Privacy Policy

Last Updated: May 6, 2026

This Privacy Policy describes how Leadeye Pro (the “Extension”, “we”, or “our”), published by Leadeye Pro LLC, handles user data when you use our Chrome browser extension. The Extension's single purpose is to help automotive dealership employees synchronize their dealer inventory with their own Facebook Marketplace listings (post, price-update, and reconcile).

This policy explicitly addresses the four areas required by the Chrome Web Store Developer Program Policies: Data Collection, Data Handling, Data Storage, and Data Sharing. No section is omitted. Each data category we collect is fully disclosed below.

1. Data Collection

The Extension collects only the following four categories of user data, exactly matching the categories declared on our Chrome Web Store listing:

CWS data category	What we collect	Where it comes from
Personally identifiable information	Your username, work email address, dealership store/location, and (optionally) display name.	You enter these once at signup inside the Extension's settings UI. We do not read them from any web page.
Authentication information	Your account password (hashed before storage; never stored or transmitted in plaintext) and your Leadeye Pro license key.	You enter these in the Extension's settings UI. They are never read from third-party pages or cookies.
Web history	The URLs of the dealer inventory pages and Facebook Marketplace pages you visit while you have the Extension's UI open and are using it. We do not track general browsing.	The Extension's content scripts run only on the host patterns declared in the manifest: your dealer inventory site (e.g. https://www.lamesarv.com/*) and https://www.facebook.com/marketplace/*. We do not read history outside these hosts.
Website content	Vehicle inventory data — titles, stock numbers, prices, mileage, year/make/model, vehicle photos, and the text of your own Facebook Marketplace listings — for reconciliation against your dealer inventory.	Read from the dealer inventory page DOM and from facebook.com/marketplace/* pages that show your own listings. We do not read other Facebook users' listings, posts, messages, friend lists, notifications, or groups.

Categories we do NOT collect: health information, financial or payment information, personal communications (emails, texts, chat messages), location (region, IP address, GPS), and user activity (mouse position, keystroke logging, network monitoring). The corresponding Chrome Web Store boxes are unchecked because the Extension does not collect these categories.

2. Data Handling

The four categories of data collected above are handled exclusively as follows. We do not process user data for any purpose unrelated to the Extension's single declared purpose.

CWS data category	How it is handled
Personally identifiable information	Used to identify which dealership employee owns each account so that managers can attribute leaderboard metrics to a real person and so that team-shared inventory data is correctly scoped. Work email is never used to send marketing, alerts, notifications, or any outbound communication.
Authentication information	Password is hashed (one-way) using a modern password-hashing algorithm before being persisted. Plaintext is held in memory only for the duration of the login request. License key is sent over HTTPS to our license-validation endpoint to verify your subscription is active. Neither value is shared with third parties.
Web history	The URL of the active page is read locally inside the Extension to decide whether to inject the inventory overlay (dealer site) or the Marketplace post-helper UI (Facebook). The list of dealer-inventory URLs the Extension has scanned is stored locally so the Extension can de-duplicate listings; it is not transmitted to our servers in raw form.
Website content	Vehicle data scraped from the dealer inventory page DOM is used to auto-fill Facebook Marketplace listing forms when you click “Post to FB” on a row. Marketplace listing data scraped from facebook.com/marketplace/* is used solely to reconcile your own listings against the dealer inventory (e.g. detect price mismatches, mark sold items). No website content is used for advertising, profiling, training models, or any purpose unrelated to the Extension's single purpose.

2.1 Chrome Web Store Limited Use disclosure

In compliance with the Chrome Web Store Developer Program Policies' Limited Use requirements, our use of information received from Facebook, dealer inventory websites, and your account is strictly limited as follows:

• We only use user data to provide and improve the user-facing features of the Extension that are prominent in the user interface (dealer inventory ↔ Facebook Marketplace synchronization).
• We do not sell, rent, or transfer user data to third parties for advertising, marketing, creditworthiness, lending, or any other purpose unrelated to the Extension's single purpose.
• We do not use or transfer user data to determine creditworthiness or for any lending purpose.
• We do not allow humans to read user data, except: (a) with your explicit consent; (b) for security purposes such as investigating abuse; (c) to comply with applicable law; or (d) when the data is aggregated and used for internal operations in accordance with applicable privacy law.
• We do not use user data to train, fine-tune, or otherwise build generalized AI/ML models. AI-assisted listing description text inside the Extension is generated on-demand using third-party LLM APIs grounded only in the active vehicle's specifications; the prompts and outputs for that single listing are not retained for model training.

3. Data Storage

Data collected by the Extension is stored in two locations only:

3.1 Local storage on your device

The following data is stored locally in your browser using Chrome's chrome.storage.local API and never leaves your device unless explicitly transmitted as described in §3.2:

• Cached dealer inventory data (titles, stock numbers, prices, photos)
• The list of dealer-inventory URLs the Extension has scanned (Web history)
• Button statuses for individual listings (posted / needs price update / sold)
• Per-listing match associations between your inventory and your Facebook Marketplace listings
• Your user preferences and UI state

Local data is retained until you clear it (Settings → Clear cached data), uninstall the Extension, or clear your browser's storage for the Extension's origin. Uninstalling the Extension automatically deletes all chrome.storage.local data.

