Security at ListingAI
How we protect your account, your listings and your payments. ListingAI is a small, founder-run product, and we describe only what we have built and tested.
Last updated: November 5, 2026
Your account and data
How your account and data are handled.
- Every database table has row-level security, so each account can only reach its own data.
- Server routes check your sign-in before returning anything.
- Secret keys (database admin, payments, AI) live on the server only and are never sent to your browser.
- Our database provider, Supabase, encrypts stored data at rest (AES-256).
- Review comments are shown as plain text, and your email address is never displayed.
Payments
How your payments are handled.
- Payments are handled by Polar, our merchant of record.
- Card details are entered on Polar’s checkout page, never on ListingAI.
- Payment notifications from Polar are signature-checked, and anything that fails the check is rejected.
Platform security
How we protect the site and sign-in.
- HTTPS only. Plain HTTP requests are redirected, and HSTS is enforced.
- Modern encryption in transit (TLS 1.2 and 1.3).
- Standard browser security headers are set on every page.
- Bot protection (Cloudflare Turnstile) on sign-in, sign-up and password reset requests, plus request rate limits.
- Inputs are validated and length-limited, and our AI prompts include instructions to ignore attempts to override them.
- Error messages are generic, and personal details are redacted from our payment logs.
- Dependencies are monitored with GitHub Dependabot and npm audit, and we apply the fixes that are available.
AI and Fair Housing
How the AI is used and what we ask of you.
- Content is generated by Claude, an AI model from Anthropic.
- Under Anthropic’s commercial terms, content we send through our API connection is not used to train Claude.
- Fair Housing safeguards run on every generation. Please review all content before publishing.
How we review security
We reviewed ListingAI ourselves against an OWASP-based checklist. This is our own review, not an outside certification.
Frequently asked questions
How do I report a security issue?
Email support@joinlistingai.com with what you found and how to reproduce it. We read every report.
Do you store my card number?
No. Polar processes payments, and card details are entered on Polar’s checkout page. We only keep your plan, subscription status and renewal dates.
How does ListingAI use my data?
We use your information to sign you in, generate your content, manage your plan and send you account emails. We do not sell your data. We share it only with the service providers listed in our Privacy Policy, and only as needed to run ListingAI.
Is my content used to train AI models?
Under Anthropic’s commercial terms, content we send through our API connection is not used to train Claude.
Can I delete my account and data?
Yes. Email support@joinlistingai.com and ask us to delete your account and associated data.
How are my payments protected?
Polar is our merchant of record and runs the checkout. Payment notifications from Polar are signature-checked, anything that fails the check is rejected, and personal details are redacted from our payment logs.
Can other users see my data?
Each account can only reach its own data. Every database table has row-level security, and our server routes check your sign-in before returning anything.
Is my data encrypted?
Yes, in transit and at rest. The site is HTTPS only with HSTS, using TLS 1.2 and 1.3, and our database provider, Supabase, encrypts stored data at rest (AES-256).
How do you protect against bots and abuse?
We use Cloudflare Turnstile bot protection on sign-in, sign-up and password reset requests, plus request rate limits. Inputs are validated and length-limited.
What are your Fair Housing safeguards?
Fair Housing safeguards run on every generation. They are not a guarantee, so please review all content before publishing.
What information can the AI see?
The AI receives what you enter in the generator form, such as property details, names, and any contact details you add (for example an agent phone number on an open house flyer). We send it to Claude, an AI model from Anthropic, to write your content. Please avoid entering personal or sensitive information about other people beyond what your content needs.
More detail on how we handle your information is in our Privacy Policy.