Privacy Policy

List My MRR ("we," "us," or "our") operates a public leaderboard and directory for internet businesses. This Privacy Policy explains what information we collect when you use our website and services (the "Service"), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Account information. When you sign up or log in, we collect your email address, and — if you sign in with Google — your name and profile photo, as provided to us by our authentication provider (Firebase Authentication).

Business listing information. When you list a business, we collect the information you submit: business name, website URL, tagline, description, founder name or X/Twitter handle, and revenue metrics (MRR, ARR, month-over-month growth, and customer count) as reported by your connected payment provider.

Payment provider credentials. When you connect a payment provider (such as Stripe, LemonSqueezy, Polar, Dodo Payments, Paddle, RevenueCat, Whop, or Shopify) to verify your revenue, your API key or access token is sent directly to that provider's API to fetch your revenue figures. We do not store your API key or access token — it is used once, at the moment of submission or verification, and discarded.

Local preferences. We store your light/dark theme preference in your browser's local storage. This stays on your device and is not sent to our servers.

Payment for promotional features. If you purchase a promotional placement (such as a Hall of Fame or Featured slot), payment is processed by our payment processor (Dodo Payments). We receive confirmation of your payment and the plan purchased; we do not receive or store your full card details.

• To create and manage your account and authenticate you when you sign in.
• To publish and display your business listing on the public leaderboard and directory.
• To verify and periodically refresh your reported revenue figures.
• To process payments for promotional placements.
• To communicate with you about your account or listing, including support requests.
• To maintain the security and integrity of the Service, including detecting fraudulent or manipulated revenue claims.

List My MRR is a public directory. Any business you list — including its name, tagline, description, website, revenue figures, growth rate, and founder attribution (unless you choose Anonymous Mode) — is visible to anyone who visits the Service. Do not submit information you do not want to be publicly visible.

If you enable Anonymous Mode, your business is listed without a public founder name or handle, though the business itself and its revenue figures remain public.

Account authentication is handled by Firebase Authentication (a Google service). Business and listing data is stored using Convex, a hosted database provider. We rely on these providers' industry-standard security practices and do not maintain a separate copy of your authentication credentials.

No method of electronic storage or transmission is 100% secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

We share information with the following categories of third-party providers, only as necessary to operate the Service:

• Firebase (Google) — authentication and account management.
• Convex — application data storage.
• Payment gateway providers (Stripe, LemonSqueezy, Polar, Dodo Payments, Paddle, RevenueCat, Whop, Shopify) — used only to fetch your own revenue metrics when you choose to connect them.
• Dodo Payments — payment processing for promotional placements.

We do not sell your personal information to third parties.

We use browser local storage (not third-party tracking cookies) to remember your theme preference and to maintain your signed-in session. Our authentication and infrastructure providers may set their own cookies or equivalent technologies as part of providing their services to us.

We retain your account and business listing information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated listing data at any time by contacting us (see Section 11).

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us using the details in Section 11.

If you have questions about this Privacy Policy or how we handle your information, contact us at support@listmymrr.xyz.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.