Privacy Policy

Auction Boss · last updated 17 August 2026

This policy covers the Auction Boss dashboard at auction-boss.com and the Auction Boss browser extension ("Auction Notes Sync").

The short version. We never ask for or store your auction platform password. The extension writes notes only to your own auction account, using the session you are already signed in to. We do not sell or share your data with anyone.

What we collect

Your email address, when you sign in to Auction Boss.
Your Auction Boss sign-in token, stored in your browser so you are not asked to sign in repeatedly.
Your preferences, such as the model-year range you choose for notes.
A record of which notes you have written — the vehicle, the sale date, and when it was written — so the extension does not write the same note twice.

What we do not collect

Your eBlock or OpenLane password. It is never requested, seen, or stored.
Your browsing history. The extension is active only on the auction sites listed in its permissions.
Payment card details. Billing is handled by Stripe; we never see card numbers.

How the extension works with your auction account

To save a note to a listing, the extension reads the authorization header that the auction site already sends on its own requests, and reuses it for that single request. This is what allows it to work without ever asking for your auction password. That header is not stored and is not transmitted anywhere other than back to the auction site it came from.

The extension only ever writes notes. It does not bid, buy, watch, or take any other action on your behalf.

Auction data

Auction Boss records publicly observable results from wholesale auctions — vehicles, prices, and outcomes. This is market data, not personal data, and it is what the notes are built from.

Who we share with

Nobody. We do not sell, rent, or transfer your data to third parties. We do not run advertising or third-party trackers. Data is processed by the services we use to run the product — Supabase for the database and Stripe for billing — and by nobody else.

Where it is stored

Data is held in a Supabase Postgres database. Access requires your own verified sign-in and an active subscription; other dealers cannot see your account activity, your notes, or your bidding history.

Keeping and deleting your data

We keep your account data while your subscription is active. Email [email protected] to request a copy of your data or to have your account and its data deleted. Uninstalling the extension removes everything it stored in your browser.

Contact

[email protected]