Privacy Policy

OVERRIDE (see Legal notice). Contact: legal@listable.overridedev.com.

Account data: email, password (hashed), display name, language, subscription plan.

Content created by you: catalogs, lists, stores, items.

Technical identifiers: sessions, push tokens (if push notifications are enabled).

Authentication and service delivery: performance of contract (GDPR art. 6.1.b).

Push notifications: consent (GDPR art. 6.1.a).

Security and abuse prevention: legitimate interest (GDPR art. 6.1.f).

Data is processed by OVERRIDE and its technical sub-processors:

The Constant Company, LLC (Vultr): server hosting — account data and content you create (datacenter in Paris, France).

Resend, Inc.: transactional email delivery — email address, verification codes (United States).

Google LLC (Firebase Cloud Messaging): push notification delivery — device tokens (EU/United States).

RevenueCat, Inc.: subscription management — user identifier, purchase history (United States).

PostHog, Inc.: product analytics — user identifier, usage events (hosted in the EU, eu.posthog.com).

Functional Software, Inc. (Sentry): server error monitoring — technical request identifiers (request id, path, HTTP method) (United States).

Account data is retained as long as the account is active. Account deletion erases your data from our database immediately; technical backup copies are overwritten within 30 days at most, except where retention is required by law.

How to delete my account

Under the GDPR you have the right to access, rectify, erase, object to, restrict, and port your data. Exercise them at legal@listable.overridedev.com.

You may also lodge a complaint with the CNIL (cnil.fr).

Core data is hosted in France. No transfer outside the EU is performed for the base service. Optional features that involve sub-processors located outside the EU (e.g. push notifications, in-app purchases) rely on the European Commission's Standard Contractual Clauses.