Privacy Policy

Last updated: November 9, 2026

The Short Version: We collect only what's needed to provide the service. Your eBay data is synced to your Autotabit account and stored securely. Our optional AI features send the specific information they need to our AI provider, Anthropic, which does not use it to train its models. We never sell your data or share it with third parties for marketing purposes.

1. Introduction

This Privacy Policy explains how Autotabit ("we," "us," or "our") collects, uses, and protects your information when you use our website, web application, mobile app, and related services ("Service").

We are committed to protecting your privacy and being transparent about our data practices. This policy applies to all users of Autotabit.

2. How Autotabit Works

Understanding our architecture helps explain our privacy practices:

  • Your Account: You create an account on our web application at app.autotabit.com.
  • Data Storage: Your data is stored securely in our database hosted on Supabase's infrastructure.
  • eBay Connection: When you connect eBay, we sync your order and inventory data using eBay's official OAuth authentication.
  • AI Features: Some features, such as the support assistant and listing optimization, are powered by Claude, an AI model made by Anthropic (see Section 5).
  • Your Control: You can export or delete your data at any time.

3. Information We Collect

3.1 Account Information

Data Type Purpose
Email address Account creation, login, support, important notifications
Password (hashed) Account authentication (we never store plain-text passwords)
Subscription status Manage your plan and access level

3.2 eBay Data We Sync

When you connect your eBay account, we sync and store:

  • Order details (items sold, prices, dates, fees)
  • Active and sold inventory listings
  • eBay fees, transactions, and refund information
  • Promoted listing and ad fee information
  • Buyer usernames (for order identification only)

3.3 Data You Enter

We store information you manually enter or upload:

  • Cost of Goods Sold (COGS) for items
  • Sourcing trips, stores, and purchases
  • Business expenses and receipt photos you scan
  • Mileage logs
  • Sales from other platforms
  • Inventory storage locations

3.4 Support Assistant Conversations

When you use the in-app support assistant, we store your questions and the assistant's answers along with your account email. We use these logs to provide support, fix problems, and improve the assistant. They are deleted when you delete your account.

3.5 Usage Data

We collect basic usage information:

  • Login timestamps
  • Feature usage, such as which screens you visit and actions you perform (for improving the service)
  • How often you use AI features (to apply plan limits)
  • Error logs (for troubleshooting)

This usage data helps us understand what features are working well and where we can improve. Our feature-usage tracking does not record the content of your listings or your financial details.

3.6 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. Stripe provides us with limited information such as the last 4 digits of your card and billing address for receipt purposes.

For accounts connected to eBay outside the United States (for example eBay UK, Australia and Germany), Stripe sells the plan to you as the merchant of record (Stripe Managed Payments). Stripe then handles your billing details, sales tax or VAT, and receipts under its own privacy policy.

3.7 Referral Program

Our referral program is currently paused. If you joined it to receive payouts, Stripe collects the identity and bank details needed to pay you through Stripe Connect. We do not receive or store your bank account details. We store your Stripe account ID, its status, and your referral and payout history.

3.8 Share Cards

If you make a share card, we save the card's pictures and the numbers and details you chose to show, and publish them on a public page at app.autotabit.com/s/…. Anyone with the link can see that page, and sites where you post the link may show and keep a preview of it. Share cards never include order numbers, buyer names, or your email. An order card can include your listing's first photo if you turn Photo on, and a trip card can include store names if you turn them on. You can remove a share link at any time from the Share window, which takes down the page and its pictures; copies already saved by other sites or people are outside our control. Deleting your account removes all your share cards.

3.9 Autotabit Chrome Extension

The Autotabit extension for Google Chrome adds fee lines and price boxes to eBay search, sold and item pages, and lets you look up a photo's eBay sold prices from the right-click menu.

