JustList Privacy Policy

Effective date: October 15, 2026

This Privacy Policy explains how IQClub Inc., doing business as JustList (“JustList,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information when you use JustList.io and related services that link to this Policy (the “Platform”). Our U.S. State Privacy Notice provides additional information for residents of states with applicable consumer privacy laws.

1. Information you provide

1. Account information. Name, email address, telephone number, password hash, authentication method, account preferences, and age or eligibility confirmations.
2. Profile and business information. Display name, photograph or logo, biography, business name, service categories, years in business, website, business contact details, and information about licenses, insurance, or other credentials you choose or are required to submit.
3. Listings and portfolio content. Titles, descriptions, prices or pricing methods, availability, service areas, operating locations, images, video, and other details about services.
4. Communications. Messages between users, quote requests, attachments, contact-reveal choices, communications with support, and survey or feedback responses.
5. Reviews and safety information. Ratings, review text and media, Provider responses, reports, blocks, appeals, moderation submissions, and information relevant to fraud, safety, or policy enforcement.
6. Payment and subscription information. Plan, price, billing interval, purchase and cancellation dates, transaction identifiers, payment status, limited payment-method details such as brand and last four digits, billing address, and tax information. Stripe collects and processes full payment credentials; JustList does not intentionally store full card numbers or security codes.
7. Location information. City, state, ZIP code, service radius, operating address, and—only after permission—device location. We may infer an approximate area from an IP address. We do not publish an exact residential address unless a user affirmatively selects a feature that clearly says it will be public.

2. Information collected automatically

When you use the Platform, we and our service providers may collect IP address, device and browser type, operating system, language, referring and exit pages, pages and listings viewed, search terms and filters, approximate location, timestamps, clicks, feature interactions, session and cookie identifiers, error and performance data, security events, and similar network and usage information.

We use cookies, local storage, pixels, and similar technologies for authentication, security, preferences, measurement, and analytics. Our Cookie Notice describes these technologies and available choices.

3. Information from other sources

We may receive information from:

1. Google, Apple, Facebook, or another sign-in provider when you choose that sign-in method;
2. Stripe, including transaction, subscription, fraud, dispute, and limited payment-method information;
3. other users, such as messages, reviews, reports, and information about a shared interaction;
4. verification, fraud-prevention, communications, hosting, analytics, and support providers;
5. public records or credential issuers when a verification feature is offered; and
6. business partners or a referring site, subject to applicable notice and choice.

If we offer identity verification, a specialized provider may collect identity documents or images directly. The notice shown before collection will identify the provider, the data involved, and whether JustList receives a copy or only a result. We will not introduce biometric processing without a separate legal and privacy review.

4. How we use information

We use personal information to:

1. create, authenticate, secure, and administer accounts;
2. publish profiles and listings and connect Customers with Providers;
3. deliver messaging, contact-reveal, search, location, review, moderation, and support features;
4. process fees owed to JustList, administer subscriptions and promotions, calculate tax, prevent payment fraud, and handle disputes or chargebacks;
5. personalize and rank content, measure use, debug, perform research, and improve the Platform;
6. detect and address spam, fraud, abuse, security incidents, prohibited services, and violations of our policies;
7. verify information where a verification feature is offered and explain the limited meaning of any resulting status;
8. send transactional, security, policy, renewal, and support communications;
9. send marketing communications where permitted and honor marketing choices;
10. comply with law, respond to lawful process, protect rights and safety, establish or defend legal claims, and enforce agreements; and
11. create aggregated or deidentified information. We will maintain deidentified information in deidentified form and not attempt to reidentify it except as permitted by law.

5. How we disclose information

1. Public and other users. Profiles, listings, reviews, Provider responses, service areas, and other content you submit for publication are public. Messages are shared with conversation participants. Contact details are shared when you choose a contact-reveal or sharing feature.
2. Service providers. We disclose information to vendors that provide hosting, content delivery, security, fraud prevention, authentication, email or SMS, support, moderation, storage, analytics, and professional services under appropriate contractual restrictions.
3. Stripe. Stripe processes payment and transaction information for JustList fees and may use information for authentication, fraud prevention, compliance, and its other disclosed purposes. Stripe's privacy notice applies to its processing.
4. Google Analytics. Google may receive online identifiers, IP address, device/browser details, page URLs, and interaction data to provide analytics. We prohibit sending message contents, telephone numbers, email addresses, full addresses, exact coordinates, or payment details in analytics events.
5. Legal and safety. We may disclose information when we reasonably believe disclosure is required by law or legal process, is necessary to protect rights or safety, will prevent or investigate fraud or abuse, or is needed to enforce our agreements.
6. Corporate events. We may disclose information in connection with financing, due diligence, reorganization, merger, acquisition, insolvency, or sale of all or part of our business, subject to customary confidentiality protections where appropriate.
7. At your direction. We disclose information when you direct us, consent, or intentionally use a feature designed to share it.

