Privacy Notice

Last updated: 5/24/2026

1. Who we are

Tumerok Technologies LLC ("we", "us") operates DPK Listings and acts as the data controller for the personal data described here.

2. Data we collect

• Account data: name, email, login credentials.
• Listing content: photos and text you upload to generate listings, and the resulting drafts.
• Usage data: generations count, plan, timestamps, device & browser info, IP address.
• Support data: messages you send us.

3. Why we use it

• Provide the service (account, listing generation, history).
• Enforce plan limits and prevent abuse.
• Improve product quality and security.
• Customer support.
• Comply with legal obligations.

4. Legal basis

We process data to perform our contract with you (provide the service), based on our legitimate interests (security, product improvement), with your consent where required, and to comply with legal obligations.

5. Who we share data with

• Subprocessors: hosting, database, file storage (Supabase); AI inference providers (OpenAI / Google) for listing generation.
• Merchant of Record: Paddle handles sale, subscription management, payments, tax compliance, and invoicing. See Paddle's privacy notice: paddle.com/legal/privacy.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

6. International transfers

Our subprocessors may process data outside your country. Where required, we rely on safeguards such as Standard Contractual Clauses or equivalent adequacy mechanisms.

7. Retention

We keep account and listing data while your account is active. If you cancel or delete your account, we delete or anonymize personal data within a reasonable period unless we must keep it for legal or accounting reasons.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, port, or object to processing of your data, and to withdraw consent. To exercise these rights, contact us. You also have the right to complain to your local data protection authority.

9. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, audit logs) to protect personal data. No system is 100% secure — please use a strong, unique password.

10. Cookies

We use essential cookies (session, auth) needed to operate the service. We don't use marketing cookies.

Questions? Contact us through support.