Privacy

Privacy Policy

Effective July 21, 2026

This policy explains what AutoRep HQ processes when an automotive sales representative uses the website, browser extension, membership access, and support tools.

What the extension processes

The extension acts only after you choose a public vehicle-detail page and request a draft. It may process the public page URL, vehicle facts, pricing, mileage, VIN, stock number, colors, descriptions, photo URLs, and video URLs. It combines those facts with the sales profile you provide, including your name, phone number, dealership, location, website, listing preferences, call-to-action, and disclaimer.

Your profile is stored using Chrome storage. After activation, your Whop membership identifier or software license is exchanged for an AutoRep HQ access token; the token, consent timestamp, most recent draft, and most recent compatibility-report receipt are stored locally in the browser. Chrome may sync profile settings according to your signed-in Chrome configuration.

How information is used

• To import a selected public vehicle page and generate a review-ready draft.
• To verify active paid access through Whop when subscriptions are enabled.
• To measure plan usage and apply fair-use limits.
• To relay public vehicle photos when a dealership or media host blocks a direct browser download.
• To generate listing copy through OpenAI when AI-assisted descriptions are enabled on the service.
• To diagnose compatibility failures and protect the service from abuse.

Facebook receives draft fields or photos only when you click the corresponding fill or upload control. The extension does not publish a listing automatically. You must review the Marketplace form and click Post yourself.

Compatibility reports

When you deliberately submit a compatibility report, it includes a category, any note you choose to write, the public page hostname and URL, extension version, import method, extraction method, photo and video counts, and whether a price or VIN was detected. Query parameters, URL fragments, credentials, your sales profile, membership information, and your AutoRep HQ access token are excluded from the report payload. Do not include private customer or login information in the optional note.

Information we do not request

AutoRep HQ does not request or intentionally collect your Facebook password, Facebook cookies, private messages, dealership employee credentials, customer records, payment-card details, or Whop API keys. The extension is designed for public dealership inventory pages, not internal dealer systems.

Service providers and retention

Vercel hosts the website and API and may process ordinary request and security logs. Upstash stores hashed access tokens, minimum Whop entitlement identifiers and statuses, webhook event receipts, and usage counters. Whop processes membership, billing, and community access. OpenAI may process draft-generation inputs when that optional server feature is enabled. Public dealership and media hosts provide the inventory data and images you select.

Operational and compatibility records may be retained for up to 90 days unless a longer period is required for security, legal compliance, or an unresolved support matter. Browser-stored settings remain until you clear extension data or uninstall the extension. Payment and membership records are retained by Whop under its own policies.

Sharing, sale, and advertising

We do not sell personal information, use it for targeted advertising, or transfer it to data brokers. Information is shared only with service providers needed to deliver the requested feature, comply with law, or protect the service and its users.

Your choices

You can edit your profile from the extension setup page, decline a compatibility report, clear the extension's storage, or uninstall it. To request deletion of server-side support or compatibility information, contact support through the AutoRep HQ Whop membership and include the report identifier when available.

Chrome Web Store limited use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Security and changes

We use reasonable technical and organizational safeguards, but no online service is completely secure. We may update this policy as the product or legal requirements change. Material changes will be posted here and communicated through the member community when appropriate.

Contact

For privacy questions or requests, use the AutoRep HQ support channel in Whop or follow the instructions on the support page.