  • eBay pages: the extension reads what the eBay page already shows (prices, shipping, condition, sale format and category) and works out the fees in your browser. None of this is sent to us or anyone else.
  • Your extension settings (goal, label cost, store type, ad rate) are saved in Chrome's own storage, not on our servers. Chrome may sync them across your browsers if you use Chrome sync.
  • Photo lookups: only when you right-click and choose "Find eBay solds with Autotabit", the extension sends the photo's web address (or the photo itself) to Autotabit. If you right-click a page where the photo is covered, the extension looks at that one page at that moment to find the largest photo. The photo is sent to Anthropic as described in section 5. We don't keep it; we only record that a lookup was used, which counts toward your monthly photo lookups.
  • Connecting your account: Settings > Chrome extension creates a key that can only run photo lookups for your account. It cannot read or change your Autotabit data. The key itself is kept in Chrome's storage on your computer and is only sent to Autotabit with a photo lookup that you start, never to anyone else. We store only a scrambled (hashed) copy of it. You can disconnect at any time in Settings, and signing out of Autotabit disconnects the extension in that browser.
  • What it does not do: the extension does not read your browsing history, other websites (except the photo lookup above), or your eBay account, and it does not use your eBay connection to Autotabit. It never clicks, buys, lists or messages anything on eBay.

Autotabit's use of information received through the Chrome extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. The extension is not affiliated with eBay.

3.10 Contact Form

The contact form on our German legal notice page (autotabit.com/de/impressum) emails your name (optional), email address and message to our support mailbox so we can answer you. We don't store the message anywhere else. To limit spam, we keep a scrambled (hashed) copy of your email address and the time you sent it, and delete it after 30 days. We don't send you a copy and don't add you to any mailing list.

4. eBay API and OAuth

4.1 How eBay Connection Works

When you connect your eBay account:

  1. You are redirected to eBay's official sign-in page
  2. You authorize Autotabit to access your seller data
  3. eBay issues an OAuth token that we store securely
  4. We use this token to sync your orders and inventory and to carry out actions you request

4.2 eBay Permissions

Autotabit requests the following eBay permissions:

  • Orders (fulfillment): Read your orders and sales history
  • Finances: Read your fees, transactions, and payout records so we can calculate accurate profit
  • Inventory: Read your listings, and create, revise, reprice, end, and relist listings when you ask us to (for example, Sell Similar, Bulk Reprice, End & Relist, and AI listing optimization)
  • Account: Read your business policies (such as shipping and return policies) so new listings can use them
  • Marketing: Create and manage Promoted Listings campaigns when you ask us to

We only change your eBay listings or campaigns when you start the action. We cannot:

  • Make purchases
  • Move, withdraw, or redirect your eBay payouts
  • Message buyers
  • Change your eBay account settings

4.3 Revoking Access

You can disconnect Autotabit from your eBay account at any time through your eBay account settings (Account > Permissions > Third-party access) or through the Autotabit Settings page.

4.4 How We Use eBay Data

We use data from eBay only to provide the features you use in Autotabit, such as syncing, profit calculations, reports, and the actions you ask us to take on your eBay account. We do not sell eBay data, use it to train AI models, or use it to identify or compare individual sellers. Buyer usernames that come with your orders are used only to show you your own orders. When you delete your account, or eBay tells us an eBay account has been closed or asked for its data to be deleted, we delete that data as described in Section 10.

5. AI Features

Some Autotabit features use Claude, an AI model provided by Anthropic, PBC. When you use one of these features, we send Anthropic only the information that feature needs:

Feature What is sent
Support assistant Your question, recent messages in the conversation, and, when you ask about your own numbers, the relevant figures from your account (such as sales totals, profit, store results, item titles, and expenses)
AI listing optimization The listing's title, description, condition, and item details, plus up to 8 of its eBay listing photos
Expense category suggestions The description and vendor you type for an expense, when our built-in keyword matching cannot pick a category. This runs automatically as you type.
Receipt scanning The receipt photo you scan
Photo lookups (Look up solds) The photo you take of an item, to identify it and write a search phrase. We don't keep the photo; we only count that a lookup was used.
Photo lookups from the Chrome extension The photo you right-click. Our server downloads it from the web address you clicked and sends it to Anthropic to write a search phrase. We don't keep the photo; we only count that a lookup was used.

