Cuneiform LLC ("ClearList," "we," "us," or "our") operates the ClearList platform at clearlist.me. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Information We Collect
Information You Provide
- Email address — used for account creation, passwordless authentication, and communication about your reservations or sales.
- City and state/country — provided when you publish a sale page, displayed publicly to help buyers find local sales.
- Street address (optional) — stored in your settings and only shared with a specific buyer when you explicitly confirm via the "Share Address" button.
- Photos of items — uploaded to create AI-generated listings. Stored securely in cloud storage.
- Messages — communications between sellers and buyers within the ClearList inbox.
- Payment information — processed securely by our third-party payment processor. We do not store your credit card details.
Information Collected Automatically
- Device and browser information — browser type, operating system, screen resolution.
- Usage data — pages visited, features used, timestamps.
- IP address — used for rate limiting, fraud prevention, and approximate geolocation.
- Cookies and local storage — used for authentication sessions and storing temporary data (such as try-before-signup listing data).
2. How We Use Your Information
- To create and manage your account (passwordless email authentication).
- To process your item photos through AI to generate listings (titles, descriptions, pricing, dimensions).
- To display your sale page publicly so buyers can browse and reserve items.
- To facilitate communication between sellers and buyers.
- To send transactional emails (reservation confirmations, pickup scheduling, expiry reminders).
- To process payments through our third-party payment processor.
- To prevent fraud, abuse, and enforce rate limits.
- To improve our services and fix technical issues.
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following legal bases:
- Contract performance — processing necessary to provide the ClearList service (account management, listing creation, reservation handling).
- Legitimate interest — fraud prevention, service improvement, and security.
- Consent — where required, such as for push notifications or optional marketing communications. You may withdraw consent at any time.
4. How We Share Your Information
We do not sell your personal data. We share information only in these circumstances:
- With buyers — your city/state and item listings are publicly visible on your sale page. Your street address is shared only when you explicitly confirm via the Share Address button.
- Service providers — we use third-party services to operate ClearList, including cloud hosting (Vercel), database and storage (Firebase/Google Cloud), AI processing (Google Gemini), email delivery (Resend), and payment processing. These providers process data on our behalf and are bound by data processing agreements.
- Legal requirements — if required by law, regulation, or legal process.
5. Data Retention
- Active accounts — your data is retained while your account is active.
- Expired sale pages — item data and photos are retained for 90 days after expiry, then deleted.
- Reservations — reservation data is retained for 90 days after completion or cancellation.
- Account deletion — upon request, we delete your account and associated data within 30 days, except where retention is required by law.
6. Your Rights
All Users
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Opt out of non-essential communications.
EEA/UK Residents (GDPR)
- Right to data portability (receive your data in a structured, machine-readable format).
- Right to restrict processing.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent at any time.
- Right to lodge a complaint with your local data protection authority.
California Residents (CCPA)
- Right to know what personal information we collect, use, and disclose.
- Right to delete your personal information.
- Right to non-discrimination for exercising your privacy rights.
- We do not sell personal information as defined by the CCPA.
To exercise any of these rights, contact us at hello@clearlist.me. We will respond within 30 days (or sooner where required by law).
7. International Data Transfers
ClearList is operated from the United States. If you are accessing our services from the EEA, UK, or other regions with data protection laws, your data may be transferred to and processed in the United States. We rely on standard contractual clauses and other appropriate safeguards to ensure adequate protection of your data during international transfers.
8. Security
We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure cloud infrastructure, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at hello@clearlist.me.
9. Children's Privacy
ClearList is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we may also notify you via email.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at:
Cuneiform LLC
Email: hello@clearlist.me