3.2 Cloud storage on our secure servers

If, and only if, you are signed in with an active license, the following subset of data is transmitted over HTTPS (TLS 1.2+) to our secure backend at leadeyepro.com for cross-device and cross-team-member synchronization:

• Username, hashed password, work email, dealership store/location (Personally identifiable information & Authentication information)
• License key (Authentication information)
• Confirmed listing matches between dealer inventory items and Facebook Marketplace listings (Website content)
• Facebook listing metadata (titles, prices, listing URLs, post dates) for the staff member's own listings (Website content)
• Button statuses for shared inventory rows (Website content)

Cloud data is stored in a managed MongoDB cluster operated by Leadeye Pro LLC, hosted on infrastructure providers (currently MongoDB Atlas / Amazon Web Services) bound by their own data-protection agreements. Data is encrypted in transit via HTTPS and encrypted at rest by the underlying database provider. Cloud data is retained for as long as your account is active. To request deletion of all cloud-synced data associated with your account, email support@leadeyepro.com; we will action the deletion within 30 days.

3.3 Data retention periods

We retain user data only for as long as needed to provide the Extension's single declared purpose. Specific retention periods:

• Local browser data (chrome.storage.local): retained until you uninstall the Extension, clear the Extension's browser storage, or click Settings → Clear cached data. Uninstall removes 100% of local data automatically — no manual cleanup required.
• Cloud-synced account data (PII, hashed credentials, license key, match map, listing metadata): retained for the lifetime of your active account. Deletion is actionable on request via support@leadeyepro.com and is completed within 30 days. After account closure, data is purged within 90 days unless a longer period is required by law (e.g. tax / accounting records for paid subscriptions).
• Server access logs (HTTPS request metadata: timestamp, endpoint, status code — no body, no personal data): retained for up to 30 days for security and debugging, then automatically rotated out.
• AI-assisted description requests: the prompt and the generated description text are not retained by us at all — they are forwarded to the LLM provider in real time and discarded the moment the response returns. The LLM providers (Google Gemini, OpenAI) honor their own enterprise-grade data-protection terms and do not retain these requests for model training.

3.4 Security

We implement appropriate organizational and technical security measures including HTTPS for all data transmission, password hashing using a modern one-way algorithm, scoped database access, and standard cloud-provider security baselines. No security control is perfect, but we do not retain any data we do not need.

4. Data Sharing

We do not sell, rent, trade, or transfer any of the four data categories listed in §1 to third parties for advertising, marketing, profiling, creditworthiness, lending, or any purpose unrelated to the Extension's single declared purpose.

The only circumstances in which user data may be shared are:

• With other employees of your own dealership organization, through the cloud-sync feature you opt into, so that team members at the same store can share an authoritative inventory↔Marketplace match map. You control this by choosing which organization to sign in under. Data is never shared across dealership organizations.
• With infrastructure subprocessors strictly for hosting and delivery: MongoDB Atlas (database hosting), Amazon Web Services (compute / object storage), and Cloudflare (HTTPS edge / DNS). These subprocessors only process data on our behalf, are bound by data-protection agreements, and may not use the data for their own purposes.
• With Facebook/Meta, only to the extent that you, as the logged-in Facebook user, post or update a Facebook Marketplace listing. The Extension submits listing content to Facebook through Facebook's own UI; Facebook's handling of that content is governed by Facebook's Privacy Policy, not this one.
• With third-party LLM providers (Google Gemini and OpenAI), only when you explicitly request AI-assisted description text for a listing, and only the active vehicle's specification fields (year, make, model, mileage, features) are sent. No PII, authentication, web history, or unrelated content is sent. The LLM providers are bound by their own enterprise data-protection terms and do not use these requests to train their public models.
• If required by law, valid legal process, or to protect the rights, safety, and integrity of Leadeye Pro or our users.
• In a business transfer: if Leadeye Pro is acquired or merges with another entity, user data may be transferred to the successor entity, which will remain bound by this Privacy Policy or a successor that is no less protective.

5. Your Rights

• Access: You can view all data the Extension has stored about you through the Extension's settings UI (locally cached data) or by emailing us (cloud-stored data).
• Correction: You can edit your username, email, store, and password from the Extension's settings UI.
• Deletion: Local data is deleted when you uninstall the Extension or clear browser storage. Cloud data deletion can be requested by emailing support@leadeyepro.com; we action requests within 30 days.
• Portability: Email us to request a machine-readable export of your cloud-stored data.
• Withdraw consent: You can disable cloud sync, sign out, or uninstall the Extension at any time.

6. Children's Privacy

The Extension is intended for business use by automotive dealership employees and is not directed at, or knowingly used by, children under 13 (or 16 in jurisdictions where that is the applicable age). We do not knowingly collect data from children.

7. International Users

Leadeye Pro is operated from the United States. If you access the Extension from outside the United States, you understand and agree that your data may be transferred to, stored in, and processed in the United States. We rely on standard contractual clauses or equivalent mechanisms with our subprocessors where required by law.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be reflected in an updated “Last Updated” date above and, where appropriate, surfaced inside the Extension's UI on next launch.

9. Contact Us

Questions, concerns, or requests regarding this Privacy Policy can be sent to:

Email: support@leadeyepro.com

Postal: Leadeye Pro LLC, c/o Privacy, United States.