Privacy Policy
What data is collected, why, who processes it, how long it is kept, and how to exercise your rights.
This policy explains how ListoMax processes personal data in connection with the listomax.io website and the ListoMax software. It has been drafted in accordance with the General Data Protection Regulation and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
Yvan BARBAGGIO
Sole trader (entrepreneur individuel)
Address: 13 rue du Commandant Luce de Casabianca, 20200 Bastia, France
SIREN: 412 474 280 · R.C.S. Bastia
Contact: support@listomax.io
Any question about this policy or your data may be sent to this email address.
2. Data collected by the website
The listomax.io website is a showcase website. It has no user account, no customer area and no data collection form.
What is collected
- Data you voluntarily send us by email: your email address, the name you provide, and the content of your message.
- The host's technical logs: IP address, date and time of the visit, page viewed, browser type. These logs are generated automatically by the server for security and proper operation purposes.
What is not collected
- No audience measurement tool is installed.
- No advertising tracker is present.
- No social network button loads a third-party script.
- No profiling or automated decision-making takes place.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your message | Legitimate interest in handling the requests sent to us |
| Managing a business relationship | Performance of pre-contractual measures or of the contract |
| Server security, technical logs | Legitimate interest in ensuring the security of the service |
3. Purchase and payment
Payments for the ListoMax software are processed by Stripe, a payment service provider. Stripe receives the data needed for the payment (name, email address, payment method); the publisher never has access to your bank card number. The invoice is issued by the publisher.
Payment data — card number, bank details — is processed directly by this provider and its financial partners. It never passes through this website and is never stored by the publisher.
The publisher receives from this provider only the information needed to deliver and manage the licence: name, email address, country, product purchased, date of purchase and order reference.
This provider's privacy policy applies to the part of the processing it carries out. It can be consulted on its own website.
4. Data processed by the software
This is the most important point of this policy.
The ListoMax software runs entirely on your computer. The publisher operates no server that would receive, store or view data about your activity.
What stays on your computer
- The product catalogue you build: listings, descriptions, prices, stock levels, references.
- The change history and the successive versions of each listing.
- The images you associate with your products.
- The access keys to your stores: PrestaShop Webservice key, WooCommerce Consumer Key and Consumer Secret, tokens for other systems.
- Your preferences: interface language, currency, display options.
These items are saved in the application's data folder on your computer. Access keys are kept in a protected location, read only by the software's main process, and never appear in the interface once entered.
The software's network exchanges
When you publish, the software communicates directly between your computer and your stores, through their official application programming interfaces. There is no intermediary along this path.
The software also performs a licence check with the licence management service, which transmits only the licence key and a technical identifier of the installation. No data from your catalogue accompanies this check.
5. Artificial intelligence text generator
This feature is optional and remains disabled until you have entered your own Anthropic access key.
If you enable it:
- The information needed for generation — product name, selling points you specify, category — is sent to Anthropic using your own key.
- This processing is carried out under your responsibility and in accordance with Anthropic's terms and privacy policy.
- Billing is direct between you and Anthropic. The publisher is involved neither in the payment nor in the processing.
- Your access key is stored locally, in the application's protected location, and is never sent to the publisher.
With no key entered, no data leaves your computer in connection with this feature, and the software remains fully usable.
6. Data recipients
| Recipient | Role | Data concerned |
|---|---|---|
| The publisher | Support and business follow-up | Your email exchanges, licence information |
| Hostinger | Website hosting | Server technical logs |
| Stripe | Secure payment processing | Order and payment data |
| Anthropic | Text generation, if enabled by you | Content submitted for generation, via your key |
| Your email provider | Delivery of emails | Content of your messages |
No data is sold, rented or transferred for advertising purposes or for marketing by third parties.
Some of these providers may process data outside the European Union. In that case, transfers are made on the basis of the safeguards provided for by the General Data Protection Regulation, in particular the European Commission's standard contractual clauses.
7. Retention periods
| Data | Period |
|---|---|
| Email exchanges without a purchase | 3 years from the last contact |
| A customer's licence and support data | Duration of the relationship, then 3 years |
| Accounting records relating to a purchase | 10 years, in accordance with legal obligations |
| Server technical logs | According to the host's policy, generally a few months |
| Software data on your computer | For as long as you keep it. You delete it whenever you wish. |
8. Your rights
You have the following rights over the data the publisher holds about you:
- Right of access — to obtain confirmation that processing exists and to receive a copy.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure — to request deletion, subject to legal retention obligations, in particular accounting obligations.
- Right to restriction — to request that processing be temporarily suspended.
- Right to object — to object to processing based on legitimate interest.
- Right to data portability — to receive your data in a machine-readable format.
- Right to set guidelines regarding what happens to your data after your death.
To exercise these rights, write to support@listomax.io. You will receive a reply within one month. Proof of identity may be requested if there is reasonable doubt about the identity of the person making the request.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
9. Security
The following measures are in place:
- The website is served over HTTPS, with a valid certificate.
- Payment data never passes through our systems: it is processed by the payment provider.
- The access keys to your stores are stored locally, in the application's protected location, never in a readable configuration file or in the interface.
- The catalogue is written with rotating backups, so that it withstands an interruption during saving.
- Access to support exchanges is limited to the people who need it to handle the request.
As no system is infallible, it is also your responsibility to protect your workstation and to keep your backups in a safe place.
10. Cookies and trackers
This website does not set any cookies.
It has no audience measurement tool, no advertising network and no share button loading a third-party script. No consent banner is therefore needed, since there is nothing to consent to.
Fonts are loaded from a third-party service to display the website. This loading may result in your IP address being sent to the provider of these fonts, without any cookie being set or you being identified.
The ListoMax software, for its part, does not set any trackers: it is not a website but an application installed on your computer.
11. Changes to this policy
This policy may be changed to reflect changes to the service or to regulations. The date of the last update is shown below. In the event of a substantial change, customers will be informed by email.
Last updated: 23 August 2026