Privacy Policy
Overview
VinPostr ("the Extension") is a Chrome browser extension that helps dealership employees copy vehicle listing data from dealership websites and post it to Facebook Marketplace. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
By installing or using the Extension, you agree to the practices described in this policy.
Data We Collect
Data you provide: When you create an account, we collect your email address and password (used for authentication via Supabase). Subscription and payment records are processed by Stripe — we never see or store your payment card details.
Data collected automatically: The Extension collects the following locally on your device:
- Vehicle listing data scraped from your dealership website (title, price, mileage, stock number, description, photos, colors, body style, transmission)
- Field mapping settings that tell the Extension where to find vehicle data
- A list of vehicles you have posted (stored by stock number or URL)
- Your custom AI description prompt, if you set one
Data we do NOT collect: Your Facebook credentials, credit card information, browsing history outside your dealership website, or any personally identifiable information beyond your email address.
How We Use Your Data
- Your email and password are used to authenticate your account and verify your subscription
- Vehicle data is used only to populate Facebook Marketplace listing forms on your behalf — it is never transmitted to our servers
- Your AI prompt is stored locally and sent to the Anthropic API only when you click "AI Rewrite"
- Posting activity is synced to our database so dealer admins can track team productivity
Third-Party Services
Supabase: Manages user accounts and subscription records. Privacy Policy
Stripe: Processes subscription payments. We never receive your card details. Privacy Policy
Anthropic: Powers AI description rewrites. Subject to Anthropic's usage policies. Privacy Policy
Facebook Marketplace: We fill in listing forms on your behalf but do not access or store your Facebook credentials.
Data Storage and Security
Vehicle data, field mappings, and posted vehicle history are stored locally in your browser using Chrome's built-in storage (chrome.storage.local). This data never leaves your device unless explicitly sent to a third-party service described above. Account data stored in Supabase is protected using industry-standard encryption and Row Level Security.
Data Retention
We retain your account data for as long as your account remains active. To request deletion, contact us and we will remove your data from Supabase within 30 days. Locally stored data can be cleared at any time by clicking "Reset All" in the Extension popup or by uninstalling the Extension.
Your Rights
You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, please contact us.
Children's Privacy
VinPostr is intended for use by dealership professionals and is not directed at children under the age of 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Extension after changes are posted constitutes your acceptance of the revised policy.
Contact Us
For privacy questions or data requests, please contact us through the VinPostr website at vinpostr.com.