We do not send your password, payment details, or eBay tokens to Anthropic. Anthropic processes this data under its commercial terms, which do not allow it to use our customers' data to train its models. Anthropic keeps this data only for a limited time, as described in its policies.

You can turn AI features off at any time in Settings under AI Features. While they are off, none of the data above is sent to Anthropic and the support assistant is removed. You can turn them back on whenever you like.

AI answers can contain mistakes. Please check important figures against your Dashboard and reports.

6. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Calculate your profits, fees, and business metrics
  • Generate reports and tax documents
  • Carry out actions you request on your eBay account
  • Provide AI-powered features you choose to use
  • Process subscription payments and referral payouts
  • Send important service notifications
  • Provide customer support
  • Improve our Service
  • Create anonymized, combined statistics (see Section 8.1)

7. Data Security

We take data security seriously:

  • All data is encrypted in transit (HTTPS/TLS)
  • Database hosted on Supabase with enterprise-grade security
  • Passwords are hashed using industry-standard algorithms
  • eBay OAuth tokens are stored securely
  • Database backups are stored privately with restricted access
  • Regular security updates and monitoring
  • Access controls limit who can access production data

8. Data Sharing

We do NOT sell your data. We only share data with the service providers that help us run Autotabit:

  • Supabase: Our database and authentication provider
  • Anthropic: AI processing for the features in Section 5, and the AI tools we use to build, fix, and support Autotabit (such as Claude). When we troubleshoot a problem, these tools may see your account data. We keep model training turned off for these tools.
  • Stripe: Subscription payments and referral payouts
  • eBay: API communication for syncing data and carrying out actions you request
  • Cloudflare: Website and app hosting, security, and private storage of our database backups
  • GitHub: Private storage of our code
  • Google Analytics: Visitor statistics for our marketing website (autotabit.com)

We may also disclose information if required by law or to protect our rights.

If Autotabit is sold, merged, or transferred to another company, your information may be transferred as part of that deal. The new owner must follow this Privacy Policy for the information transferred, and we will tell you by email or in the Service before your information becomes subject to a different policy.

8.1 Anonymized Statistics

We may combine data from many Autotabit users into statistics that don't identify any user, eBay buyer, or store - for example, the average number of miles per sourcing trip. We may publish these statistics, for example in our blog. We only publish a statistic when it includes enough users that no one can be singled out. We never publish an individual user's data, item titles, buyer details, or anything that could identify you. Statistics that use data from eBay are only published where eBay's developer terms allow it.

9. Third-Party Services

Autotabit integrates with:

  • eBay API: eBay Privacy Notice
  • Anthropic (AI): Anthropic Privacy Policy
  • Stripe (payments): Stripe Privacy Policy
  • Supabase (database): Supabase Privacy Policy
  • Cloudflare (hosting and backups): Cloudflare Privacy Policy
  • GitHub (code): GitHub Privacy Statement
  • Google Analytics (website): Google Privacy Policy

10. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Your account data, including synced eBay data, data you entered, and support assistant conversations, is deleted within 30 days
  • Your share card pages and pictures are removed
  • A short record that the account was deleted is kept for security and troubleshooting
  • Anonymized usage statistics may be retained
  • Backup data is purged within 90 days

You can export all your data before deleting your account.

11. Your Rights

You have the right to:

  • Access: View and export all data we hold about you
  • Correction: Update your account information
  • Deletion: Delete your account and all associated data
  • Portability: Export your data in standard formats
  • Revoke Access: Disconnect eBay authorization at any time

To exercise these rights, visit your Settings page or contact us at support@autotabit.com.

