Privacy Policy

1. Who is responsible for your data

This Policy explains how MarketPilot handles personal data on the website listingpilot.site, in the MarketPilot extension for Google Chrome, and in the service that connects them (the "Service"). It follows Brazil's General Data Protection Law (Lei 13.709/2018, "LGPD"), the Brazilian Internet Civil Framework (Lei 12.965/2014) and the Brazilian Consumer Protection Code.

The data controller, meaning the one who decides how the data is handled, is Filipi Antonio Emilio, CPF 093.012.379-46, at Rua São Cristóvão, 54, Cordeiros, Itajaí/SC, CEP 88310-160.

For any privacy or data protection matter, including exercising your rights, the data protection officer can be reached at contact@listingpilot.site.

2. What data we handle, why, and on what legal basis

a) Your account. Email, name (at first, the part of your email before the @), password, email confirmation and creation date. The login provider stores the password only in scrambled form (a hash): nobody can read it, not even us. Each time you sign in, the provider records the session with your IP address, browser and dates. If you sign in with a Google account, when that option is available, we receive the name, email and profile picture Google provides. Why: to create your account, identify you and protect it from unauthorized access. Legal basis: performance of the contract (LGPD art. 7, V) and our legitimate interest in account security (art. 7, IX).

b) What you enter in the Service. Products (name, titles, descriptions, price, category, condition, the location you enter, photo file names and cover order, but not the photos), text variations, schedules, daily limits, settings, and the nicknames you give your Facebook accounts. Why: to publish and renew your listings the way you set them up. Legal basis: performance of the contract (art. 7, V). Do not put sensitive data or other people's data in these fields: they are meant to describe products.

c) What the extension reads from Facebook, in your browser, through your session. Your Facebook account ID number, read from the "c_user" cookie. That is the only cookie the extension reads; it does not read or keep other cookies, your password or your messages. We also read the links, numbers and titles of the listings the extension published for you, the status of each publication, and the click count Facebook itself shows on your listings. Why: to know which account to publish to, never publish to the wrong account, renew the right listings and show you the results. Legal basis: performance of the contract (art. 7, V). We do not collect messages, friend lists, browsing history, buyers' data or other people's listings.

d) Operation records. Publishing rounds, times, steps, errors, and what each Chrome profile is doing right now. Why: to run the Service, show you its progress and fix problems. Legal basis: performance of the contract (art. 7, V) and legitimate interest in keeping the Service working (art. 7, IX).

e) Connected Chrome profiles. The connection name, when it was made and when it was last used. The key that links the extension to your account is stored in our database only as a hash. Why: so that only your Chromes can reach your account, and so you can disconnect any of them. Legal basis: performance of the contract (art. 7, V).

f) Payment. You pay on Stripe's page. From Stripe we receive only the customer and subscription identifiers, the plan, the payment status, whether it is monthly or yearly, and the renewal date. We never receive or store your card number. Stripe handles payment data (card, name, email, billing address and tax ID, if you enter it) under the Stripe privacy policy. Legal basis: performance of the contract (art. 7, V) and legal obligations such as tax rules (art. 7, II).

g) Access logs. The IP address, date and time when your account uses the website or the extension. Brazilian law (Marco Civil da Internet, art. 15) requires keeping these logs for 6 months. Legal basis: legal obligation (art. 7, II). They are kept confidential and handed to third parties only under a court order.

h) Your acceptance of these texts. Which version of the Terms of Use and of this Policy you accepted, with date, time, IP address and browser. Why: to prove what was agreed. Legal basis: exercise of rights (art. 7, VI).

i) Contact and support. The name, email, subject and message you send through the contact form or by email. The form is delivered to our inbox by the FormSubmit service. Why: to answer and solve your request. Legal basis: legitimate interest in serving you and steps related to the contract (art. 7, V and IX).

j) Technical and security records. For a short time, the hosting keeps technical data about requests (IP, address visited, browser, date and time). Blocked attempts, such as too many requests or calls from unauthorized origins, are also recorded. Why: to keep the site running and protect it from abuse. Legal basis: legitimate interest (art. 7, IX).

We make no automated decisions that affect your interests (LGPD art. 20), and we build no behavioral profiles for advertising.

3. What stays only on your computer

• Product photos: stored in Chrome itself, on your computer. When the extension publishes a listing, they go from your browser straight to Facebook, without passing through our servers. So if you clear Chrome's data or change computers, the photos must be added again.
• Google Gemini key: stored in your Chrome. When you ask for an AI text variation, the extension sends the base text, the versions already used and the product details you entered straight from your browser to Google. That exchange is between you and Google, under your key and Google's terms, and does not pass through us.
• Preferences: the language you chose on the site stays in your browser; the extension's theme and state stay in your Chrome.
• Diagnostics file: the "Export diagnostics" button creates a file on your computer. It only reaches us if you send it to us yourself.

4. Cookies and similar technologies

To work, the site uses the login provider's session data, which keeps you signed in, and saves in your browser your language and theme preferences and your analytics choice. Stripe's payment page uses its own cookies, including for fraud prevention, under Stripe's policy.

Usage analytics (PostHog). To learn where visits come from, which pages and buttons are used and where people give up, the site sends PostHog the pages viewed, clicks, the source of the visit (previous site and campaign parameters such as utm_source), browser and device type, approximate location derived from the IP, and events such as sign-up, extension setup, product saved, schedule saved and subscription. If you sign in, this data is linked to your account identifier and email. Why: to understand and improve the site and the Service. Legal basis: legitimate interest (LGPD art. 7, IX) and, for the cookie and recordings, your consent (art. 7, I).

