Privacy

Who we are

Flash Listings is run by Flash Software Ltd, a company registered in England and Wales with company number 17500154. Our registered office is Lanchester House, Montgomery Street, Birmingham, B11 1DT. We decide how your information is used, which makes us its controller under UK data protection law. Write to us at owner@flash-listings.com.

What we hold

• Your account. Your email address and password, held by our sign-in provider (we never see the password), and your name and phone number if you give them.
• Your marketplace connections. The tokens that let Flash Listings act for the eBay, Amazon, Shopify and other accounts you connect, with their shop names and settings. They are encrypted on our server and never sent to a browser.
• Your listings and photos. The photos you upload, the titles, descriptions and item specifics written from them, and the listings you publish. Uploaded listing photos are deleted from our server after two days, once the marketplaces hold their own copies.
• Orders and sales. For each sale: the item, the quantity, the price and the date, read from your connected accounts to keep stock in step and show your figures. For Amazon, which orders' buyers were asked for a review from AI customer service and when (Amazon's order number only), kept 90 days so none is asked twice. Buyers' names, addresses, emails and payment details are never kept.
• Buyers' questions (AI customer service, on paid plans). The last 30 days of buyers' messages about your listings - each buyer's marketplace username and what was said - kept so the page opens at once. Replaced on every read from the marketplace and deleted with your account. With the Messages phone notification on, the questions waiting are read every 15 minutes, and eBay's number for each one already told is kept, so none is told twice.
• Payments. Cards are taken by Stripe on its own page, and we never see card numbers. We keep which plan and packs you bought, when, and your Stripe customer reference.
• Emails we send you. A welcome when you confirm your address, a thank-you when you start a plan or buy a pack, a receipt for every payment, and - if you have not turned on phone notifications - a reminder after five days without listing, and one when a listing you started has waited an hour without going live (named by the title you priced it with), which a link in each stops. We keep which we sent and when, and which of their links to this site you pressed, how often and when: those links pass through our site, which notes the press and sends you on. For a reminder we also look at whether you listed something later that day, to see whether the reminders help. We never record whether an email was opened, and links to Stripe go straight to Stripe.
• Use of the tools. What was made and when, how much of your allowance it used, and which AI step ran, so allowances can be counted and problems found.
• How you list, while Adapt the way I list is ticked in your profile (it is, until you untick it): the choices you make in the tools - what your photos are set to in Product shots, how many and which kinds, the crop you draw, and the condition, category, format, offers and postage a listing goes live with - and, for each of your last 150 items, its title's words and barcode or SKU, so a form can be filled in the way you listed it before. Never your photos, descriptions or anything else you type. Kept with your login only; Forget what it learned deletes it, and it is deleted with your account.
• Phone notifications, if you turn them on: the address your browser gives for sending them to that device.
• Messages you send us through the contact form or by email, and a custom plan you ask for: your email address, what you picked and your note, so we can email you its price.
• Visits to this site, only if you say yes in the cookie banner. Each page view is counted with the page, the site you came from, your approximate town and country, and your type of device and browser. On each page we also note how far down you scrolled, the headings you saw, and the buttons and links you pressed - by what they say, never anything you type - and, on the first page you open, how you found us (a search engine, an AI assistant, a social site, an advert, an email or another site; never what you searched for). No IP address is kept: visitors are counted by a code that changes every day and cannot be turned back into that address. A visit is kept with your account when you are signed in, or arrive from a link in one of our emails; otherwise it cannot be traced back to you.
• Which of our posts or adverts brought you, only if you said yes in the cookie banner. When you open the site from one of our posts or adverts, the link's tags - which post or advert it was, on which site, the search word for a Google advert, and Google's code for that click - are kept in your browser for up to 90 days. If you make an account, they are kept with your account, once, so we know which of our marketing brings people who stay.
• A click on one of our Google adverts, whatever you choose in the cookie banner: the page it opened and which advert it was. Nothing about you or your device, and nothing stored in your browser.
• The free trial (Trial now, without an account): the photo and title you give, kept for two days, and - so each person has one free trial - a code made from your internet address (never the address itself) and a random id your browser keeps. The finished listing - its title, description, category, price, item specifics and the five photos made from yours - is kept for 120 days so we can see how the trial went, then deleted. Only our admin sees it, and nothing in it says who you are.

