AutoTonic privacy policy

Facebook messages

The current extension does not read your Facebook inbox or messages. Older versions of the extension could store message details, such as thread identifiers, participant names, message text and timestamps. Records stored by those older versions are not deleted automatically; you can ask us to delete them using the contact below.

The extension's purpose

AutoTonic helps an authorized automotive salesperson prepare dealership inventory for Facebook Marketplace, review text and photos, and recover an ordered preparation queue. Other supported destinations provide manual copy or export tools, not automatic cross-platform publishing. Importing or preparing inventory does not publish a listing. The salesperson remains responsible for Facebook's final Publish action.

Data accessed and collected

The extension may handle:

• Account and authentication data, including your account email, session tokens, organization identity, and plan entitlement. The extension can reuse a signed-in workspace session in the same Chrome profile. If you sign in inside the side panel, your password is sent over HTTPS to AutoTonic authentication and is not saved by the extension or included in analytics.
• Dealership inventory content, including vehicle descriptions, VIN or stock number, price, mileage, location, source URL, and authorized vehicle photos.
• Supported Facebook Marketplace composer fields, vehicle photos, listing identifiers and preparation-state evidence needed for the salesperson's requested review workflow. The current extension does not read Facebook messages.
• Photos you add yourself, where adding them is available. Photos you add in the side panel are turned upright, made at most 2048 pixels on their longest side and saved as JPEG without camera details such as location. They stay in Chrome's storage on that computer, are sent only to Facebook when you prepare the vehicle, and are deleted from the computer a week after they were added once no vehicle or draft uses them. Photos you add in the workspace, for example from your phone, are processed the same way on AutoTonic's servers and kept in private storage until you remove them or delete the vehicle; the side panel copies them to your computer when you open that vehicle.
• The status of your own Marketplace listings, where the active listings check is available. When the side panel opens (at most every 30 minutes) and every 3 hours while Chrome is open, the extension opens your Facebook “Your listings” page in a background tab, reads it and closes it, without clicking or changing anything. It sends AutoTonic the title, price, status (active, pending, sold or draft) and, when the page shows it, the Facebook listing number of each listing whose title includes a vehicle year, and how many active listings Facebook shows; your other listings are only counted. AutoTonic uses this to mark your own vehicles' listings as active, sold, a draft or no longer on Facebook, and keeps those statuses, the Facebook listing numbers it matched, and the time and counts of each check, not the listings it read.
• Workflow activity such as selected vehicles, queue position, status, failures, retries, synchronization checkpoints, duplicate-prevention identifiers, and the page on which AutoTonic was activated.
• Description preferences, including opening and closing text and retained prior instructions, saved for the authenticated user and organization. Personal Brand additionally handles an uploaded logo or headshot, and a public-page cover, banner settings, salesperson-page content, chosen public contact details, inquiry contact details and messages, and opaque referral attribution. Referral links contain no customer name or email and provide attribution and reporting only, not rewards or payouts. Banner images and reviewed first-photo crops are processed on AutoTonic servers; the extension also renders local previews. Dealer-banner removal uses a reviewed top or bottom edge crop, not AI or automatic detection. Banner tools are available to Personal Brand accounts and Auto Lister accounts with the temporary early-user perk. Banner details are edited in the workspace; the extension selects how to use the saved banner for each vehicle. Original photos remain available; uploaded and processed assets require review and approval before public use. Public contact fields are chosen separately from private account details. Prepared descriptions and photos are retained with the account-scoped draft or queue, and authorized inventory imports are sent to the AutoTonic API. Original photos are preserved.
• Technical request information received by service infrastructure, such as IP address, browser metadata, request time, and error details.
• Your Terms of Service acknowledgement and its version/time, signup plan and referral/campaign attribution. Optional setup may store your selected lead sources, Marketplace listing frequency, and current and target monthly sales. Saved answers and progress belong to your signed-in account. Every question is optional. Completing setup or skipping the remaining questions finishes this first-sign-in flow; completed or skipped setup is not shown again. Your answers do not change your plan, restart your free period, or predict sales.

AutoTonic does not intentionally collect health information, payment-card details, or general keystrokes. It does not use the requested page access to create or sell a general browsing-history profile.

Why the permissions are required

• storage: preserves your session, settings, prepared vehicles, ordered queue, item outcomes, and synchronization checkpoints across extension or browser restarts.
• activeTab and scripting: run packaged AutoTonic code on a user-selected dealership or Marketplace page to read and prepare the content needed for the requested workflow.
• tabs: opens and tracks the single Marketplace composer used by the sequential queue and temporary pages used for authorized inventory extraction or review.
• alarms: preserves configured pacing and resumes pending preparation and permitted retry work after Chrome suspends the service worker.
• sidePanel: provides authentication, inventory review, queue status and failure recovery.
• host access: supports dealership inventory systems on different domains, Facebook Marketplace pages, authorized image hosts, and the AutoTonic API and workspace.

