Version 2026-10-17 · Draft pending legal review

Privacy

What Listral reads, what it keeps, and what it never touches. This is written to match how the product works today.

What we collect

Your account details; the tickets you hold and list (events, sections, rows, quantities, costs, prices, sales); the connections you add (marketplace and point-of-sale API keys, ticket-account logins you choose to store); and confirmation emails from known ticket senders.

Your inbox

When you connect Gmail or Outlook you grant read-only access. We search only for mail from a fixed list of ticket senders (for example Ticketmaster, AXS, SeatGeek, StubHub, Vivid Seats, TickPick) and exclude their marketing addresses. Mail from anyone else is not returned to us and is not stored. We never send mail from your account and never see your Google or Microsoft password. You can disconnect at any time from Accounts.

Credentials

API keys and any ticket-account passwords you store are encrypted at rest. A stored password is shown only when a team member presses Show login, and each view is logged.

How we use it

To price your tickets, show recommendations, record purchases and sales, and deliver orders. Listral gives recommendations only; it does not reprice listings on its own unless you turn on auto-push for a connection.

Aggregated market data

Listing prices and sales from your account may be combined with other sellers' data into anonymised, aggregated market statistics, which we may use and may license to third parties. Details and your choices are in the Data sharing page.

Service providers

We use hosting and infrastructure providers (including Vercel, Supabase, Railway), Composio for inbox connections, and Resend for email. They process data only to run Listral.

Retention and deletion

Ask us to delete your account and we remove your data, except what we must keep for legal or accounting reasons. Anonymised aggregates that no longer identify you may remain. Contact us through the request-access form on this site.