Your products are yours. Here is exactly where they sit.

Who we are

ZoraLister is published by Zora Software, a small independent software business in the United States. For anything on this page, write to support@zoralister.com.

ZoraLister for Windows (the app you install)

ZoraLister for Windows is a desktop program. Everything you put into it is stored on your own computer, by default in Documents\ZoraLister: a database file, a folder of your product photos, and the marketplace templates you dropped in, exactly as you downloaded them.

• It connects to us in exactly one situation. If you turn on image push and export a file, the app sends a copy of each product photo that has no link of its own to img.zoralister.com — and nothing else. Not your products, prices, descriptions, templates or the finished file. Leave image push off and the app makes no connection to Zora Software at all. The window you see talks only to the program itself, on your own machine; it is not reachable from your network or the internet.
• No account. You do not register, sign in, or give us an email address to use the app.
• No telemetry. The app does not report what you do, what you list, how often you use it, or when it fails.
• Your originals are never altered. Photos you import are kept untouched; resized copies are made beside them.
• Uninstalling leaves your data alone. The installer places program files only. Your data folder stays until you delete it yourself, and deleting it removes everything the app ever stored.

The app's window is drawn by Microsoft's WebView2 runtime, a part of Windows that Microsoft maintains and updates under its own privacy statement. When you upload a file ZoraLister made to a marketplace, that marketplace's own privacy policy and seller terms apply to what you send it.

Photo delivery on the desktop app (image push)

This section is about ZoraLister for Windows. What "published" means is the same for both products and is spelled out below; what differs here is that the desktop app sends a copy of the photo to our delivery service, because the photo is on your computer and not on our server — and that it is off until you turn it on.

Marketplaces will not accept a photo file in a bulk upload; every image column wants a web address they can fetch. A photo on your PC has no such address, so ZoraLister offers two ways around it, and you can mix them freely.

• Your own links (ZoraLister for Windows). If a photo already lives on your shop or your own site, put that address on it in the Catalog. Nothing is sent anywhere and none of the rest of this section applies to you. In ZoraLister Online there is nothing to paste: a photo that already had its own web address keeps using it in upload files, and on eBay when the address is secure (https); Etsy is always sent the photo itself, and every other one is published as described under Photos.
• Image push. A copy of the photo goes to img.zoralister.com, that temporary address is written into your upload file, and the copy is deleted automatically.

If you use image push, this is exactly what it means:

• Only photos. Product images, and only ones with no link of their own. Never your products, prices, descriptions, notes, templates or the finished upload file.
• Only when you export. Nothing is sent while you are simply working in the app.
• Deleted on a timer you choose. Seven days by default, one day at the shortest — because Amazon can keep retrying a photo for a day or two. You can take them down immediately from the Exports screen, and the app shows how many are out at any moment.
• Deleted twice over. The service stops serving a photo the moment it expires, and the storage deletes it independently after 31 days, so nothing can quietly linger if a record is ever lost.
• Not findable. Addresses are random, there is no index or listing, and nothing in them identifies you or your products. They appear only in your own file and in the marketplace’s fetch logs. Most marketplaces copy the image to their own servers, so shoppers see the marketplace's copy. An eBay listing using the address is the exception, below.
• We do not look at them. They are not scanned, cataloged or used for anything but being fetched, and they are marked to be ignored by search engines and AI crawlers.

Image push is off until you turn it on, and the app asks you once, plainly, before it sends anything. What you may send is covered by the terms of use; to report an image, write to abuse@zoralister.com.

ZoraLister Online (the hosted service)

ZoraLister Online is a separate product, sold separately: you sign in with a browser and there is nothing to install. The trade is the honest one — your products are on our server rather than your PC — and here is exactly what that means. Anyone can sign up for it, at app.zoralister.com/signup; some accounts are also made by us, for sellers we invite. This page says what the service does today. Owning ZoraLister for Windows does not give you an account here, and an account here is not a license for the Windows app.

