Privacy Policy

AY Automate LLC, 312 W 2nd St Unit A4881, Casper, WY 82601, USA, is the data controller for AY Listicle. Contact: team@aylistcle.com.

• Account details: your email address and name. If you sign in with Google, we also receive your Google profile name and picture. We never see your Google password.
• What you add: your products (name, website, description, field and services) and the lists you own (their web addresses). We read the public pages of those websites and lists to understand them.
• Activity in the app: swaps and inclusion requests you make, their status, due dates and the checks we run on them.
• Payments: handled by Stripe. We keep amounts, fees and payment status. We never see or store your card number.
• Technical data: basic logs (such as IP address and browser) kept by our hosting providers for security, the cookies needed to keep you signed in, and where your first visit came from (see Cookies).

• To run the service: match products with lists that fit, check that agreed mentions are on the page, and recheck them monthly.
• To email you about your swaps, inclusion requests and account.
• To process payments, grant credits, and release earned credits to hosts after an inclusion is confirmed.
• To keep the service secure and prevent abuse.

We don’t sell your personal data, and we don’t use it for advertising.

Members can see the products and active lists on AY Listicle (names, websites, fields, Search Console numbers and site strength) so they can find partners. The other side of a swap or request sees its details and status. Your email address is not shown to other members.

We share data with these providers only as far as each needs it to do its job for us:

• Supabase: database and sign-in (hosted in the EU).
• Vercel: website hosting.
• Trigger.dev: background jobs such as page checks.
• Resend: sending emails.
• Stripe: payments and subscriptions.
• Google: sign-in with Google, if you choose it.
• PostHog: product analytics, such as page views and sign-ups (hosted in the US).
• OpenRouter and the AI models it routes to: reading public pages and product descriptions to judge fit.
• Firecrawl, DataForSEO and Ahrefs: reading public web pages and public search and site-strength data.

All our cookies are first-party, set by www.aylistcle.com:

• Sign-in: keep you signed in and the app working.
• First visit (ay_attr): on your first visit we note the campaign tags in the link you followed (such as utm_source), the site that sent you (without its query string), the first page you saw and the date. It lasts 90 days and is never updated. If you sign up, we add it to your account in PostHog so we know which channels bring members.
• Analytics (PostHog): count page views and how the app is used.

No advertising cookies. We don’t share any of this with advertisers.

We keep your data while your account is open. When you ask us to delete your account, we delete your personal data, except records we must keep for payments, taxes or legal reasons, which we keep only as long as the law requires.

You can see and edit most of your data in the app. You can also ask us to access, correct, export or delete your data, or object to how we use it, by emailing team@aylistcle.com. If you are in the EU or UK, you can also complain to your local data protection authority.

Data is sent over encrypted connections, access is limited by account, and sensitive keys stay on our servers. No system is perfectly secure, so please tell us right away if you notice anything wrong.

AY Listicle is a business service and isn’t meant for anyone under 16.

If we change this policy in a meaningful way, we’ll update the date above and tell signed-in members by email or in the app.