explained.

Who looks after your information?

ListOnce is operated by Jaison Snape trading as ListOnce, based in Brighton and Hove, East Sussex. Business and complaints address: PLATF9RM, Tower Point, 44 North Road, Brighton, East Sussex, BN1 1YR, United Kingdom. For privacy questions or requests, email hello@englishwithjaison.com. This notice was updated on 11 October 2026 and covers the invited beta and the account and purchase features described below. Every one-off purchase through PayPal includes one free pack on the 2- and 5-pack plans, or two free packs on the 10- and 28-pack plans. There is no new standalone free allowance.

What do we handle?

We handle the item details you type or dictate, the photographs you submit, and the listing text created from them. An item description or photograph can include personal information, even when you did not intend it to.

• Request references, status, timestamps, input fingerprints and pack-use counts help us return results safely and enforce the beta allowance.
• Owner access uses a verified sign-in email. Trial links use hashed secret references and a separate browser session. The cleanup removes older email-access fingerprints. Testers enter through a private link without providing an email or using ChatGPT sign-in. These references are not anonymous data.
• Save stores your working item details and listing text on our server, linked to your account or private beta link. Resized photographs are included only if you select that option. Older device-only saved items remain in your browser. Reading preferences and temporary retry references use browser storage.
• Hosting and security providers may handle technical details such as your IP address, browser and error information. Feedback or support messages contain whatever you choose to send.

Owner-only eBay connection testing

The owner can connect an eBay sandbox test seller while direct publishing is being prepared. Customers cannot connect eBay or publish through ListOnce yet. eBay handles sign-in and permission; ListOnce does not receive the seller password. Sandbox app credentials and access/refresh tokens are encrypted in server storage using a separate cryptographic context from payment settings. An essential, secure, HTTP-only connection cookie lasts up to ten minutes to verify the return from eBay. Pending connection records expire after ten minutes and are deleted during subsequent setup activity. The temporary state record is deleted when used. No listing is sent in this preparation stage. Disconnect removes locally stored sandbox tokens and pending requests; the owner can also revoke permission in eBay. The sandbox connection remains until disconnected or the app settings are replaced. Token lifetime is shown in setup; storing a refresh token does not yet mean automatic renewal is enabled.

What happens when I sign in by email?

Customers can sign in using an email link to access their account and packs. Private beta testers continue to use their individual links without email registration. When you request email sign-in, ListOnce stores your email, an account reference, the terms version you accepted, and access and allowance records. We use these to provide and secure the account you request, not to add you to marketing.

Resend (Plus Five Five, Inc.) receives the recipient email address and message content to deliver the sign-in link. The link expires after 20 minutes and works once. Resend may retain message and delivery records under its service arrangements. Its Data Processing Addendum includes standard contractual clauses and the UK Addendum for relevant international transfers; its primary processing is in the United States. Contact us for details or a copy of the safeguards.

Expired login-token and session records are removed during the next cleanup activity. The account email, agreement and allowance records remain while the account exists; signing out does not delete the account. Contact hello@englishwithjaison.com for an account deletion request. Account deletion requests are handled through support with proportionate verification. Necessary payment and dispute records may remain after account deletion; we will explain what is retained and why.

What happens when I speak?

Dictation uses your browser’s speech-recognition feature. Depending on your browser or device, audio may be processed online by its provider under its own terms. ListOnce does not implement an audio-file upload or a recording archive; it puts the recognised words into the form.

When you create a pack, those words are submitted with your item details. Read-back uses your browser or device’s voice service, which may also use online processing. You can stop speech features or type instead.

Why do we use it?

We use information to create the drafts you request, return interrupted results, manage your allowance, secure the service and answer support requests. We do not add testers to a marketing list just because they try ListOnce, or sell their personal information.

For customer accounts and purchases, we rely on performance of the contract to provide sign-in, packs, drafts and purchase emails. We rely on legal obligations for necessary accounting and tax records, and legitimate interests for proportionate security, fraud prevention, dispute handling and support. The invited beta relies on legitimate interests to provide requested drafts and recover interrupted results. These interests are balanced against your privacy: participation is voluntary, input is limited to item facts, results are session-restricted, and you can object or stop using the test. A specific legal obligation may require us to retain or disclose information. Optional reading settings are saved only when you choose to remember them.

Photos and item details are needed to generate a pack; without them we cannot perform that request. Owner tools use owner sign-in. Customer accounts use an email address and secure session. Invited testers use a private link and session without email registration. Feedback is optional. Listing generation does not make decisions with legal or similarly significant effects about you.

Who receives my photos and words?

OpenAI receives submitted item details and photographs through its API to create the drafts. The application requests reduced response storage, but this is not a promise of zero retention. Provider safety logs, temporary processing and model-specific caching may still apply.