What we store

• Your sign-in. Your email address, a password that is stored only as a one-way hash (we cannot read it and cannot tell you what it is), the same one-way hashes of your last nine passwords with the date you set the current one (so a password is not reused, and is changed once a year), and — if you turn two-step sign-in on — the key your authenticator app uses and hashes of your ten recovery codes. If you add a passkey (Face ID, a fingerprint, Windows Hello or a security key): its public key, its id, a counter, the name you gave it (such as "iPhone"), the model number your device or password manager reports for it, how it connects (built in, USB or Bluetooth), whether it can be and is synced, and when it was added and last used; adding, removing and failing to use one go into the record of what happened below. Your face and fingerprint never leave your device and never reach us — your device only tells us that it checked them. Each passkey also carries a random number that stands for you, never your email address. Also when you last signed in, and a count of failed attempts, so an account can be locked after too many. And, in the running app's memory only, when you last did something and on which screen (such as Listings), so we can see who is online and never restart the service in the middle of someone's work; it is written nowhere, and every restart forgets it.
• Your products. Products, variants, SKUs, barcodes, prices, costs, quantities, weights, sizes, descriptions, tags, your private notes, the photos you upload, and a video for a product if you add one (kept exactly as you uploaded it), and its personalization - the instructions, letter limit and extra charge you set for the box a buyer writes in. When you rotate or crop a photo in ZoraLister Online, the edited copy is kept beside your original, which is never changed; it goes when you press Back to the original or remove the photo (a copy already handed to a marketplace stays at its address until that address runs out).
• Counting stock with the camera (Scan stock): where your browser can read barcodes, the camera is read in the browser itself. No picture or video leaves your phone or computer — only the barcode or SKU it read is sent, to find the product, and the counts you save. The camera turns off when you close Scan stock or leave the page.
• Your marketplace work. The template files you drop in, kept exactly as you downloaded them; the categories you added; your listing profiles; the drafts built from them; and the upload files ZoraLister writes, which are copies of your own template with your listings in them.
• A record of what happened. Sign-ins and sign-in failures, two-step being turned on or off, password resets, templates imported, drafts built, files written, photo links taken down, ZoraLister for Windows downloaded (if we have invited you to try it) — and anything ZoraLister staff do to your account. It is there so "was my account used?" and "who changed my plan?" have answers.
• Your account's plan, any limits set on it, and notes we write about supporting you - and, if you pay, the id of your PayPal subscription and the date you have paid through (see Paying with PayPal).
• Where you sell, if you tell us (TikTok Shop, eBay, Etsy, Amazon, Shopify): only so ZoraLister reminds you of what is left to set up for those marketplaces, and nothing for the rest. Change or clear it on the Account page.

What we do not store: your customers, your payment details, or your marketplace passwords. ZoraLister does not ask for any of them and has nowhere to put them. Your sales are read only if you connect eBay or Etsy, and only the items sold - never who bought them (see below). (If you connect your eBay account or your Etsy shop, the marketplace gives us access keys instead of your password — see below.)

If you connect your eBay account

Connecting is your choice, made on the Account page, and nothing about your eBay account is stored until you agree. When you press Connect eBay, you sign in on eBay's own page — we never see your eBay password — and eBay asks whether ZoraLister may have access. If you agree, eBay hands us two keys for your account: a short-lived one that ZoraLister uses, and a longer-lived one (about eighteen months) that renews it.

