Privacy Policy

1. Who is responsible and how to contact us

Turbo List is responsible for the purposes and means of processing personal data within this service. For questions, access requests or deletion requests, contact the site operator at miclab82@gmail.com. This is also our support contact.

This notice identifies the service by its trading name, Turbo List. The operator’s legal name and postal contact address have not yet been supplied for publication; they should not be inferred from the brand or email address.

2. Information we collect

• Account information: your email, account identifier, name and profile image when supplied, account creation and confirmation dates, sign-in activity, and service usage information. Email/password registration uses a password handled by our authentication service. Google sign-in may supply your name, email and profile image; we do not receive your Google password.
• Photos and listing information: the product photos you select, your chosen listing language, generated or edited titles and descriptions, product attributes, hashtags and suggested prices. A photo can contain personal data such as a face, a label with an address or location details; avoid including these.
• Saved history: listings and photos you choose to save, their creation dates and the account they belong to.
• Trial information: a random browser identifier and server records of generation attempts and their status, used to enforce the one-listing anonymous trial. This trial mechanism does not use a device fingerprint or an IP address as its identifier.
• Technical and usage information: hosting and service providers may process IP addresses, request details, browser/device information, timestamps, errors and security logs. Where permitted, analytics records page views and actions such as upload, generation, copying, saving and account access.
• Preferences and correspondence: your cookie choices, approximate country used to apply tracking rules, the date and version of those choices, and information you send when contacting support.

Account and photo information comes from you, or from your chosen sign-in provider. Technical information is created when your browser requests the service. Turbo List does not ask for payment-card details in its current free service.

3. How we use information and the legal bases

Where GDPR or equivalent rules apply, we distinguish the following purposes and legal bases:

• Providing the requested service: authenticate you, generate listing drafts, maintain your account and save your chosen history. This processing is necessary to perform the service you request, including steps taken at your request before entering into that relationship.
• Security and abuse prevention: enforce the anonymous trial, protect accounts, investigate errors and misuse, and keep the service functioning. These activities serve our legitimate interests in a secure, sustainable service, balanced against users’ rights. Essential browser storage is used to deliver these functions.
• Support: respond to service questions and privacy requests. The basis is providing the requested assistance, our legitimate interest in resolving problems, or a legal obligation where applicable.
• Optional analytics and advertising: measure use or load advertising according to your separate choices. We rely on consent where required; where local rules permit tools without prior consent, regional defaults and opt-outs apply as described below. Permission for analytics is not permission for advertising.
• Legal responsibilities: respond to valid legal requests and preserve information when applicable law requires it.

You can browse public guides without an account. Photos are needed to generate a photo-based draft; account details are needed for further generation and saved history. Refusing optional cookies does not prevent use of these core functions.

4. Photos and AI processing

When you request generation, selected photos and instructions, including the language choice, are sent through Lovable AI Gateway to Google Gemini. Our generation prompt does not include your account email or user identifier. The providers still process the request content and associated technical information to deliver the AI response.

Generation alone does not save photos to your Turbo List history. Photos are uploaded to history storage when you choose to save a listing. Temporary registration drafts contain only listing text and selected language, not photos.

We have not established a specific provider-side retention period or a no-training guarantee for AI requests in this notice. Do not assume that content is instantly deleted by every provider. Avoid uploading identity documents, sensitive personal information or photos of others without permission.

AI produces suggestions, not verified product facts or guaranteed sale prices. Review the result before publishing. Turbo List does not use these suggestions to make automated decisions with legal or similarly significant effects about you.

5. Who receives information

• Lovable Cloud and associated infrastructure: hosting, account authentication, database, private photo storage, service diagnostics and platform-provided site analytics.
• Lovable AI Gateway and Google Gemini: processing the photos and instructions needed for generation.
• Google sign-in: handling authentication if you choose that method.
• Google Analytics and Google AdSense: receiving browser, network and usage information only when the corresponding tools are allowed to load under our controls.
• Authorised administration: the site administrator can view account summaries, including email, signup/confirmation dates, last sign-in and saved-listing counts, to manage the service and understand registrations. This directory is not public.
• Support and legal recipients: the email service handling correspondence and authorities or advisers where needed to fulfil legal obligations or address a valid claim.

Your saved listings are not a public catalogue. They are restricted to your account under the service’s access controls. Turbo List does not automatically publish your photos or listings to Vinted, Depop, eBay or another marketplace. If you copy and publish a draft elsewhere, that service’s privacy policy applies.

6. Cookies and browser storage

Cookies are small browser records sent with requests. Local storage persists in your browser; session storage is limited to a tab. We use the following categories:

Necessary storage is not controlled by optional-cookie switches. You can remove it in your browser, but doing so may sign you out, clear preferences or interrupt the service.