We do not sell personal information for money. Some state laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain analytics or advertising disclosures. Our U.S. State Privacy Notice explains applicable rights, and our Privacy Choices page provides opt-out methods.

6. Public information and user communications

Public content may be indexed by search engines, viewed by anyone, copied by others, or remain available in cached or archived pages. Removing content from JustList does not necessarily remove copies made by third parties.

Do not send highly sensitive information in messages. We may access or review communications when needed to operate a requested feature, investigate a report, protect users, maintain security, or comply with law. We do not use private message text for third-party advertising.

7. Cookies and analytics choices

You may manage non-essential technologies through the cookie or privacy controls we provide, where available, and through your browser. See our Privacy Choices page. Blocking essential cookies may prevent account and security features from working. You may also use Google's Analytics opt-out browser add-on. Where required by applicable law, we treat a recognized Global Privacy Control signal as an opt-out request for the browser or device sending it.

8. Communications choices

You may unsubscribe from marketing email using the link in the message or by contacting [email protected]. You will continue to receive non-promotional messages about security, billing, policies, and your account. If we offer optional marketing texts, the signup notice and reply instructions will explain how to stop them. Security or verification texts are sent only for the requested purpose.

SMS phone verification

SMS verification is optional and uses a separate, unchecked consent box. We use the mobile number, consent timestamp, request and delivery records, and verification result to send the code you request, confirm access to the number, prevent abuse, enforce request limits, and honor opt-outs. We record consent when you submit the request. Verification codes are not marketing messages.

We do not sell or share mobile information collected for SMS verification, SMS opt-in data, or consent status with third parties for promotional or marketing purposes. The disclosures described elsewhere in this Policy exclude SMS opt-in data and consent for those purposes. We may provide the information to communications service providers, including Telnyx and mobile carriers, only as needed to deliver and administer the requested messaging service, protect it from abuse, and comply with law.

Reply STOP to opt out, START to opt back in, or HELP for assistance. You may also contact [email protected]. We retain consent, messaging, and minimal suppression records as needed to document requests, protect the service, and honor your choices. See the JustList SMS Terms for message frequency, costs, and support details.

9. Location choices

You can decline browser or device location permission and enter a city or ZIP code manually. You can change device permission in your browser or operating-system settings. We may still infer an approximate area from IP address for security, localization, and fraud prevention.

10. Retention

We retain information only as reasonably necessary for the purposes described, including providing the Platform, security, dispute resolution, legal compliance, and enforcing agreements. Our intended baseline periods are:

Information	Baseline retention
Active account, profile, and listing data	While the account is active, then deleted or deidentified within 90 days after a valid deletion request, subject to the exceptions below.
Messages and interaction records	While needed for the account and up to 3 years after the last interaction or account closure.
Reviews and Provider responses	While published; after removal, up to 3 years for integrity, disputes, and repeat-abuse prevention.
Safety reports, moderation, and appeals	Up to 5 years after closure, longer for serious repeat abuse, a preservation request, or a legal hold.
Authentication, security, and access logs	Up to 2 years, unless a shorter period is sufficient or a security investigation requires longer.
Subscription, transaction, tax, and accounting records	Up to 7 years or the longer period required by tax, accounting, payment, or legal obligations.
Google Analytics user-level and event data	Up to 14 months, subject to configuration and Google's separate retention of data it controls.
Support requests	Up to 3 years after closure, or up to 5 years if tied to safety, billing, or a legal dispute.
Backups	Rotated within 90 days; restored data remains subject to the original deletion restriction.

We may retain information longer when required by law, subject to a litigation or preservation hold, needed to protect safety, or necessary to prevent fraud or repeated policy evasion. We may retain minimal suppression records to honor opt-outs and prevent re-contact.

11. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we handle. No method of storage or transmission is completely secure. You are responsible for using a unique password, protecting your devices, and promptly reporting suspected account compromise.

12. Children

The Platform is not directed to children and is available only to people at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a child submitted personal information, contact [email protected] so we can investigate and take appropriate action.

13. United States processing

JustList is operated in the United States. We and our providers may process information in the United States and other countries where our providers operate, subject to applicable safeguards and law.

14. Your requests

You may update certain account and profile information through the Platform. To request access, correction, deletion, a copy, or another applicable privacy right, email [email protected]. We may verify your identity and authority before acting. Applicable law may allow or require us to deny or limit a request; if so, we will explain the basis when required.

Authorized agents may submit requests where permitted by law. We may require proof of authority and direct verification with the consumer. We will not discriminate against you for exercising an applicable privacy right.

15. Changes to this Policy

We may update this Policy prospectively as our practices or law change. We will revise the effective date and provide additional notice when required. If a change materially affects how we use information already collected, we will obtain consent when required by law.

16. Contact

IQClub Inc., Attn: JustList Privacy, 3540 Toringdon Way, Ste 200 Unit #5087, Charlotte, NC 28277.

Email: [email protected]. General inquiries: [email protected].