• What the keys allow: reading your eBay listings, your eBay account settings (such as your shipping, payment and return policies) and your eBay user name; since October 4, 2026, reading your orders (read-only, for your sales - below); and, since September 27, 2026, creating a listing on eBay — only when you press Send on the Listings page, and only for the products you checked there and have not changed since, and never for one that is on eBay already or went into an eBay upload file. What ZoraLister makes is an ordinary eBay listing, live on eBay once it is sent (eBay's own fees apply: the Listings page shows eBay's quote for listing it before you send, and eBay charges its selling fees when it sells, as on any listing); after that you can change it in Seller Hub like any other, or - since October 29, 2026 - change the product in ZoraLister and approve the change: ZoraLister then changes that listing, sending only the parts that differ from what it last sent (its title, description, photos, item specifics, choices, prices, quantities or policies), and only once you approve it. A listing you brought in from eBay is changed the same way (since October 29, 2026): only what you changed in ZoraLister since you brought it in goes - its title, description, condition, photos or choices - and never its item specifics, policies, category or where it ships from. One in eBay Motors that ZoraLister made (through eBay's Inventory API) is changed too, since October 31, 2026: it is sent again as ZoraLister makes it - eBay takes no Seller Hub edits on a listing made that way - with a quantity you did not change kept as eBay counts it. One in eBay Motors that you brought in is not changed from ZoraLister yet. A listing in an eBay Motors category goes through eBay's Inventory API instead (since October 14, 2026): for it ZoraLister also saves where it ships from (the town or ZIP code you gave) as a location on your eBay account, and eBay gives no quote before it is sent. ZoraLister never changes a listing without your approval, never ends, relists or deletes one, never buys anything, never changes an order, and never sees your payments; it reads your orders only for your sales (below), never who bought. An eBay account connected before sending was added stays read-only until you press Connect eBay again, when eBay asks you to allow the one more thing.
• What we keep: the two keys, encrypted — with a key of our own kept apart from the database and from its backups, so a copy of the database alone does not give anyone your eBay access; your eBay user id and user name, so the Account page can say which eBay account is connected; and when you connected. You may connect more than one eBay account (from October 28, 2026): each has its own keys, kept the same way, and for each we keep its eBay user id and user name, the nickname you give it (if any), its own business policies, and any SKU you give a product for that one account - and each listing is sent to the one account you choose, never to two. For sending, we also keep the business policies you chose as the default and any you chose for a single product (eBay's numbers for them), and, for each product you send, the eBay item number it became, when it was sent, the fees eBay quoted, a reference eBay uses to recognize the same send if it is repeated (for an eBay Motors listing, eBay's number for its offer), and, if eBay refused it, eBay's reason — so the same product is never listed twice — and, since October 29, 2026, a copy of what went on that listing (each part as ZoraLister sent it, its photos named by ZoraLister's own numbers for them), so a change sends only what differs; and, for a listing you bring in, a copy of the product as it came in (its title, description, condition, photos, and each choice's price, quantity and options), so a change sends only what you changed since.
• If you bring your eBay listings in as your products: only the listings you select are copied in, each as a product of yours — its title, description, price, quantity, condition, item specifics and choices — and its photos are downloaded from eBay's picture server and kept with your other photos, so your products do not depend on the listing staying up. We also keep, for each one, the eBay item number it came from, so bringing them in again does not make duplicates, and (from October 28, 2026) which of your eBay accounts it came from. Nothing is sent to eBay or anywhere else by doing this.
• Checking and sending to eBay (the Listings page): Check sends each listing to eBay to be checked, exactly as it would be sent — eBay answers with anything it would refuse and the fees it would charge, and lists nothing. Send sends it again to be listed. A listing in an eBay Motors category is the exception (from October 14, 2026): eBay has no such check for it, so Check sends it nothing and it goes to eBay only at Send; if that send stops part way, what it had put on your eBay account that buyers do not see (the listing's item details and prices, not live, and the "Ships from" location) stays there, and the next send uses it. Either way, what goes is what the listing holds: its title, description, eBay category and the item specifics and condition you gave, its price, stock and SKU (and barcode, if you gave one) for each choice with your option names and values, its package weight (the heaviest choice's) and, when all three sides are given, its size (from October 13, 2026, for eBay's calculated shipping - read from the product when it is checked and sent), where it ships from, your business policies by number, and its photos as addresses eBay copies them from — the photo's own web address where it came with one, otherwise a cleaned copy without its location or camera details, published for a limited time as described below; those addresses are made when you Check, and made again at Send if they are about to run out. Nothing else of yours is sent, and nothing is sent at any other time.
• A product's video and personalization on eBay (from October 27, 2026): if a product has a video and its listing has no choices (and is not an eBay Motors listing, which goes without it), Send first uploads the video to eBay's video service, exactly as you added it — a video is not cleaned the way photos are, so if your phone recorded where it was taken, that goes with it. We keep eBay's number for the video, so it is usually uploaded only once for your eBay account - again only if an upload fails part way, or if no listing has used it within 25 days (eBay drops an unused video after 30). Check sends no video. If you turned personalization on and the eBay category offers it, Check and Send also send eBay "Personalize: Yes" and your instructions to the buyer.
• What Check reads back (from October 12, 2026): so a listing never goes up twice, Check also reads the listings live on your eBay right now — the same read as See my eBay listings, so each listing in full (title, SKUs, price, photos' addresses, item specifics and description) — and stops any product whose SKU is already live there. That read is held in memory for five minutes and not stored. From October 14, 2026, the same read also fills in What eBay asks: for an item specific a category asks that is about the kind of thing (Brand, Type, Placement on Vehicle...) and not the one item, the answer more than half of your live listings in that category give - at least two of them - is filled in for you, said to be from your eBay listings, and saved as your answer for the category as soon as it is filled in; you change it there. Opening What eBay asks starts that read when Check has not just done it. To fill in where it ships from, when you have not answered it for any eBay category, ZoraLister asks eBay for the address on your eBay account and keeps only its town and state (or its ZIP code, if eBay gives no town), in memory, for at most an hour, forgotten at once if you disconnect eBay. That town is saved as your answer for the category as soon as the Listings page fills it in, says Filled in for you, and you change it there; it goes on each listing as "where it ships from", as any answer would. The condition is filled in the same way, from the Condition on your products. And if you have not chosen your business policies in ZoraLister, the ones your eBay account already uses are taken as ZoraLister's — your only policy of a kind, or (from October 24, 2026) the one most of your live eBay listings go out with, read from eBay as the policies' numbers only and held in memory for ten minutes; what is kept is their numbers, the same as when you choose them; change them on the Listings page.
• Your sales (from October 4, 2026): with the read-only permission to read your orders (eBay's "sell.fulfillment.readonly"), ZoraLister reads your eBay orders - when Home opens, if it has not read them in the last hour, and when you press Update sales; the first time it reads the last 90 days. For each item sold it keeps the order and line numbers, when it sold, the SKU, the listing number and title, how many, what it sold for and whether it was paid, cancelled or refunded - to show your sales on Home and to match each sale to your product. Nothing about the buyer - no name, address, email, user name or message - is read into ZoraLister: it is dropped the moment eBay's answer arrives, and never stored or logged. Your sales are deleted with your account, and with your eBay connection's data if eBay tells us your eBay account was closed. A connection connected before October 4, 2026 is not read until you press Connect eBay again, when eBay asks you to allow it.
• How it ends: press Disconnect and we delete the keys at once. Closing your ZoraLister account deletes them too. If you close your eBay account, eBay tells us, and we delete them then, along with your eBay user id and user name, the item numbers of the listings you brought in and of those you sent; the products themselves stay in your account, because they are yours. With more than one eBay account connected, Disconnect and eBay's notice each concern that one account only: its keys and the SKUs you gave for it, and on eBay's notice also its item numbers and sales - your other eBay accounts stay as they are. A listing you brought in before October 28, 2026 does not say which account it came from until See my eBay listings finds it on one, so until then it goes with the first of your eBay accounts eBay tells us was closed. You can also remove ZoraLister's access on eBay itself, under Account, Security center, Third-party app access.
• Backups may hold an encrypted copy of the keys for up to fourteen days after they are deleted, until they age out.
• eBay's own privacy notice covers what eBay does; ZoraLister is not part of eBay.

