Privacy Policy

Drop2List (drop2list.com) helps sellers turn product photos into marketplace-ready listings. This policy explains what we collect, why we use it, and the choices you have.

Questions: admin@drop2list.com.

Account details you provide — name, email, password (stored hashed), workspace name, and optional two-factor authentication settings.

Product content you upload or generate — photos, titles, descriptions, barcodes, condition notes, prices, and listing drafts.

Marketplace connections — OAuth tokens and shop identifiers when you connect eBay, Etsy, Vinted, or similar platforms (we do not ask for your marketplace password).

Optional integrations you configure — for example accounting (Xero) credentials scoped to your workspace.

Technical logs needed to run the service — IP address, browser/user-agent, request paths, and security signals used by our edge firewall.

Identify products from photos (including via Google Cloud Vision and optional SerpAPI web search when configured).

Research comparable prices and retail offers so we can suggest list prices.

Draft listing copy, remember confirmed listing patterns in your workspace, and publish or cross-post to connected marketplaces you choose.

Operate billing, support your workspace, keep the service secure, and meet legal obligations.

We do not sell your personal information.

To identify items, research prices, and list products we may send necessary data (such as images, titles, or OAuth tokens) to processors you or a platform admin enable — for example SerpAPI, Google Cloud Vision, Context.dev, Ollama (when self-hosted), Stripe, and the marketplaces you connect (eBay, Etsy, Vinted, and others).

Those providers process data under their own terms. Marketplace listing content you publish becomes visible according to that marketplace’s rules.

We use essential session cookies so you stay signed in and so security features (including optional two-factor authentication) work. We do not use third-party advertising cookies on drop2list.com.

We keep account, product, and listing data while your workspace is active and for a reasonable period afterward so you can restore access or meet marketplace/tax needs, unless you ask us to delete it sooner where we can.

Security and access logs are kept only as long as needed for abuse prevention and troubleshooting.

Depending on where you live, you may ask to access, correct, export, or delete personal data we hold about you, or object to certain processing.

Workspace owners can update profile and connection settings in the app. For privacy requests email admin@drop2list.com — we will respond within a reasonable time.

We use HTTPS, hashed passwords, session controls, optional two-factor authentication, and an edge web application firewall. No method of transmission or storage is perfectly secure; please use a strong unique password and enable 2FA when available.

Drop2List is aimed at sellers and businesses. It is not directed at children under 16, and we do not knowingly collect their personal information.

We may update this policy as the product evolves. The “Last updated” date at the top of this page will change when we do. Continued use of Drop2List after an update means you accept the revised policy.