Privacy policy for Closetline and its Inbox Connector

Who operates the connector

This policy applies to the Closetline Inbox Connector and the Closetline service at closetline.sellseva.com. Closetline is a separate product; privacy requests for this connector are handled through the contact details below.

Data the connector processes

The connector processes only the data needed to provide its marketplace session and message-history features:

• Authentication information: a device-specific pairing token, stored in the local Chrome profile and sent to Closetline to authenticate this connector.
• Limited browsing activity: the connector reads open-tab URLs locally only long enough to identify the host name of a supported marketplace. It does not store or transmit full URLs. For an open marketplace tab, it can make a same-site read-only request using the existing Chrome session and sends only whether the session is active, signed out, or could not be verified. It does not read or transmit cookie values, page content, or messages during session checks.
• User-triggered message history: when you click Sync all messages or Sync exact thread, the connector reads visible conversation text, buyer and listing labels, direction, order-status indicators, and the timestamp displayed by the marketplace. It sends Closetline messages from the last 30 days and the full visible history of threads identified as open orders. Closetline stores the marketplace timestamp separately from the later capture time. The connector does not run this history import in the background.
• Manual reply and thread sync: you copy a reply from Closetline, paste and send it yourself on the marketplace, then keep that conversation open and request a sync. The connector imports the visible marketplace history and its displayed timestamps; it does not insert or send replies.
• Technical connection data: the connector version, its session-status and history-sync capability status, and the reason for a status update, such as pairing, a tab change, or a scheduled check.

Optional mailbox early signals

If you choose to connect Gmail or Outlook, Closetline opens that provider's consent screen and requests read-only mailbox access. Gmail access uses the Gmail read-only scope; Outlook access uses the Microsoft Graph Mail.Read scope. These scopes can technically access mailbox messages, but Closetline uses them only to find and process marketplace notification emails for buyer-message, comment, sale, order, and shipping signals. Price-negotiation activity is excluded from the Closetline inbox.

For that optional feature, Closetline processes the connected mailbox address, encrypted access credentials, marketplace-notification sender and message metadata, and the notification content needed to create the signal. We do not send email, modify mailboxes, use unrelated emails for advertising or profiling, or connect a mailbox unless you complete the provider's consent flow.

What the connector does not collect

The browser connector does not store or transmit full URLs, tab titles, general browser history, full marketplace pages, images, cookie values, saved credentials, marketplace passwords, financial information, location, or health information. A requested history sync transmits only the conversation fields described above.

It does not publish listings, edit listings, relist items, or send replies. Every marketplace reply is a manual copy/paste handoff: the seller sends it on the marketplace, then requests a sync of the visible conversation history.

How we use and share this data

We use the pairing token, marketplace-tab status, requested message history only to authenticate the connector, show connection status, build the requested thread context, and keep the Closetline thread log current. We do not use this data for advertising, profiling, creditworthiness, lending, or any purpose unrelated to the connector's marketplace-tab status feature.

We do not sell user data. We share it only with the parties needed to provide the selected feature: Vercel for application hosting and delivery, Supabase for authentication and database services, and—when you choose mailbox signals—Google or Microsoft to authenticate and access the mailbox you approved. We may also disclose data when required by law or to protect against fraud, abuse, or a security incident.

Closetline Inbox Connector's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Closetline's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not allow people to read browsing-activity or mailbox data except with your explicit support consent, when necessary for security or abuse investigation, or when required by law.

Retention and controls

The pairing token remains in the local Chrome profile until the extension is removed or its local data is cleared. If you connect a mailbox, Closetline retains its connection data and marketplace-notification signals while the paired Closetline account remains active. Account-linked connector and mailbox data is deleted or anonymized within 30 days of a verified account-deletion request unless a longer period is required for security, fraud prevention, or law.

You can stop future tab-status updates by removing the extension or clearing its extension data in Chrome. You can stop future mailbox access by revoking Closetline in your Google or Microsoft account and can request access, correction, disconnection, or deletion of connector or mailbox data using the contact address below.

Changes to this policy

If the connector's data practices change, Closetline will provide a prominent in-product notice before collecting data under those changed practices and will update this policy date.

Security

We use HTTPS for data in transit and reasonable technical and organizational safeguards for connector data. No security method can guarantee absolute security.