If you are a beta tester and report a problem

While ZoraLister is in beta, testers have a Report a problem button. A report holds what you write; your picture, if you add one (re-saved without its location or camera details - but it shows whatever was on your screen, which may include your own products); and what ZoraLister adds so you do not have to explain it: the screen you were on, the version, your browser and device as your browser names them, the time, and the last few errors that page hit (a message and a web address inside ZoraLister - never a password or a key). It is kept with your account, you can see your own reports and where each stands, and a copy of the report - everything above except the picture - goes by email to our support address so we see it quickly. It is deleted with your account; ask us and we will delete a report sooner.

Amazon, while it is being built

Sellers cannot connect Amazon yet. While we build it, ZoraLister Online talks to Amazon's Selling Partner API for the shop we run ourselves only, through our own developer keys, and only our staff - signed in with two-step - can use it. What it does there is read that shop's marketplaces and its existing listings, search Amazon's product types and their rules, and check a product of ours against Amazon's rules (Amazon's "validation preview": nothing is listed). Separately, our shop's own ZoraLister account (signed in like any account) also reads its Amazon listings - each one's SKU, ASIN, title, status, price, quantity and picture link - and keeps them beside its products, so it can see what is on Amazon and not elsewhere; no other account can see them, or is told Amazon is set up at all. No other seller's products, photos or details go to Amazon. Our shop's own account can also list on Amazon through it: what that account checks and approves on the Listings page - title, description, brand, condition, SKU, price, quantity, barcode, package weight and size, colour or size, photos (at temporary addresses, as for eBay, made when it is checked) and where it goes on Amazon - is sent to its Amazon seller account; for a product already on Amazon, only its price and quantity. When Amazon is offered to sellers, it will work like eBay - your own sign-in on Amazon's page, keys you can take back - and this section will say so before it does.

If you connect your Etsy shop

The same arrangement as eBay, and just as optional. When you press Connect Etsy on the Account page, you sign in on Etsy's own page — we never see your Etsy password — and Etsy asks whether ZoraLister may have access. If you agree, Etsy hands us two keys for your shop: a short-lived one (an hour) that ZoraLister uses, and a longer-lived one (about ninety days) that renews it.

• What the keys allow: reading your Etsy shop and its listings, reading your shop's receipts (read-only, for your sales), and creating listings in your shop and putting them live — only when you press Send, and only for products you selected and approved in ZoraLister (since October 11, 2026; before then they arrived as drafts you published on Etsy). Etsy charges its listing fee to your Etsy account as each one goes live. ZoraLister changes a listing that is live only when you approve the change (since October 30, 2026) - and then only what you changed in ZoraLister since it last went (its title, description, photos, a choice's price or quantity, or - for one ZoraLister made - which choices it has; never its tags, materials, category, attributes, shipping, processing or returns) - never ends or deletes one, never buys anything, and - since October 4, 2026 - reads your shop's receipts only for your sales, never who bought (below). A shop connected before sending was added (September 27, 2026) stays read-only until you press Connect Etsy again, when Etsy asks you to allow the one more thing.
• What we keep: the two keys, encrypted the same way as eBay's; your Etsy user id, your shop's id and your shop's name, so the Account page can say which shop is connected; when you connected and when the keys were last renewed; which permissions Etsy granted; whether the connection still works; and the shipping profile, processing profile and return policy you chose for sending, as the default and for any single product you gave its own (Etsy's numbers for them). For each product you send, we keep the Etsy listing number it became and Etsy's numbers for the photos on it — so sending it again updates that listing instead of making a second one — with when it was last sent, and, if Etsy refused something, Etsy's reason; and, since October 30, 2026, a copy of the product as it last went (or, for a listing you bring in from Etsy, as it came in), so a change sends only what you changed since.
• Seeing your Etsy listings on the Account page reads them from Etsy when you ask and shows them to you. They are held in the server's memory so a second look within five minutes does not ask Etsy again, then discarded, and are never saved to the database or to disk. Nothing is sent to Etsy.
• If you bring your Etsy listings in as your products: only the listings you select are copied in, each as a product of yours — its title, description, price, quantity, tags, weight and size, its Etsy category, its choices (read from the listing's inventory), and who made it, when and from what — and its photos are downloaded from Etsy's image server and kept with your other photos, so your products do not depend on the listing staying up. We also keep, for each one, the Etsy listing number it came from, so bringing them in again does not make duplicates. Nothing is sent to Etsy or anywhere else by doing this.
• Sending to Etsy (the Listings page, or the Exports page): Check shows what would happen and sends nothing. Send sends, for each approved draft that is ready, what that draft holds: its title, description, tags and materials, who made it and when, its Etsy category and the category details you chose, its weight and size, its price, stock and SKU for each choice with your option names and values, and its photos — as files, each a cleaned copy without its location or camera details, the same copy ZoraLister publishes elsewhere. From October 27, 2026: its personalization, if you turned it on (your instructions, the letter limit, whether the buyer must fill it in, and your extra charge), and its video, if it has one, once per listing and exactly as you added it — a video is not cleaned the way photos are, so if your phone recorded where it was taken, that goes with it. Nothing else of yours is sent, and nothing is sent at any other time.
• Adding an Etsy category on the Templates page asks Etsy what that category needs - its fields and the values they take - using ZoraLister's own key, not yours, and it works without your shop connected. Only the category's number is sent. Etsy's answer is kept with your templates, as Etsy sent it and with the category it was for, so your listing profiles keep reading the same thing.
• Your sales (from October 4, 2026): with the read-only permission to read your shop's receipts (Etsy's "transactions_r"), ZoraLister reads your shop's receipts - when Home opens, if it has not read them in the last hour, and when you press Update sales; the first time it reads the last 90 days. For each item sold it keeps the order and line numbers, when it sold, the SKU, the listing number and title, how many, what it sold for and whether it was paid, cancelled or refunded - to show your sales on Home and to match each sale to your product. Nothing about the buyer - no name, address, email, user name or message - is read into ZoraLister: it is dropped the moment Etsy's answer arrives, and never stored or logged. Your sales are deleted with your account. A shop connected before October 4, 2026 is not read until you press Connect Etsy again, when Etsy asks you to allow it.
• How it ends: press Disconnect and we delete the keys, your Etsy user id, your shop's id and name and your sending settings at once. Listings you sent stay on Etsy — ZoraLister never deletes anything there — and the record of which Etsy listing each product became stays with the product, so connecting the same shop again updates those listings instead of duplicating them; it goes when you delete the product. Products you brought in stay in your account, because they are yours, and each keeps the Etsy listing number it came from until you delete the product. Closing your ZoraLister account deletes all of it, products included. Connecting a different Etsy shop replaces the first one. You can also remove ZoraLister's access on Etsy itself, in your account settings under Apps. Backups may hold an encrypted copy for up to fourteen days, until they age out.
• Etsy's own privacy policy covers what Etsy does. The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

