Skip to contentListwell
Home

Privacy policy

This policy describes how obambulo studio (trading as Listwell) handles personal information when you use listwell.dev. We aim to meet the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This page is product copy, not legal advice.

Last updated: October 2026

Who we are

Listwell is a local and website visibility audit for small businesses.obambulo studio is the operator. For privacy questions, access requests, or corrections, contact us through https://obambulo.studio.

What we collect

  • Account: email address, optional display name, and session data when you sign in with a one-time code.
  • Business details you provide: business name, suburb or location hints, website URL, listing URLs, social profile URLs, and address text used to match the right business.
  • Scan and report data: check results, scores, summaries, research outputs on paid continued plans, and timestamps for runs and entitlements.
  • Payment-related data: Polar processes card payments and tax details. Listwell receives order and subscription identifiers, product purchased, and the email Polar associates with the checkout. We do not store full card numbers.
  • Email preferences: tokens used to manage monthly scan notification unsubscribe links.
  • Technical data: IP address and request metadata needed to run the site, apply rate limits, and keep sessions secure.

Why we collect it

  • To run audits and show reports you request.
  • To save businesses to your account and re-run checks on a schedule for paid plans.
  • To sign you in, send purchase receipts, and send optional scan-ready emails.
  • To process payments and honour entitlements through Polar.
  • To improve reliability, prevent abuse, and support customers.

Who we share it with

We use service providers that process data on our behalf to run Listwell. The main services that may handle personal information are:

  • Cloudflare: Hosts the Listwell website and API on Workers, stores short-lived audit job state in Workers KV, and may fetch some website pages through Browser Rendering.
  • Convex: Stores account data, saved businesses, scan results, entitlements, and billing linkage in a deployment hosted in the Asia Pacific (Sydney) region.
  • Better Auth: Runs email one-time code sign-in and session handling on Convex.
  • Polar: Processes checkout, acts as merchant of record for paid reports, and sends payment receipts.
  • UseSend: Sends sign-in codes, purchase emails, and optional monthly scan notification emails through the UseSend API endpoint configured for Listwell.
  • Cloudflare Workers AI: Generates plain-language report summaries and listing review text from completed check results when the Workers AI binding is available.
  • Google: When API keys are configured, looks up businesses (Places), finds web results (Programmable Search), and reads public performance signals (Chrome UX Report and PageSpeed Insights).
  • Apple MapKit: When MapKit keys are configured, searches Apple Maps for business matches during intake.
  • OpenStreetMap Nominatim: Geocodes and searches OpenStreetMap when Google or Apple lookups are unavailable or inconclusive.
  • TypeSafe: When an API key is configured, helps disambiguate business matches, interpret chat intake, compare social profile images, and tidy search phrases.
  • DataForSEO: When an API key is configured, supplies SEO research data used on continued (monthly or yearly) reports.

Listwell also fetches public websites and social profile pages you point us to. That traffic goes to those sites, not through a separate analytics vendor.

See also How it works for the same list in plain language.

Overseas disclosure

Some providers store or process data outside Australia even when you use Listwell from Australia. Based on our current stack:

  • Convex production for Listwell is hosted in the Asia Pacific (Sydney) region.
  • Cloudflare runs the app on its global network. Workers KV and audit job state may be held in Cloudflare infrastructure outside Australia.
  • Polar (payments) and UseSend (email API) may process data in the United States or other countries where they operate.
  • When configured, Google, Apple MapKit, TypeSafe, DataForSEO, and OpenStreetMap Nominatim may process lookup queries on servers outside Australia.

Where the APPs require it, we take reasonable steps so overseas recipients handle personal information in line with this policy.

Access and correction

You may request access to or correction of personal information we hold about you. Contact us through https://obambulo.studio. We will respond within a reasonable time. You can update some account details in Listwell after sign-in.

Complaints

If you have a privacy concern, contact us first through https://obambulo.studio. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Retention

We keep account and report data while your account is active and as needed to provide the service, meet legal obligations, and resolve disputes. Short-lived audit queue data in Cloudflare KV is discarded when no longer required for the job.