Privacy Policy

Listara helps marketplace sellers, brands, importers, and agencies review product compliance evidence readiness at SKU, ASIN, product, or document level.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, submit a Free Evidence Check, request a SKU Readiness Pilot, join a waitlist, contact us, or otherwise interact with Listara.

Listara provides evidence-readiness reviews only. We do not provide legal advice, certification, laboratory testing, official marketplace approval, or notified-body services.

The controller responsible for this website and the processing described in this Privacy Policy is: Martin Gardemann - Synplex, operating Listara Sole proprietorship Schoenstrasse 42A, 81543 Munich, Germany Email: legal@listara.eu

No separate data protection officer has been appointed for the current pilot validation setup.

Depending on how you use Listara, we may collect the following categories of data:

• Contact data, such as name, work email, company, and role. • Submission data, such as product URLs, ASINs, shop URLs, sales channels, SKU count, lead trigger, and free-text notes. • Product evidence data, such as ASIN exports, supplier documents, certificates, test reports, SDS, declarations of conformity, screenshots, labels, packaging images, manuals, product files, and related metadata. • Technical data, such as IP address, browser type, device type, operating system, referrer, timestamps, pages visited, and interaction events. • Communication data, such as email metadata, support requests, booking details, and correspondence. • Workflow data, such as submission status, report status, webhook metadata, processing logs, and delivery status.

We do not intentionally request special categories of personal data. Please do not upload sensitive personal data unless explicitly agreed and necessary for a paid engagement.

When you visit our website, we may process technical information to operate, secure, monitor, and improve the website. This may include server logs, performance data, page views, referrers, device information, and interaction events.

Where analytics or tracking technologies require consent, we only use them in accordance with your cookie and privacy choices.

If you submit a Free Evidence Check, we process the information you provide to review visible product or marketplace-facing signals and generate a limited evidence-readiness response.

This may include:

• product URL or ASIN • work email • current problem or trigger • sales channel • SKU count range • role • company or shop URL • selected evidence-check topic • source page, CTA, referrer, and UTM parameters

The Free Evidence Check is a lightweight diagnostic based on submitted and visible information. It does not include a full legal review, certification, laboratory testing, official marketplace approval, or a guarantee that a marketplace will accept documents.

If you request or purchase a SKU Readiness Pilot or similar paid review, we may process additional data necessary to deliver the service.

This may include:

• SKU or ASIN exports • product files • supplier documents • certificates • declarations of conformity • SDS • test reports • screenshots • labels • manuals • marketplace requests • account-health screenshots • other evidence files provided by you

We use this data to map evidence to SKUs, identify missing or unclear evidence categories, detect mismatch risks, prepare readiness outputs, communicate findings, and deliver agreed services.

Listara may use AI-assisted workflows, document parsing, classification, extraction, or automation tools to support evidence-readiness reviews.

These tools may help structure submitted information, identify evidence categories, extract document metadata, compare product identifiers, and prepare draft outputs.

Unless separately agreed, Listara does not use submitted customer catalog data, documents, or product files to train public foundation models. Outputs may be reviewed or quality-checked by authorized Listara personnel or contractors where necessary to provide the service.

AI-assisted outputs are informational evidence-readiness outputs and may contain errors or omissions. They are not legal advice, certification, laboratory testing, or official marketplace approval.

Depending on the context, we process personal data on one or more of the following legal bases:

• Performance of a contract or steps prior to entering into a contract, for example when you request a Free Evidence Check, book a pilot, or use a paid service. • Legitimate interests, for example to operate and secure the website, respond to business inquiries, improve the service, prevent misuse, and manage customer relationships. • Consent, for example where required for optional analytics, marketing communications, or non-essential cookies. • Legal obligations, for example where we must retain certain business, tax, accounting, or compliance records.

We use personal data to:

• operate the website and forms • process Free Evidence Check submissions • deliver SKU Readiness Pilots and paid reviews • generate and send reports or follow-up emails • respond to inquiries • manage bookings and customer communications • improve page performance, conversion flow, and service quality • secure our systems and prevent misuse • maintain records required for business, accounting, or legal purposes • manage waitlists and future product communication where permitted

We may share personal data with trusted service providers that help us operate Listara. These may include providers for:

• hosting and deployment • database and storage • email delivery • workflow automation • AI-assisted processing • analytics • error monitoring • customer support • booking or CRM tools • payment processing, if applicable

A list of current sub-processors is available on our Sub-processors page.

We do not sell customer catalog data.

Some service providers may process data outside your country or outside the European Economic Area. Where required, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, contractual data protection obligations, and provider security commitments.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law or agreed with you.

Typical retention periods are:

• Free Evidence Check submissions: up to 12 months • Free-check generated reports: up to 12 months • Uploaded files for paid reviews: deleted or returned within 30 days after project completion unless otherwise agreed • Customer and contract records: retained as required for business, accounting, tax, or legal purposes • Website logs: typically 30-90 days depending on provider settings • Analytics data: up to 12 months if analytics is activated in the future • Waitlist data: retained until unsubscribe/deletion request or 24 months of inactivity • Email delivery metadata: up to 12 months • Workflow and webhook metadata: up to 12 months • Raw webhook payloads: not stored by default; if stored for troubleshooting, deleted within 30-90 days

We use technical and organisational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These may include access controls, encrypted transport, role-based permissions, provider security controls, logging, and data-minimisation practices.

No internet-based service can guarantee absolute security. If you believe your data has been affected by a security issue, contact us at legal@listara.eu.

Depending on your location and applicable law, you may have the right to:

• request access to your personal data • request correction of inaccurate data • request deletion of your data • request restriction of processing • object to processing • request data portability • withdraw consent where processing is based on consent • lodge a complaint with a data protection authority

To exercise your rights, contact us at legal@listara.eu. You also have the right to lodge a complaint with a competent supervisory authority, including the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt fuer Datenschutzaufsicht), Ansbach.

We may send service-related emails connected to your submission, booking, pilot, or account.

We only send marketing emails where permitted by law. You can unsubscribe from marketing emails at any time using the link in the email or by contacting us.

Listara is intended for business users and is not directed at children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. The latest version will be available on this page with the updated date.

For privacy questions or data-subject requests, contact: Martin Gardemann - Synplex, operating Listara Email: legal@listara.eu Address: Schoenstrasse 42A, 81543 Munich, Germany