Last updated: November 5, 2026
The short version: we collect what's needed to run your account and process your images, your images go to an AI provider only to be recreated and are deleted within hours, and nothing is sold or used to train anything. The long version is below. Data controller: Listen LLC, Germany.
To provide the Service (process your images, meter your plan), to bill, to secure accounts and prevent abuse, to fix problems, and to send you service messages about your account. Marketing email only happens if you opt in, and every one has an unsubscribe link that works.
Legal bases under the GDPR: performance of contract (running your account), legitimate interest (security, service improvement), consent (marketing), and legal obligation (invoicing and tax records).
To recreate an image we send it to a third-party AI inference provider, which runs the image model and returns the result to us. The provider acts as our processor and is contractually prohibited from using your images for anything but producing your result. We do not use your images or results to train AI models. Processing may take place outside the EU; where it does, transfers rely on recognised safeguards such as Standard Contractual Clauses.
Your upload is held in memory only for the duration of processing. The recreated file is kept on our server for up to 6 hours so you can download it, then deleted automatically.
Cloud hosting for the application and its database (EU), the AI inference provider described in §3, a payment processor and merchant of record for purchases (Paddle), and an email provider for account messages. Each acts as a processor under our instructions and a data processing agreement. A current list is available on request at the contact address below.
Account and usage data are kept while your account exists; when you delete your account, they are deleted within 30 days, and billing records are retained only as long as tax and commercial law require. Image files follow the 6-hour rule in §3.
The Service uses cookies that are necessary for it to function: keeping you signed in, and remembering your theme choice. No third-party advertising cookies.
Under the GDPR (and equivalent laws elsewhere) you can request access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. You can withdraw consent at any time, and you have the right to lodge a complaint with a supervisory authority — in our case, the data protection authority of Saxony, Germany. To exercise any of these, email us; we respond within 30 days.
Data in transit is encrypted (TLS), access to production systems is restricted and key-based, and passwords are stored hashed. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.
The Service is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.
Material changes to this policy will be posted here with a new date, and account holders will be notified by email. Questions or rights requests: Wiz@ListenTechnology.ai — Listen LLC, Germany.