7. Analytics and regional controls

Google Analytics and optional Turbo List events help us understand whether visitors generate, copy or save a listing and create accounts. Our explicit event fields include action type, photo count, chosen language, sign-in method, whether a visitor is signed in, and the screen on which an action occurred. We do not put emails, names, account identifiers, photos or listing text into these event payloads. This does not mean provider-side technical data is anonymous.

Our custom Google page-view events use the page path and, when present, restricted campaign labels (utm_source, utm_medium and utm_campaign) to understand where visits come from. Other query parameters and fragments are excluded. External referrers are reduced to the referring website’s origin; internal navigation uses only the prior page path. Do not put personal information in campaign labels. Google may additionally process browser identifiers and device/network information under its own practices. Lovable provides separate hosting diagnostics and site analytics; the cookie controls described here apply to the optional tools integrated by Turbo List and are not a claim that all infrastructure logs stop.

We use an approximate country lookup through the hosting service to apply regional rules. In consent-required or unresolved regions, optional analytics stays off until you accept. Elsewhere it may operate by default unless you refuse. We honour Global Privacy Control, Do Not Track and saved opt-outs in these optional-tool controls.

8. Advertising services

Turbo List includes a Google AdSense integration. Integration or submission for review does not mean Google has approved the site or that ads are currently being displayed. When advertising is permitted and enabled, Google and its advertising partners may use cookies, IP addresses, browser identifiers and information about visits to this or other sites to serve, measure and, where permitted, personalise ads.

Advertising and analytics are separate choices. Google advertising remains blocked in regions requiring a Google-certified consent management platform until that platform is configured; accepting advertising in our custom preferences does not bypass that restriction. We do not send account emails or listing content for customer matching.

Read Google’s Privacy Policy, how Google uses information from partner sites and Google’s advertising information. You can also manage Google ad personalisation at My Ad Center. These provider settings do not replace Turbo List’s cookie choices.

9. Change or withdraw your choices

Use Cookie settings, available on every page, to reject optional tools, accept them or set analytics and advertising separately. You can change your mind at any time. Saving preferences reloads the page and other open tabs so previously loaded optional tools stop. Withdrawal does not undo processing that already occurred or automatically erase provider cookies or previously collected data.

Choices expire for permission purposes after 180 days, or become invalid if the notice version changes. Dated choice history remains in this browser until cleared; it is not a central server-side consent register. To remove existing cookies or local records, use your browser’s site-data controls. You may need to choose preferences again afterwards.

10. Retention and deletion

Account information and saved history are retained while your account and saved content remain in the service. There is no automatic inactivity-based deletion period currently set. You can remove listing records in History or ask us to delete your account.

Deleting a listing record does not currently guarantee deletion of every associated stored photo. For removal of stored photos, include that request when contacting us. The one-year trial cookie duration is not a database deletion schedule: trial records currently have no automatic deletion period. Browser draft and preference durations are listed above.

We have not verified fixed retention schedules for infrastructure logs, backups, AI-provider requests or Google service data. These may remain under provider policies, service settings and applicable legal requirements after removal from the active service. We cannot promise immediate deletion from every backup or third-party system. Contact us for the information available about a specific record or request.

11. International processing

Cloud, AI, authentication, email and Google services may process information outside your country, including outside the European Economic Area or United Kingdom. Applicable safeguards may include adequacy decisions or contractual transfer safeguards, depending on the provider and service. We have not verified a complete list of processing locations and transfer mechanisms for every provider in this notice. Contact us to request the available details; we do not guarantee that all data stays in one country.

12. Security

The service uses authenticated access controls for saved listings, owner-scoped photo access, protected administrator access and secure connections where HTTPS is used. No online service can guarantee absolute security. Protect your sign-in details and avoid putting sensitive information in product photos or listings. Report a suspected security or privacy problem through our contact page.

13. Your privacy rights

Depending on where you live and the applicable law, you may have rights to access your personal data, correct it, request erasure, restrict processing, obtain a portable copy, object to processing based on legitimate interests, and withdraw consent. Rights are subject to legal conditions; withdrawal does not affect the lawfulness of earlier consent-based processing.

Email miclab82@gmail.com, preferably from your account email, and explain the request. Do not email a password or identity document unless a secure verification method has been agreed. We may need proportionate proof of ownership and will respond within applicable legal deadlines, normally one month for GDPR requests, with any permitted extension explained.

You can complain to your local data protection authority. In Italy, this is the Garante per la protezione dei dati personali. You do not have to contact us first to exercise that right.

14. Children and other people’s data

Turbo List is a general-purpose seller tool, not a service directed at children. Do not upload children’s personal data or other people’s sensitive information. If you believe a child has supplied information without legally required permission, contact us so we can investigate and take appropriate action.

15. Changes to this policy

We may update this policy when the service, providers or data practices change. The date above identifies the latest revision. Where required, we will provide an additional notice or request a new choice before new consent-based processing. Also see our Terms of use and About Turbo List.