Your choice. On your first visit we ask whether you accept analytics. If you accept, PostHog keeps a cookie that links your visits and records sessions on the site's public pages, without the text you type; the dashboard and the account page are never recorded. If you decline, or until you choose, nothing is stored in your browser: each visit is counted separately. To change your choice, clear the site's data in your browser and choose again. We use no advertising cookies.

5. Who the data is shared with

We use providers that handle data on our behalf (processors), only to provide the Service:

• Neon: application database in São Paulo, Brazil.
• Clerk: sign-in, sessions and verification emails. See the Clerk privacy policy.
• Vercel: hosting of the website and the API. The API runs in the São Paulo region, Brazil.
• Stripe: payment and subscription processing.
• PostHog: usage analytics for the site and the dashboard, in the United States. See the PostHog privacy policy.
• FormSubmit: delivers contact form messages to our inbox.
• Our email provider: receives the messages you send us.

Besides them:

• Meta (Facebook): the extension publishes on Facebook, through your account, the listings you set up. What is published is subject to Meta's policies. Other than that, we do not send your data to Meta.
• Google: receives data only if you use AI variations, straight from your browser, with your key (see section 3).
• Authorities: when the law or a court order requires it, and only as far as required.
• Business continuity: if the Service is sold or passes to another person or company, the data may be transferred with it, keeping the protections of this Policy. We will tell you beforehand.

We do not sell, rent or share your data for advertising, consumer profiling or credit scoring.

6. International transfers

The database and the API are in Brazil, but some providers are foreign companies, mainly from the United States, and may handle or access data outside the country. This includes Clerk for sign-in, Stripe for payments, PostHog for usage analytics and technical hosting records. These transfers follow LGPD art. 33: they rely on the contractual safeguards those providers offer and, where applicable, are necessary to perform the contract with you.

7. How long we keep data

A daily job deletes each kind of data as soon as its period ends:

• Account and Service data (products, schedules, settings, connected profiles): while the account exists. Deleted when you delete the account.
• Listing click readings: 90 days.
• Round and run records: 30 days. A round still running is only deleted after it ends.
• Disconnected Chrome profiles: deleted 30 days after disconnection.
• Sign-in sessions and unverified sign-ups: managed by Clerk under its privacy policy.
• Access logs (IP, date and time): 6 months, as Brazilian law requires, even after the account is deleted.
• Record of your acceptance of these texts: while the account exists and for up to 5 years after deletion, the period the law gives to bring a claim about a service (Brazilian Consumer Code, art. 27). It is kept to defend rights.
• Payment event identifiers: 90 days.
• Payments and invoices: kept by Stripe for the period tax law requires.
• Contact messages: as long as needed to help you and to defend rights if necessary.
• Hosting technical records: for the hosting's standard period, usually a few days.

8. Your rights and how to use them

Under the LGPD (art. 18) you may ask at any time for: confirmation that we handle your data, access to it, correction of incomplete or wrong data, anonymization, blocking or deletion of unnecessary data or data handled against the law, portability, deletion, information about who we share it with, information about not consenting, and withdrawal of consent where consent is the legal basis. You may also object to any handling you consider irregular.

• Download your data: on your account page, "Download my data" button. The file comes in an open format (JSON).
• Correct: products, schedules and settings are corrected in the extension itself.
• Delete your account: on your account page, "Delete my account" button. The subscription is cancelled right away, with no further charges, and the data is deleted, except what the law requires us to keep (section 7).
• Any other request: write to contact@listingpilot.site. We may ask you to confirm the request comes from the account owner. We answer within 15 days.

If you are not satisfied, you may complain to Brazil's National Data Protection Authority (gov.br/anpd) and to consumer protection bodies. If you live outside Brazil, you may also use the rights your country's law gives you (for example, the GDPR in the European Union), through the same email.

9. Security

The whole Service uses encrypted connections (HTTPS). Passwords and extension connection keys are stored only as hashes. Each customer's data is kept apart from everyone else's, and access to the systems is restricted. No system is completely invulnerable. If a security incident may bring you relevant risk or harm, we will notify you and Brazil's data protection authority, as LGPD art. 48 requires.

You can help too: use a strong password that is only yours, do not share your account, and disconnect, on the account page, the Chrome profiles you no longer use.

10. Minimum age

The Service is meant for people aged 18 or older. We do not knowingly collect data from children or teenagers. If you know of an account created by a minor, write to contact@listingpilot.site and it will be deleted.

11. Chrome extension: permissions and limited use

The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The data is used only for the extension's single purpose, which is publishing, renewing and measuring your Facebook Marketplace listings. It is not sold, not used for advertising or credit scoring or for anything unrelated to that purpose, and no one reads it except with your permission, when required by law, or for security.

What each permission does:

• Access to facebook.com: opens, reads and fills in Marketplace pages to publish, renew and measure your listings.
• Cookies: reads only the "c_user" cookie, which tells which Facebook account is signed in on this Chrome.
• Debugger: only on the tab the extension itself opens for a round, it keeps the page working even when the window is hidden or minimized. Chrome shows a notice on that tab while this is on. The extension does not use this permission to read other tabs or to follow your browsing.
• Power: keeps the display awake during a round.
• Notifications: alerts about rounds.
• Alarms: starts rounds at the times you chose.
• Storage (storage and unlimitedStorage): keeps the photos, the Gemini key and the settings on your computer.
• Access to listingpilot.site: talks to your account.
• Access to generativelanguage.googleapis.com: calls Google Gemini with your key, when you ask.

12. Changes to this Policy

When this Policy changes, the date at the top changes too. We will announce relevant changes by email or on the site before they take effect and, where applicable, ask you to accept the new version to keep using the Service.

13. Contact

Filipi Antonio Emilio, CPF 093.012.379-46, Rua São Cristóvão, 54, Cordeiros, Itajaí/SC, CEP 88310-160. Email: contact@listingpilot.site.