Privacy policy

RelistAI helps sellers prepare editable listing drafts on Depop, Mercari US and Facebook Marketplace. This policy covers listing content, photos, credentials, local operational records and optional subscription services.

Listing content and drafts

On supported marketplace routes, RelistAI checks the page URL and reads the elements needed to show its seller tools. When you clone a listing, it reads supported item details: title, description, price, currency, brand, category, size, condition, colors, style tags, hashtags, photos, source URL and available listing date or like count. It uses those details to save a local copy and fill a new editable draft. It also reads relevant form fields and uploaded photo previews for filling and AI photo autofill.

When you request the Pro shop scan, it reads currently loaded listing cards, URLs and available age or like-count information to highlight older items with low known engagement. Cards missing age or engagement data are left unmarked. It does not inspect unrendered inventory or run an unattended seller bot. Pro cross-platform paste uses a saved vault item to prepare a draft on your chosen supported marketplace.

Item photos and descriptions can contain personal information, and source URLs may contain usernames. Select material you are authorized to use. RelistAI does not request marketplace passwords or copy marketplace authentication cookies or tokens. It does not collect general browser history, private messages or unrelated account content.

Local extension storage

Your vault, photo bytes, preferences and AI settings are stored in Chrome local extension storage. The vault holds at most 20 recent items and has an 8 MiB budget. Older items can be removed when those limits are reached.

Local counters and action reservation records enforce the free tier's three successful AI drafts and three successful relist fills per week. Pro has no weekly action-credit limit. All accounts still have AI limits of one request every 20 seconds, three per minute and 30 per hour. Request timestamps enforce these limits. Weekly free counters reset Monday at 00:00 UTC when the extension next checks usage; AI limits consider the preceding hour. These records are not sent to the publisher for analytics.

Queued clone/fill jobs are stored in Chrome session storage. They expire after ten minutes when checked and are removed when their tab closes. Local, sync and session storage areas are restricted to trusted extension contexts. Your AI key is excluded from page-facing settings and vault exports.

AI photos and credentials

AI photo autofill is optional. You select Google Gemini, OpenAI or your own compatible public HTTPS proxy, choose a model, supply a provider key if required and grant Chrome permission for that endpoint's origin.

Saving settings does not send photos. Clicking AI Fill sends the first one or two uploaded item photos, compressed to JPEG at a maximum dimension of 800 pixels, together with an instruction for generating listing text. The model and API key, if required, are sent to that service. The request does not include your vault, marketplace source URL, listing identifier or local usage ledger.

Your AI key stays in local extension storage until you remove or replace it, and is sent only to the selected endpoint for authentication. Changing provider or endpoint origin clears the old key unless you supply a replacement. Requests use HTTPS, omit browser credentials and referrer information, and reject redirects. The selected service receives photos and ordinary connection information needed to process them. Its processing, retention and API charges are governed by your relationship with that provider. Pro subscriptions do not include AI provider credits.

Marketplace photo downloads and form fields

For your selected action, RelistAI downloads listing photo bytes from approved marketplace domains or photo hosts. Those hosts receive the ordinary request information needed to serve the images. Photo-download requests omit browser credentials and reject redirects.

Filling a draft places saved or generated content into the marketplace's form. The marketplace may process uploaded photos and draft data under its own policies. You review the result and decide whether to publish or remove a listing. RelistAI does not click Publish, Delete, Save or Next for you.

Subscription services and Chrome sync storage

RelistAI uses ExtensionPay for optional Pro checkout, restoration, subscription management and verification of paid access. The configured extension includes a bundled payment-page bridge and permission for extensionpay.com. Stripe handles card or bank information in the payment flow; the extension does not itself read or store those details.

The ExtensionPay library records an installation timestamp in Chrome sync storage when initialized, including before checkout. If sync is unavailable, it uses local storage. This timestamp is a stored record. Without an ExtensionPay authentication key, its user check returns free status locally rather than contacting the user-status endpoint.

When you select Upgrade to Pro or Restore purchase, the library creates an ExtensionPay authentication key if none is already stored and opens the corresponding ExtensionPay page. The key is sent to ExtensionPay for checkout, restoration and subsequent account/subscription verification. The library caches the full user object returned by ExtensionPay in Chrome sync storage, with local storage as a fallback. Depending on the returned data, this can include email, plan information, payment/subscription status and related dates. RelistAI uses verified paid status to control Pro access; failed verification does not grant paid features.

Chrome may sync these ExtensionPay records according to your browser settings. Listing content and AI API keys remain in local storage and are not part of these payment sync records. ExtensionPay and Stripe retain and process their service records under their own policies. Subscription charges are separate from your selected AI provider's charges.

Data use and third parties

RelistAI uses handled data only for the disclosed draft features, optional subscriptions and related usage, security and reliability controls. It does not sell user data or use it for advertising or creditworthiness decisions. It has no analytics or advertising endpoint and no publisher-operated service receiving your vault or AI API key.

The involved third parties are the marketplace and its photo hosts, your selected AI service when you click AI Fill, Chrome's storage/sync facilities, ExtensionPay for subscriptions and Stripe for payments. The extension does not send listing content or AI API keys to ExtensionPay or Stripe. If you voluntarily send material to the publisher for support, the publisher can see what you provide; do not include credentials or API keys.

RelistAI's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Chrome Web Store User Data policy.

Controls and retention

You can remove saved vault items and remove the saved AI key through provider settings. Vault exports contain listing content and photos, excluding AI credentials, settings and usage records. Exported files are outside extension storage and remain until you delete them yourself.

Uninstalling removes local extension data under Chrome's storage behavior. It does not cancel a Pro subscription or delete records held by ExtensionPay, Stripe, a marketplace or an AI service. Cancel or manage subscriptions through Manage subscription or ExtensionPay, and contact the relevant service for its record/deletion process. Synced ExtensionPay data is subject to Chrome's sync behavior and your browser settings. Disabling the extension stops its actions while retaining stored data. You can manage or revoke optional endpoint permissions in Chrome.

Contact and changes

For support or privacy questions, contact haowenapps@gmail.com. This policy will be updated when data practices change. Material new practices will be disclosed before introduction.