12. Cookies

In the Autotabit app, we use only essential cookies and similar storage for:

  • Keeping you logged in
  • Security
  • Remembering your preferences

Our marketing website (autotabit.com) uses Google Analytics cookies to count visits and see which pages are useful. We do not use advertising cookies. You can block analytics cookies in your browser settings or with Google's opt-out add-on. Google Analytics is not loaded at all for visitors whose browser is set to a European time zone (the EU, EEA, UK and Switzerland), and our German pages never load it. Our German pages also load their fonts from our own server, not from Google.

We also count website visits ourselves, without cookies. When you view a page on autotabit.com, your browser sends us the page address, the site that linked you (without its query string), any campaign tags in the link, how long the page was open, how far you scrolled, whether you clicked Start Free, your device type (mobile, tablet or desktop), your browser's time zone, and your country (from our hosting provider, Cloudflare). A random ID kept in your browser's local storage lets us tell new visitors from returning ones. For visitors whose browser is set to a European time zone, nothing is saved in the browser: each page view gets a new random ID, so we can't tell new and returning visitors apart. We do not store your IP address. If you click Start Free and create an account, that random ID is saved with your account so we can see which pages and sources bring in new users. This data is never sold or used for advertising. Visit records are deleted after 13 months.

Browsers' "Do Not Track" signals are not a recognized standard, so our website and app don't respond to them. The choices above (blocking analytics cookies or using the opt-out add-on) still work.

On the Autotabit sign-up page, we record which steps of signing up were reached, for example that an email was typed, that the security check passed, that the button was pressed, or the type of error shown. We never record what you type, such as your email address or password. These steps are saved with the same random ID, along with your device type, browser time zone, country and how long the page was open, so we can find and fix places where people get stuck. They are deleted after 13 months like other visit records.

The eBay Transaction Report Analyzer on autotabit.com reads the report file you choose inside your own browser. The file and everything in it, including buyer names and addresses, is never uploaded to Autotabit or sent anywhere else, and nothing from it is saved. We only count that the analyzer was used.

13. Children's Privacy

Autotabit is not intended for users under 18 years of age. We do not knowingly collect information from children.

14. International Users

Autotabit is operated from the United States. If you are accessing the Service from outside the US, please be aware that your information may be transferred to, stored, and processed in the US where our servers and service providers are located.

14.1 Users in the EU, EEA and UK

If you use Autotabit from the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR, and the UK GDPR) gives you the rights below. This section adds to the rest of this policy.

Who is responsible: Autotabit, run by the person and at the address shown in our Impressum, is responsible for your data (the “controller”). Contact: support@autotabit.com.

Why we may use your data (legal bases):

What we do Legal basis
Your account, eBay sync, data you enter, reports, actions you ask us to take on eBay, AI features you use, support, and your subscription Providing the service you signed up for (Art. 6(1)(b) GDPR)
Security, error logs, preventing abuse, feature-usage statistics, our own cookie-free website visit counting, anonymized statistics, and answering messages you send us Our legitimate interest in running a safe, working service and improving it (Art. 6(1)(f) GDPR)
Keeping records the law requires Legal obligation (Art. 6(1)(c) GDPR)

Data sent to the United States: Autotabit and its service providers are based in the United States, so your data is processed there. Supabase, Anthropic and Cloudflare cover these transfers with the European Commission’s Standard Contractual Clauses, which are part of their data processing terms. Stripe is certified under the EU–U.S. Data Privacy Framework. eBay sends us your eBay data under its own terms with you.

Your rights: you can ask to see your data, correct it, delete it, limit how we use it, and get a copy in a standard format. You can object to any use based on our legitimate interest, and withdraw any consent you gave, without affecting what we did before. Most of this you can do yourself in Settings; for anything else, email support@autotabit.com and we will answer within one month. You can also complain to the data protection authority in the country where you live or work.

What you need to give us: an email address and password to have an account, and an eBay connection to sync eBay data. Everything else is up to you.

No automated decisions: Autotabit does not make decisions about you based only on automated processing that have legal or similarly significant effects. AI features only make suggestions that you choose whether to use.

15. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information we collect
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. The "Last updated" date at the top indicates when changes were last made.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@autotabit.com