Last updated: 25 June 2026

Privacy Notice

1. Who we are

Interlist is operated by Interlinked Global. We act as the data controller for personal data processed in connection with the Service, except where Paddle acts as controller for payment data (see section 4).

2. Personal data we collect

• Account data: name, email, organisation, profile photo, role.
• Authentication data: identifiers from Google Sign-In and session tokens.
• Operational data: assets, locations, contacts, photos, and other content you create or upload.
• Support communications: messages you send us.
• Usage and device data: IP address, browser, OS, log timestamps, error reports.
• Location data: approximate GPS coordinates when you choose to attach them to a capture.

3. Why we use it (purposes & legal bases)

• Provide the Service — performance of contract.
• Account creation, authentication, support — performance of contract.
• Security, fraud prevention, abuse detection — legitimate interests.
• Service improvement and analytics — legitimate interests.
• Legal and tax compliance — legal obligation.
• Marketing (where applicable) — consent, which you can withdraw at any time.

4. Sharing — subprocessors and Merchant of Record

We share personal data with the following categories of recipients:

• Paddle.com — our Merchant of Record. Paddle handles payments, subscription management, tax compliance, invoicing, and refund handling. Paddle is an independent controller for payment data.
• Hosting and infrastructure providers used to operate the Service.
• Authentication providers (Google Sign-In).
• AI processing providers used for optional OCR features (only the image/text you submit for OCR).
• Mapping providers for displaying location data.
• Professional advisers (legal, accounting) and authorities where required by law.

5. International transfers

Our subprocessors may process data outside your country, including outside the UK/EEA. Where applicable, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards.

6. Retention

We keep personal data while your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. Operational content (assets, photos) is retained for the life of the account; you can delete content within the Service at any time. Backups are deleted on a rolling schedule.

7. Your rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase data ("right to be forgotten");
• Restrict or object to processing;
• Portability of data you provided;
• Withdraw consent at any time;
• Lodge a complaint with your supervisory authority.

To exercise these rights, contact us through the Service. We aim to respond within one month.

8. Security

We apply appropriate technical and organisational measures including encryption in transit, access controls, audit logging, and least-privilege defaults. No system is perfectly secure; you should also protect your account credentials.

9. Cookies

We use cookies and similar storage that are strictly necessary to keep you signed in and to operate core features. We do not use advertising cookies. Any optional analytics cookies will be subject to your consent where required.

10. Children

Interlist is not intended for children under 16. We do not knowingly collect data from children.

11. Changes

We may update this notice. Material changes will be communicated via the Service or email.

12. Contact

For privacy questions, contact Interlinked Global through the Service.