If you sign in with Google

Optional. On the Account page you can connect a Google account, with your password, so that Sign in with Google works instead of typing your password. You choose the Google account on Google's own page; we never see your Google password. Your passkey or six-digit code is still asked for afterwards.

• What Google sends us: Google's own number for your Google account, its email address and your name. We ask Google for nothing else (only "openid", "email" and "profile"), and Google's access ends with that one sign-in: we keep no Google key.
• What we keep: Google's number for your account, to know you next time, and the Google email address at the time you connected it, only to show you on the Account page which Google account is connected. Your name from Google is not kept. We never use the Google address to match you: only a Google account you connected yourself signs you in.
• How it ends: Remove on the Account page, with your password, deletes both at once. Connecting and removing it each send you an email. Closing your ZoraLister account deletes it too. You can also remove ZoraLister from your Google account, under Security, Third-party apps. Backups may hold a copy for up to fourteen days, until they age out.
• Google's own privacy policy covers what Google does.

If you connect ZoraMaker

ZoraMaker is Zora Software's separate app for makers. Connecting it is optional, and nothing passes between the two until you make a key here and paste it into ZoraMaker.

• The key: Make a key for ZoraMaker on the Account page shows it once. We keep only a one-way fingerprint of it (a hash, which cannot be turned back into the key), its last four characters so you can tell your keys apart, who made it, when, and when it was last used. A key belongs to your account alone, and the only things it can do are below.
• What ZoraMaker sends, and what we keep: when you press Send to ZoraLister in ZoraMaker, it sends that product: its name, description, choices (such as color), and for each item its SKU and any old SKUs, suggested price, how many are available and when that was counted, its photos, whether it is retired, and ZoraMaker's own numbers for the product and its items. We keep these as your product and its variants, just as if you had typed them, plus ZoraMaker's numbers, the last name, description and suggested prices it sent, when the stock was counted, and whether the product or an item is retired, so the next send updates the same product. Old SKUs are used only to find a product you already have, and are not kept. The cost per piece ZoraMaker may include is not kept. Nothing about your customers is sent or kept.
• Photos: ZoraLister downloads each photo once, only from ZoraMaker's own photo storage (one fixed address, set on our server), checks it is exactly the file ZoraMaker described, and keeps it with your other photos. A photo from anywhere else is refused.
• What ZoraMaker can see: with the same key, ZoraMaker can ask which marketplaces your products are on, so its products page can show it and find what is not listed somewhere yet. It is told this in two ways. For each product it sent you: one word per marketplace (live, sent, in a file, waiting, a problem, not there). And by SKU, for every SKU in your ZoraLister account - each variant's own, the SKU a marketplace knows it by, and your Amazon listings where ZoraLister has read them: one word per marketplace (live, on its way, held for something to fix, or blocked by one of your Blockers, with the reason you gave it). For a live listing, both ways include its public address where ZoraLister knows it. That is the SKU and those words, nothing more: it never sees your titles, photos, prices, stock, sales or buyers. It cannot list, change, delete or reach anything else.
• How it ends: Remove on the Account page stops the key at once. We keep the removed key's record (fingerprint, last four characters, who made it, dates) with your account, so it can be told apart and never works again. Products ZoraMaker sent stay yours, because they are yours, until you delete them. Closing your ZoraLister account deletes all of it. Backups may hold a copy for up to fourteen days, until they age out.

