Privacy Policy

Information we collect

• Account information, including your email address, Supabase user identifier, authentication session, subscription status, plan, credit balance, and credit history.
• Marketplace and automation data you direct the extension to process, such as Amazon URLs and ASINs, product details, prices, stock, images, eBay listing IDs, SKUs, titles, orders, fees, profit estimates, fulfillment status, buyer messages, and delivery estimates.
• Checkout profile information you choose to save, including name, phone number, billing address, and customer-message template. Never enter a card number into Dropomatic.
• Operational data needed to run and troubleshoot automation, such as run status, timestamps, errors, and token-usage estimates.

Where information is stored

Most automation state is stored in your Chrome extension storage. Account, credit, listing, order, store, and synchronization records may also be stored in Dropomatic's managed Supabase project so they remain available across signed-in devices.

Your saved checkout profile is encrypted before it is stored in a private Supabase table. Authentication and authorization rules restrict it to your signed-in account. AI provider keys are stored only in your browser's extension storage and are not saved to Dropomatic's cloud.

How we use information

• Authenticate your account and maintain your subscription and listing credits.
• Create, monitor, price, and fulfill listings at your direction; match Amazon products to eBay listings; review offers; and show business reports.
• Restore your settings and data on another signed-in browser, prevent duplicate shared product links, secure the service, and diagnose failures.
• We do not sell personal information, use it for targeted advertising, or use marketplace data to build advertising profiles.

When information is shared

We share only the information required to provide a feature you request. Supabase provides authentication and database hosting. Stripe processes website checkout and payment details; Dropomatic receives subscription and customer identifiers but not your full card number. Amazon and eBay receive data through the browser actions you direct.

If you configure OpenAI, Anthropic, or OpenRouter, relevant product and listing text is sent directly to the provider you selected using the API key stored in your browser. If you use address validation, the address is sent through a protected Supabase Edge Function to Geoapify. These providers process information under their own terms and privacy policies.

Chrome extension permissions

Dropomatic requests access to Amazon and eBay pages because those are the pages it reads and operates when you start listing, tracking, offer, or fulfillment tasks. It uses extension storage for settings and automation state, alarms for scheduled tracking, tabs to open and close user-directed work pages, and scripting to run automation on those pages. Access to an AI provider is requested only when you choose and verify that provider.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention, security, and your choices

We retain cloud records while your account is active or as needed for billing, security, legal, and service-continuity purposes. You can clear local extension data, remove saved checkout details, disconnect cloud data, or request account deletion. We use HTTPS, Supabase row-level security, private database tables, signed webhooks, and encryption for sensitive checkout-profile fields. No system can guarantee absolute security.

To request access, correction, export, or deletion, follow the instructions on the Data Deletion page or email privacy@dropomatic.com. We may need to verify that you control the account before completing a request.

Children and changes

Dropomatic is a business tool and is not directed to children under 13. We may update this policy as the service changes. Material changes will be posted here with a revised date.