Signing in sets one cookie, which keeps you signed in; the free trial sets two, which remember that this browser has had it. Google's ad tag loads too, with its cookies off until you say yes in the cookie banner. With that yes, Google Ads can tell us when somebody who clicked one of our adverts made an account or paid; Google sets its own cookies for it. Without the yes it never loads. The full list, and your choice about counting visits, is in the cookie policy.

How we use it to make the service better

If you say yes to counting visits in the cookie banner, the site also notes what happens as you use it: which tools you open, whether a step worked, failed or was left part-way, that an error was shown (what kind, never its words), how long you waited, a button pressed again and again, and the steps of the free trial and of signing up (a sign-up form's error by its kind only). Never a recording of your screen, and never anything you type - no form, password, message, listing words or buyer's details.

With what the service already keeps to do its job - the listings you put live, the AI's work for you, your plan and payments, and problems you report - our AI reads this once a day (we call it Self improve) to find what to fix and build so the service works better for everyone and for you, and so we can help before something stops you. Visitors who have not signed up are only ever looked at as groups, never one by one. What the site notes this way is kept for 90 days, then deleted.

When a marketplace stops your connection, we may send you one note in the bell and one email saying how to connect it again. Every email of that kind has a link to stop them, and if you ask us to stop, we stop.

Who else sees it

Only the companies whose services do the work, and only what each needs:

• The marketplaces you connect, to read your listings, orders and settings, and to publish what you ask them to.
• AI writing services receive product photos, titles and descriptions to write listings from, your shop's figures when you ask a question about them, and our own records when we ask questions of them to run the business.
• AI image and video services receive product photos to make product shots, white backgrounds, upscales and videos from.
• Google Cloud Vision receives one of your product photos when you tick I don't know what it is in Product shots, to search the web for what the product is - only that photo, and only then.
• Stripe takes card payments and runs the page where you change your card and see your receipts.
• Hosting, database, sign-in and email providers run the service itself.

Some of these process information outside the UK. The name of every provider, and where it is, is available on request. Nothing is sold, shared for advertising (beyond the Google Ads measurement above, with your yes), or handed to anyone else.

Other sellers, on the leaderboard. Signed-in sellers see a leaderboard of how many listings people put live. On it you appear by your first name and the initial of your last name, with your country's flag and your counts - never your email, your shop or your listings. You can leave it at any time with Hide me from the leaderboard under the board. Some players on it are pacers: computer-run, not people.

If we emailed you about Flash Listings

We email businesses that sell online, using contact details they publish themselves. We keep the business name, the address we wrote to and what was sent, which of its links were pressed (its links pass through our site), and the pages of this site seen after pressing one, so we know who is interested. Until 10 October 2026 we also recorded whether an email was opened; we no longer do. Every email can be unsubscribed from, and if you ask us to stop, we stop.

How long it is kept

• Uploaded listing photos: two days.
• A free trial's finished listing and its photos: 120 days.
• Your account, connections, listings, figures and tool records: while your account is open. When it is closed they are deleted, apart from what the law requires us to keep.
• Records of payments: six years, as UK tax rules require.
• A marketplace can be disconnected at any time on your profile, which deletes its stored connection.

eBay account closures

eBay tells applications when someone closes their eBay account. We receive those notices and record them. In practice there is nothing to delete: what we hold about sales is item numbers, quantities and prices, never anybody's personal details.

Your rights

You can ask what we hold about you, and ask us to correct it, delete it, stop using it, or give you a copy to take elsewhere. Write to owner@flash-listings.com and we will answer within a month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.