When you sign up

• What you give us: your shop's name and your email address. We keep which version of the Terms and this page you agreed to, and when, in your account's record.
• Confirming it is your address: we email you a one-use code (and a link carrying it). We keep only a scrambled form of the code (a hash), never the code itself; it works once and runs out after a week. Until it is used, nothing can be done with the account - it has no password.
• A sign-up that is never confirmed - nobody used the code - is deleted 30 days later, with the name and address it held.
• If you sign up with an address that already has an account, nothing is made: you are emailed to sign in instead, at most once an hour. The sign-up page answers every request in the same words, so it cannot be used to find out who has an account.
• To stop abuse, the number of sign-ups from one internet address is limited; the address is held in the running app's memory for an hour, for that count only, and written nowhere.
• We are told of each new sign-up (the shop's name and address) by email, so a person sees who joined, and get a one-line copy with the same details when a how-to email or trial reminder goes to you.

Paying with PayPal

• Who handles the money: PayPal (PayPal Holdings, Inc., in the United States). You subscribe on PayPal's own page; your card, bank and PayPal sign-in go to PayPal and never to us. PayPal handles them under its own privacy statement, as a company in its own right, not on our instructions.
• What we keep: your subscription's id, whether PayPal says it is active, and the date you have paid through - that is what keeps your account working. PayPal also tells our server things about the subscription (which can include the payer's name and email address); we read what we need from it and store none of the rest.
• Receipts for each payment come from PayPal. Zora Software is the seller: questions about a charge, write to support@zoralister.com.
• Cancelling is on the Account page (we ask PayPal to stop the payments) - or at PayPal, where we are told; and your account keeps the full plan until the date you paid through, then is on the Free plan.
• The free setup session is booked through a scheduling page we link to; booking it shares with that service the name, email address and time you give it, under its own privacy terms.

Where it lives, and who can reach it

• On a server we rent in the United States, with Cloudflare in front of it as a web application firewall: connections to the app pass through Cloudflare, which turns away attacks before they reach our server. To do that, Cloudflare decrypts each request at its edge and encrypts it again to our server, so it processes what passes through - your IP address, browser, the address asked for and what you send and receive - only to deliver and protect the app. It does this in its data centres around the world, the one nearest you first, and keeps its own technical logs under Cloudflare's privacy policy. It keeps no copy of your products or photos: everything private is marked not to be stored by it. ZoraLister for Windows' calls to ZoraLister Online (connecting eBay) pass through it the same way. Cloudflare may set a short-lived security cookie if it suspects automated traffic, used only to tell people from bots. Your files sit in storage that belongs to your account; your rows sit in a database where the database itself refuses to return another account's rows — not merely our code being careful, but a rule the database enforces on every query.
• Your session is a cookie that lasts up to fourteen days, marked so it travels only over an encrypted connection and cannot be read by scripts. Signing out, changing your password, removing a passkey, or an admin resetting your two-step ends every session you have, everywhere, at once (removing a passkey keeps the one you are using).
• Photos from your phone. Take photos with your phone on a product shows a QR code. The link in it is not a sign-in: it can only add photos to that one product, and it stops working after twenty minutes, when you press Stop, close the product or the page, or press Done on the phone, after forty photos, when your password or two-step changes, or when our server restarts. Anyone who scans it while it works can add photos to that product, so do not share it. The photos are kept exactly like ones you drop in, and your account's record notes that photos came from a phone.
• ZoraLister staff can see what an account is — its name, plan, limits, how many products, templates and exports it has, how much storage it uses, the people on it, whether they have two-step, and when they last signed in — and not your products themselves. There is no way for us to browse your products or open your photos from the admin screen, and if we ever add a "look at it with you" feature for support, it will be described here first, it will need your knowledge, and it will be logged where you can see it.
• Every staff action is recorded with who did it and when: changing a plan, granting free beta access, disabling an account, clearing someone's two-step. A copy goes into your own account's record too, so you can be shown it.
• When an account is closed it is disabled first: everyone on it is signed out, and its eBay and Etsy keys are deleted at once; its ZoraMaker keys stop working. Then it can be deleted, and that takes everything in it - its people and their sign-ins, products, photos and every file, templates, drafts, upload files, sales and its beta request. What stays is our staff record of what we did to the account, by its id, with no name or email address in it. Copies already in our backups go as those backups age out.
• No analytics, no advertising, no tracking of what you do inside the app. The only cookie of ours is the one that keeps you signed in (Cloudflare's security cookie, above, is the only other). If you put ZoraLister on your phone's home screen, the phone also keeps one page of ours - the "You're offline" page, so the app can say so without a connection. Nothing of yours is kept with it: no product, no photo, nothing you typed.