The extension does not download or execute remote JavaScript or WebAssembly. Its executable code is packaged locally.

How data is used

Data is used to authenticate the user, prepare and import authorized inventory, operate and recover the sequential listing queue, prevent duplicate work, record preparation and review state, route salesperson-page inquiries and referral attribution to the correct salesperson and organization, and display account-owned workspace records. AutoTonic does not automate follow-ups or send messages to your customers. Uncertain identity or attribution evidence is not silently treated as a trusted match.

AutoTonic does not claim a listing was published or a message was sent or delivered without supporting evidence. Manually logged interactions are records only and do not send a customer message.

Analytics and AI availability

If operational analytics is enabled, the server-only PostHog funnel uses pseudonymous workspace identifiers and bounded plan, preparation-count and billing-status fields. It excludes passwords, verification links, email addresses, customer messages, inquiry contents and lead contact details. Session recording remains off.

When you generate a description, AutoTonic sends that vehicle's details (such as year, make, model, trim, price, mileage and features), the dealership's own description of the vehicle, and your saved description instructions to OpenAI, our AI service provider, to write the text. It does not send your customers' details. Generated descriptions are checked against the vehicle's facts and are always yours to review and edit before you post.

Where the custom background feature is available and you choose a background, the photos you tick for a vehicle are processed when it is prepared: the first photo unless you tick others, and never photos you uploaded yourself. For a blurred or plain background, each ticked photo is sent to Photoroom to separate the vehicle from its background, and a smaller copy is checked by OpenAI to confirm it shows the outside of a vehicle. For the empty parking lot background, each ticked photo is sent to OpenAI, whose image editor replaces the background, and OpenAI then compares the result with the original to confirm the vehicle is unchanged. If a check is unsure or a service does not answer, the original photo is used. Banners are added to photos by AutoTonic's own servers, not by AI.

The Support page may offer a quick-answer chat. When it is available and you use it, the question you type and the short chat before it are sent to OpenAI, our AI service provider for that feature, to produce an automated answer. AutoTonic does not add your vehicles, customers, account details or email address to that request. Answers are generated automatically and can be wrong; do not enter passwords, card numbers or verification codes. The support request form does not use this service.

Storage and retention

Queue and session data is stored in Chrome extension storage on the signed-in browser. Authorized workflow data is stored in the AutoTonic database and object storage. Operational logs and backups may retain limited copies for security, diagnosis, and recovery until their applicable service retention period expires.

AutoTonic does not currently provide an in-product self-service deletion control. You may disable or remove the extension to stop further processing and may request deletion of your account and associated workspace data using the contact below. A request is verified before deletion and may exclude records that must be preserved temporarily for security, legal, or recovery purposes.

Service providers and data sharing

AutoTonic uses Supabase for authentication, database, and storage; Railway for the API; Vercel for the account workspace; Resend for email delivery; Stripe for payments; OpenAI for AI descriptions, the support quick-answer chat, photo checks and the empty parking lot background; Photoroom for blurred and plain photo backgrounds; and Google Chrome and the Chrome Web Store to run and distribute the extension. Facebook and related image hosts provide the pages and content that the authorized user asks AutoTonic to process. These providers may process data under their own terms and privacy policies while supplying their services.

The application does not receive raw payment-card details. Support email delivery uses the configured email provider. PostHog analytics requires separate configuration; session recording is off.

AutoTonic does not sell user data, use or transfer it for advertising, use it for a purpose unrelated to the extension's stated purpose, or use it to determine creditworthiness or for lending. Data is shared only with the user's authorized AutoTonic organization, the processors needed to operate the service, or when legally required.

Security and organization boundaries

Hosted service traffic uses HTTPS. The API validates approved extension origins, sessions and organization membership. The secure extension sign-in handoff uses the existing verified workspace session or an inline side-panel sign-in, with fixed service destinations; it does not put passwords or session tokens in redirect URLs. Database row-level policies help isolate organizations. Server-only credentials are not included in the extension. No internet service can guarantee absolute security, and users should report unexpected access or data immediately.

Contact and deletion requests

For privacy questions, access or correction requests, or deletion of a account and its associated data, email support@autotonic.ca. Include your account email and the request type, but do not send a password, session token, customer message, or other secret by email.