OpenAI states that API content is not used for model training by default unless the account opts in. Its default abuse-monitoring retention is up to 30 days, with legal and safety exceptions. Image safety checks can result in retention for manual review. The application sends generation requests with response storage switched off. That setting does not remove provider safety retention or other processing described above.

OpenAI OpCo, LLC hosts ListOnce as a processor under the ChatGPT Sites Data Processing Addendum for personal Plus accounts. It uses hosting infrastructure including Cloudflare. Browser/device providers may handle voice features. Optional PayPal sandbox tests open PayPal’s separate service. ListOnce retains test-order references, products, quantities, status and payment/expiry timestamps; the price comes from our product definitions.

Invited beta and sandbox tests do not require real money. Live checkout, when enabled, uses PayPal to process payment. PayPal receives your payment and payer details under its privacy notice and may act as an independent controller for its payment, fraud and regulatory functions. ListOnce keeps an order reference, account link, product, amount, payment and capture references, status, payment/expiry timestamps, the accepted purchase terms and receipt delivery status. We do not receive your full card details. Resend also delivers purchase confirmations to your account email. Signing in or buying does not subscribe you to marketing. The Sites hosting DPA provides standard contractual clauses with the UK Addendum for UK personal data. API processing is covered separately by the OpenAI Data Processing Addendum, which includes the UK Addendum to standard contractual clauses. You can request copies or information about these safeguards by emailing us. Processing may occur outside the UK, including in the United States; we do not promise UK-only hosting.

How long does it stay?

Finished — delete removes the saved text, item details, optional saved photographs and linked generation results from active ListOnce storage in one operation. We retain an opaque deletion marker to stop an older device recreating that saved item. Necessary account, allowance and payment records are separate and are not deleted by this action. We review payment, accounting and contract records after six years from the end of the relevant tax year and remove personal details when no legal duty or live dispute requires them. Records needed for an ongoing legal matter may remain longer. This review is handled through administration, not an automatic expiry of your saved drafts. Provider safety logs and infrastructure backups follow their separate retention arrangements; deletion from active storage is not a promise of immediate removal from every provider backup.

Working drafts saved with Save remain on our server across devices until you choose Finished — delete. Pack expiry does not delete account-saved drafts. Private beta drafts use the same private link across devices; anyone with that link shares access. Beta draft content is also removed at the next cleanup activity more than 30 days after the link expires or is revoked. Older device-only items stay in that browser until deleted or cleared.

Photos sent for generation or selected for cloud saving are resized and re-encoded. Original files are not stored in the cloud library. Older local saved originals may still contain their original metadata. Preferences remain until cleared; temporary retry storage may survive a restored browser session.

Generated results and request records are kept for retry recovery for up to seven days, then removed when beta entry, generation or owner link management next runs. Expired session records are removed on the same activity. Link references and shared use counts are removed on that activity once 30 days have passed after expiry or revocation. Sandbox order records are removed on that activity after 90 days. These are activity-triggered cleanups, so inactive-site records can remain longer. Older email-access fingerprints are removed by this cleanup. Support messages are reviewed when an issue closes and kept only as needed to resolve it, respond to a complaint or meet a specific legal duty. We do not promise immediate deletion from infrastructure backups or provider security records: those follow provider retention and deletion processes, and we request deletion assistance where applicable.

Use “Delete this session’s server results & end trial” to remove this session’s cached results and access record. The shared link allowance is retained so deletion does not reset the four-pack limit. This does not delete other browser sessions, local saved items or provider records. Finished — delete also removes linked ListOnce generation results. Deleting an older device-only copy does not delete server content, and no ListOnce deletion action directly erases provider records. Clearing the form also does not necessarily delete an item you previously saved.

Your choices and rights

Depending on the circumstances, you can ask to access, correct, erase or restrict your information, object to certain processing, or receive portable information. If we rely on consent, you can withdraw it without making earlier lawful processing invalid.

Email hello@englishwithjaison.com to raise a privacy request. Please avoid sending identity documents or sensitive information in your initial email. Use “Download my server session data” for records attached to your current browser session, or email us for a broader request. Include the non-secret reference from that download, rather than forwarding your secret test link. We verify control of the relevant session or link before disclosing information, and will ask only for proportionate verification. We normally respond without undue delay and within one month, subject to lawful verification, clarification and extension rules. We will explain an applicable delay or refusal.

You can raise a privacy complaint with our confirmed contact. We will acknowledge it within 30 days, investigate without undue delay, keep you informed and explain the outcome. You can also complain to the Information Commissioner’s Office.

A few things to keep private

Crop or cover faces, names, full addresses, identity documents and other unnecessary private details before uploading. Avoid health, financial and other sensitive information, especially information about someone else.

Anyone using an already signed-in browser or private trial link may be able to open its working library. End your session or sign out before sharing the device. Older device-only items can also remain in that browser; delete those separately if needed. We will update this notice when processing changes and explain material new uses before they begin.