Keeping it safe, and what we would do if we failed

• Connections are encrypted. Passwords are hashed with a slow algorithm designed for the job, never stored in a readable form, and we strongly recommend turning two-step sign-in on.
• Repeated wrong passwords lock an account for a while, and too many sign-in attempts from one place are refused, so somebody working through a list of stolen passwords does not get far.
• Backups are kept so your work survives a failed disk, and we will say here when a backup copy is also kept away from the main server.
• No system is perfect. If your data were exposed, we would tell you what happened, what was involved and what to do about it — by email, promptly, and without waiting to be asked.

How long we keep it, and getting it back out

• Your products stay until you delete them. Deleting a product archives it so it can be recovered; removing a photo moves the original to your own trash rather than destroying it.
• You can take everything with you. Ask and we will get you your products, photos, profiles and written files. We are building a one-button version of this; until it exists, a person does it for you.
• Closing your account deletes it. Your products, photos, templates, profiles, drafts, upload files and published photo links go with it. What we keep afterwards is the bare record of what staff did to the account — its id, the action and the date, with none of your products and no email address — because a log you can edit is not a log. Backups age out on their own schedule.

Photos, and the temporary addresses marketplaces fetch them from

This one deserves its own section, because it is the point where a photo of yours becomes readable by someone who is not you. It applies to both products, by different routes: in ZoraLister for Windows the photo is sent to our delivery service first (image push, which you switch on yourself); in ZoraLister Online the photo is already with us, and the address is made when you write an upload file, or when you check or send a listing to eBay - for an eBay Motors listing, only when you send it (Etsy is sent the photo file itself).

A marketplace will not take a photo file in a bulk upload. Every image column wants a web address, and the marketplace's own servers go and fetch the picture — with no sign-in, because a fetcher has no account with anyone. So there are two ways to fill that column, and you can mix them freely:

• Your own link (ZoraLister for Windows). If the photo already lives on your shop or your website, put that address on it in the Catalog. Nothing of ours is involved and the rest of this section does not apply to you. In ZoraLister Online there is nothing to paste: a photo that already had its own web address keeps using it in upload files, and on eBay when the address is secure (https); Etsy is always sent the photo itself, and every other one is published as below.
• Let ZoraLister publish it. When you write an upload file (or, in ZoraLister Online, check or send a listing to eBay), each photo with no link of its own is put at a temporary address, and that address goes into the file or the listing.

What "published" means, said plainly:

• Anyone holding that address can see that photo, without signing in, for as long as the address lives. That cannot be otherwise — it is how marketplaces collect pictures.
• The address is unguessable. It is made of 32 random bytes. Nothing in it comes from your account, your product or another address, there is no index or listing, and it is marked to be ignored by search engines and AI crawlers.
• It expires — seven days by default, one day at the shortest, because a marketplace can retry a photo for a day or two after your upload. One exception, in ZoraLister Online: the address of a photo whose product is on a live eBay listing ZoraLister sent keeps working until ZoraLister learns that listing has ended, or until you take it down. eBay can go on loading a listing's photos from the address it was given, so an address that expired would leave buyers looking at "Image not available".
• eBay keeps its own copy of what you send. When ZoraLister Online sends or changes an eBay listing, it asks eBay to collect each photo from its address and keep it on eBay's servers, under eBay's own terms. When eBay takes them, the listing uses eBay's copy. When it does not, and on eBay Motors listings, the listing goes on using the address.
• You can end it sooner. The Exports screen shows how many of your photos are published and takes them down at once, per file or all together. After that the address stops working on the very next attempt.
• Only photos. Never your products, prices, descriptions, notes, templates or the finished upload file.
• In ZoraLister Online, what is published is a cleaned copy, not your original. Phones and cameras record details inside a photo - often where it was taken, and the camera and time. The published copy has all of that taken out (it is turned the right way up first, and keeps only its color profile); your original is kept exactly as you uploaded it. (This began with the release of September 27, 2026; an address made before then served the original, and runs out within seven days - or take it down now on the Exports screen.) ZoraLister for Windows sends a cleaned copy the same way from version 0.1.9 (it keeps that copy beside your original, which it never changes); version 0.1.8 and earlier send the photo as it is, details included - update to 0.1.9 to stop that.
• We record that a photo was fetched — how many times and when — so you can see whether the marketplace collected it. We do not record who fetched it.
• We do not look at them. They are not scanned, cataloged, sold, or used to train anything.

Most marketplaces copy the picture onto their own servers, so shoppers see the marketplace's copy. An eBay listing using the address, as a listing with choices can, is the exception: shoppers' browsers load the photo from the address, so we see those requests like any web server does. What you may publish is covered by the terms of use; to report an image, write to abuse@zoralister.com.

Email we send you

ZoraLister Online sends email when something you did needs it, when something about your sign-in changed, and two short how-tos when you start. The first two: setting a new password when you have forgotten yours, confirming your address when you sign up (or, if that address already has an account, telling you to sign in instead), and a short notice when your password is changed or two-step sign-in is turned on or off. That last one exists so that if somebody else changes your sign-in, you hear about it from us rather than by being locked out. The how-tos go once each, after you have chosen your password: how to get started, then a day later your first listing step by step. If you already have something listed, or brought in from a marketplace, they do not go. All of these are carried by Resend, an email delivery company in the United States, which necessarily processes your address and the message in order to deliver it. We do not send marketing email from the app, and the how-tos carry no offers, and no email we send ever contains your password — a reset carries a link that works once and expires, and a notice carries no password at all.

