Privacy Policy

Last updated: August 31, 2026

QuickLister ("we", "us"), operated by 503 Wholesale, turns your product photos into ready-to-post marketplace listings. This policy explains what we collect, how we use it, and the choices you have.

What we collect

• Account information - your email address and a securely hashed (never plaintext) password.
• Photos you upload - the item photos you submit for a listing run.
• Generated content - the titles, descriptions, prices, attributes, and processed images QuickLister creates from your photos.
• Usage data - job history, credit balance and ledger, and basic technical logs needed to operate and secure the service.
• Payment information - handled by our payment processor (Stripe). We do not store your card number; we keep only a record of the purchase (amount, credits, status) and, for Professional, the subscription status.
• Depop sales data (Professional) - if you use the sales dashboard, the extension reads your own Depop receipts and we store per-sale records: order id, item title and SKU, sale date, amount paid and your payout, shipping status, and the buyer's public username. We never store buyer addresses or contact details.
• Dropbox connection (Professional) - if you link a Dropbox, we store your Dropbox app key, secret, and refresh token encrypted at rest, and use them only to read your listing input folder and write finished listings to your output folder.

How we use it

• To generate your listings - your photos are processed by Anthropic's Claude API to detect items and write listing content.
• To operate your account, track credits, and provide support.
• To process payments and prevent fraud and abuse.
• To send transactional email (verification and password reset). We don't send marketing email without your consent.

Service providers

We share data only with the processors needed to run the service, each under their own terms:

• Anthropic - AI processing of your photos to generate listings.
• Cloudflare R2 - storage of processed images.
• Stripe - payment processing.
• Resend - transactional email delivery.
• Railway - application hosting and database.
• Dropbox - only if you link it; we access the folders you configure and nothing else.
• Depop - listings and sales sync happen through your own logged-in Depop session in the extension; QuickLister's servers never hold your Depop login.

We do not sell your personal data.

Image links

To import a listing, marketplaces like Depop fetch your images by URL. QuickLister therefore stores your processed images at unique, hard-to-guess web addresses and includes those links in the CSV you export. Anyone with a specific link can view that image, but the links are not listed publicly or guessable.

Browser extension

QuickLister offers an optional Chrome extension, QuickLister → Depop Uploader, that submits the listings you build to Depop from your own logged-in Chrome. Its single purpose is to let you post your own listings to your own Depop account, at your request. Specifically:

• The extension runs entirely in your browser and acts only on your own Depop account while you are logged into it. It uploads the listing CSV and images you generated in QuickLister to Depop's own listing tools, and can publish, schedule, or delete your listings when you ask it to.
• It never receives, reads, stores, or transmits your Depop password or login credentials. It relies on the session Depop already established in your browser; those credentials never reach QuickLister's servers.
• Using Chrome's storage permission, it saves only your automation preferences (such as engine choice, pacing, and schedule plan) locally in your browser.
• It communicates with QuickLister's servers only to fetch your own listing data (the CSV and images you created) and to receive the listing actions you queued from your dashboard. It does not collect your browsing history or activity on other sites, and does not sell or share any data with third parties.
• For Professional accounts it can also read your own Depop sales receipts and send the fields listed above to your sales dashboard. It strips buyer addresses before anything leaves your browser.
• Installing the extension is optional; you can remove it at any time from Chrome's extensions page.

Retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated data - photos, generated listings, and job history - at any time from your dashboard (Delete account), or by emailing us. Deletion is immediate and irreversible. Some minimal records (e.g. payment/transaction records) may be retained where required for legal, tax, or accounting purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can exercise deletion directly in the app, or contact us for any other request.

Security

Passwords are hashed with Argon2, sessions use signed secure cookies, and requests are protected against CSRF. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

QuickLister is not directed to anyone under 16, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions or requests: 503wholesalellc@gmail.com.