Privacy policy

1. WHAT WE HOLD

There are no accounts on ListRun and no password to forget. A run token is the only credential, and it is only ever shown to whoever bought the run. What we hold is:

• What you type into the run form, your product name, its URL, a tagline, and a contact email. Every one of those values is typed into third-party directory forms on your behalf. That is the service, so treat the form as public copy about your product, not as private notes.
• What a run produces, one row per directory recording what was attempted, the outcome, a link to the listing where there is one, and screenshots of the form before and after it was filled. This is the receipt, and it is what you paid for.
• Ordinary web logs, the pages requested and the usual request metadata our host records. The free directory list needs no signup.
• Product analytics, including session replay: a reconstruction of how a page was used, clicks, scrolls, pointer movement, and which pages were opened in what order. Everything typed into a field is masked in the browser before it is sent, so text you enter is never captured. It exists so that a flow which breaks for someone can be watched back and fixed rather than guessed at. Recordings are processed by PostHog and deleted after 30 days.

2. WHAT WE DO WITH IT

We use it to:

• Fill directory submission forms with the values you gave us.
• Email you the run token, and answer questions you send to hello@thecompound.tech.
• Keep the directory list accurate, the daily sweep records what each directory returned.
• Take the one-off payment through Stripe and keep the record of it.
• Meet our legal and tax obligations.

3. WHO ELSE SEES IT

We do not sell, rent or trade your data, and we never add you to a list you did not ask for. It reaches exactly three kinds of third party:

• The directories themselves. Your product name, URL, tagline and contact email go into their submission forms. That is the entire point of a run, and the receipt names every directory it happened to.
• Our processors: Stripe for payment, Vercel for hosting, Supabase for the database, and PostHog for product analytics and session replay. We add no advertising vendor and run no ad network.
• A court or regulator, if we are legally required to hand something over.

Card details never touch our servers, Stripe takes the payment and we store only the identifier it returns. Screenshots and run records live in our own database and are not published; a receipt page is reachable only by its run token, and those pages are marked no-index.

4. YOUR RIGHTS

You can ask us to:

• Send you everything we hold about your run.
• Delete your run, its product record and its screenshots. Note that we cannot un-submit a listing that already went live on someone else's site, you would need to ask that directory directly, and the receipt tells you which ones to ask.
• Stop emailing you anything other than the receipt for a run you bought.
• Correct anything we got wrong.

Email hello@thecompound.tech and a person answers.

5. CHANGES

If this policy changes, the current version is always the one on this page, with a new last-updated date.