This website

zoralister.com is a handful of static pages. It has no sign-up, no contact form and no comment box, so there is nothing to type personal information into.

• Hosting. The site is delivered by Cloudflare. Like any web host, Cloudflare necessarily processes the technical details of each request (your IP address, browser type, the page asked for, and the time) to deliver the page and to protect the site from abuse. Your browser may also send Cloudflare an automatic report if a connection to the site fails. We do not use this to identify anyone, and we do not combine it with anything else.
• Fonts. The typefaces are served from zoralister.com itself, like the pages. Your browser asks no one else for them.
• Cookies. The site sets no cookies of its own. Cloudflare may set a short-lived security cookie if it suspects automated traffic; it is used only to tell people from bots.
• No analytics, no ads, no social media pixels.

When you ask for a beta seat

The form at zoralister.com/beta asks for your name and email address, and optionally your phone number, what you sell, which marketplaces you sell on, roughly how many products you have, and anything else you want to tell us. Only the name, the address and the agreement are required; everything else you can leave blank.

• Where it goes. Straight to the ZoraLister Online server we run, and nowhere else. No form service, no third-party analytics and no advertising network - the page loads nothing from anyone else. A copy is emailed to us so we see it, carried by the email provider named above.
• Your phone number is optional, and it is there for one thing: arranging a time to talk about how testing is going. We do not text you, we do not call you about anything else, and we do not give it to anyone.
• We keep what you agreed to, with what you agreed. When you check the box, we store the sentence it said alongside the date, because a record that you agreed is worth nothing without the words you agreed to. Rewording that page later never changes what an earlier tester signed up to.
• How long. Until the beta is over and we have finished talking, or until you ask us to delete it - whichever comes first. Ask at beta@zoralister.com and it goes.
• Two emails come to you - and at most a reminder. One right away, saying your request arrived and what happens next - once per address, so nobody can use the form to fill someone else's inbox. And, if we offer you a seat, your invitation: a link and a one-time invite code to choose your own password. The code works once and runs out after a week; we keep only a scrambled form of it (a hash), never the code itself. If the invitation sits unused, one of us may send a reminder - by hand, never more than once every two days - with a fresh code that runs out on the same day; the code in the first email then stops working.
• If we make you an account, what happens to it from then on is the ZoraLister Online section above.

When you email us

If you ask for a beta seat or write to support, we receive your email address and whatever you choose to tell us, such as the marketplaces you sell on, your categories and roughly how many products you have. We use it to reply, to run the beta, and to fix the problem you reported. We do not share your message with anyone outside Zora Software other than the email provider that carries it.

If you join the beta, we will email you about the beta: new builds, known problems, the occasional question about what you found, and - if you have not been in for a while - a short note with the way back in. That is all. We do not add you to a marketing list, and one reply saying "stop" ends the emails.

Files you send us. Beta testers sometimes send a marketplace template or a processing report so we can fix a problem reading it. Be aware that a template downloaded from your seller account can contain identifiers from that account, for example the id of a brand you are approved for. We use such files only to reproduce and fix the problem, keep them private, and delete them when you ask. Please do not send customer or order data; we never need it.

We keep correspondence for as long as it is useful for supporting you, and delete it on request.

Planned features, told in advance

ZoraLister is unfinished. These are the parts that will involve other companies or more of your information, and none of them is switched on today. This page changes before any of them does, and each will be visible and under your control.

• Buying ZoraLister for Windows. It is not on sale yet. When it is, this page will name the company that takes the payment and say exactly what we receive (never your card number). License keys are designed to be checked on your own PC, without calling home.
• Update checks and error reports. The app will be able to check whether a newer version exists. Sending an error report will be your choice each time, and a report will never contain your products.

Your choices

Wherever you live, you can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. With ZoraLister for Windows that means your emails to us, since the app and the website hold nothing else. With ZoraLister Online it also means your account and everything in it — your products, your photos, your templates and the record of what happened. Write to support@zoralister.com and a person will answer.

If you use ZoraLister Online, you can also do a good deal yourself: change your password, turn two-step sign-in on or off, see what photos of yours are published and take them down, delete products and photos whenever you like, and take a copy of everything with Download everything on the Account page: one zip file of your products (as a spreadsheet), every photo and file exactly as you gave it to us, and all your records. It is made in your own account, only someone signed in to your account can download it, and it is deleted after seven days (a copy caught in our nightly backup goes as that backup ages out). It does not include the keys ZoraLister holds to act on your eBay or Etsy shop, which work only inside ZoraLister.

ZoraLister is a tool for people running a business. It is not directed at children, and we do not knowingly collect information from them.

Changes to this page

When what we do changes, this page changes first, and the date at the top moves with it. If a change affects information you have already given us, we will tell you by email before it takes effect.