Overview
CounterList AI ("we", "our") is listing software for dealership parts departments. It helps parts managers and parts advisors keep a shortlist of featured parts and accessories, write listing copy from the facts on their parts sheet, and publish those parts to Facebook Marketplace. This policy explains what information we collect, why we collect it, and how it is handled — across both the web application and the Chrome extension.
Information we collect
Account information
When your dealership creates an account for you, we store your name, work email address, role (for example Parts Advisor or Parts Manager), and the dealership you belong to. Passwords are handled by our authentication provider and are never stored by us in plain text.
Parts data
The core of the product: part details (part number, name, brand, fitment, category, condition, price) and part photos. This data describes parts and accessories offered for sale by your dealership — it is business inventory, not personal information. Photos are either the manufacturer's official catalogue images, which we look up by part number, or photos your team uploads.
Activity records
We log parts actions (for example, which team member added or listed a part) so that parts managers can see their department's activity. Advisors see only their own activity.
Device identifier
Each browser that signs in is given a random identifier, stored in that browser. It is how a login is limited to one computer at a time, so a password cannot quietly be shared around a department. It identifies the computer, not you, and it is never used to track you anywhere else.
What the Chrome extension reads
Three things, and nothing else. Your signed-in CounterList AI session and your dealership's parts list, from our own server. The Facebook Marketplace “Item for sale” form, which it fills. And, when you press Capture part from this page, the page you are looking at in that moment — it reads the part number, name, fitment, category and photo addresses from an accessory catalogue page so you do not have to type them. That capture happens only on the click, only on the tab you are on, and the page is read once and not stored. It also downloads a part's catalogue photo by part number when you ask for a lookup.
What the Chrome extension does — and does not do
- It does fill the Facebook Marketplace "Item for sale" form with a part you select: title, price, category, condition, description, SKU, product tags and photos.
- It does store your signed-in session (name, email, and authentication tokens) locally in your browser's extension storage so you stay signed in.
- It does not publish anything automatically. The extension fills in the Marketplace form and stops; you review the listing and click Publish yourself.
- It does read the accessory catalogue page you are on, once, when you press “Capture part from this page” — and only that page, only on that click.
- It does not collect your browsing history or track the pages you visit. Nothing is read in the background: every read happens because you clicked something.
- It does not read your Facebook messages, friends, feed, or any other Facebook data. It only writes into the listing form.
- It does not load remote code. All extension code ships inside the extension package reviewed by the Chrome Web Store.
How we use information
- To operate the service: showing your dealership its parts list, keeping team activity attributed to the right person, and filling Marketplace listings.
- To find photos: a part number is sent to the manufacturer's public accessory catalogue to locate that part's official product images. No personal or account data is included.
- To generate listing copy: when you use the copywriter, the selected part's details (never your personal account data) are sent to our AI provider to produce the listing title and description.
- To keep the service secure: authentication, session management, and role-based access control.
We do not sell or rent your data, use it for advertising, share it with data brokers, or use it for any purpose unrelated to running CounterList AI. We do not use your data to determine creditworthiness or for lending purposes.
Service providers
We rely on a small number of infrastructure providers to run the service: cloud application hosting, a managed database and authentication platform, and an AI model provider for listing-copy generation. Each receives only what is necessary to perform its function, and none are permitted to use your data for their own purposes.
Data retention
- Parts and account data are retained while your dealership's account is active.
- Photos your team uploads are kept with the part they belong to and removed when the part is deleted.
- When an account or dealership is deleted, its data is removed from the active system.
Security
All traffic between your browser, the extension, and our servers is encrypted with HTTPS. Authentication uses short-lived access tokens with silent renewal, and each account is tied to one signed-in computer at a time. Access to data is enforced server-side by role: advisors can only see their own activity, and billing information is restricted to dealership administrators.
Your choices and rights
- You can sign out of the extension at any time, which clears the locally stored session.
- Uninstalling the extension removes all locally stored extension data.
- You may request access to, correction of, or deletion of your personal information by contacting us at the address below.
Changes to this policy
If we make material changes to this policy, we will update this page and revise the effective date above.
Contact
Questions about this policy or your data: support@owl360it.com