Privacy Policy

1. Who we are

OneButton Software LLC operates LotGeek and is responsible for the personal information we handle to provide the browser extension, website, and related account services. This policy describes what stays on your device, what reaches our services, and the choices available to you.

Our main account contact detail is your email address. We also handle limited account identifiers, billing references, usage metadata, and technical request information described below. Payment card details are entered with Stripe, not on LotGeek’s servers.

2. Browser research and shared estimates

When you start an analysis, the extension automates research in your browser. Requests to marketplaces and price sources go directly from your browser to those services, using your own access and existing sessions where applicable. Those services can receive your IP address, relevant search terms, and their own session information under their policies.

The extension sends product names and identifiers, such as UPCs, to our backend to prepare more precise searches with our analysis service providers. We process and store product identifiers, source names and prepared search queries to provide product analysis. After a successful browser search, the extension also sends a limited sample of sold-listing identifiers, listing titles, unit prices, currency and selected item conditions. Our backend sends product identity and those titles to analysis service providers to assess whether listings describe comparable products; listing prices are not sent to that provider. The backend checks the accepted sample and calculates an average. We retain accepted listing identifiers, titles, prices and currency with the resulting average and comparable-result count. Other users receive the aggregate estimate, not the individual source records. Rejected candidate samples are processed transiently. We do not send your account email, authentication tokens, marketplace sessions or full page contents to those analysis service providers.

Full analysis reports and page contents, manual price edits, Grade C adjustments, shipping assumptions and profit scenarios stay in your browser. Exported spreadsheets are saved to your device.

We do receive the marketplace and lot URL, an analysis identifier, account identifier, status, and timestamps to authorize analysis and enforce usage limits. Temporary records associate preparation and shared-price submissions with an authorized analysis. Marketplace passwords and session cookies are not sent to LotGeek’s servers. If you choose to send us a report, screenshot, or other information for support, we receive what you send.

3. Information we handle

• Account information: your email address, authentication user ID, and account creation date. Our authentication provider handles registration, sign-in, email confirmation, and password recovery. If you choose a third-party sign-in option, the relevant identity provider also processes the information needed to authenticate you. Passwords are not stored in LotGeek’s application database.
• Subscription information: a Stripe Customer ID linking your account to Stripe. We ask Stripe for your plan, subscription status, billing period, and access end date to provide paid features. Our application does not store your full card number, security code, or payment-method details. Stripe maintains payment methods, invoices, and subscription records.
• Analysis access and usage: the limited metadata listed above and aggregated monthly Usage information and the current period. We use this information to provide features under your plan and display your Usage. Temporary processing records expire automatically. We do not keep a separate Usage history of individual processing requests.
• Technical information: IP addresses, request times, browser or request headers, and error or access logs processed by our hosting, delivery, authentication, and security infrastructure.
• Communications: your email address and any message or attachments you choose to send when contacting us.

4. Why we use information

We use information to create and secure accounts, sign you in, authorize features, apply plan limits, manage subscription access, deliver the website and API, investigate errors or misuse, respond to support requests, and meet legal obligations.

Where data protection law requires a legal basis, we rely on performing our agreement with you for account and subscription services; our legitimate interests in security, reliable operation, fraud prevention, and responding to enquiries; compliance with legal obligations; and consent where required. We do not sell personal information or share it for cross-context behavioral advertising. We use the limited product and average-price data described above to improve searches and provide shared market estimates, without sharing your account identity with other users.

5. Service providers and disclosures

We use providers needed to operate the Service:

• Authentication providers: registration, secure sign-in, account verification, and recovery.
• Payment provider — Stripe: hosted checkout, payment processing, invoices, and subscription management. Information entered on Stripe’s pages is processed under the Stripe Privacy Policy. Your bank and payment networks may also process payment information.
• Cloud and infrastructure providers: hosting, data storage, website delivery, security, and application backups. Our backups do not contain locally saved analysis reports.
• Analysis service providers: preparing product search queries and assessing comparable listing titles from limited product data. This feature does not ask the provider to collect market prices or receive full reports.
• Email providers: delivery of account and support messages.

Third-party marketplaces receive your browser’s requests directly and act under their own policies. We may disclose information where legally required, to protect rights and security, or in connection with a merger or transfer of the business subject to appropriate privacy protections. Full locally saved reports are not routinely sent to service providers; the limited product data used for search preparation and shared estimates is described above.

We and our providers may process information in the United States or other countries where they operate. Where required, applicable transfer safeguards, such as contractual protections, apply. Contact us to ask about safeguards relevant to your information.

6. Storage and retention

Local reports: report retention defaults to 30 days and can be set to a whole number from 1 to 99 days in the extension. The extension removes expired saved analyses as its cleanup runs. Removing extension data or uninstalling it can remove local reports and progress. Exported files are independent copies that you control; account deletion does not delete those files.

Temporary access records: analysis authorization sessions normally expire after 24 hours. Temporary analysis states expire with those sessions. Monthly Usage allowances reset at the start of each calendar month in UTC; one aggregate Usage row is kept per user; monthly counters reset in place when the next period is first accessed. Individual processing requests are not stored as separate Usage records. Temporary in-flight reservations expire automatically. These records do not contain item-level prices or report contents.

Shared research data: product identifiers, names and prepared search queries are retained while needed to provide product analysis. Shared price estimates and their accepted source records are retained for seven days under the default configuration; outdated estimates are not used for new analyses. Temporary research authorization records and review fingerprints/results expire with their analysis session. Accepted source records are stored with their price estimate until it expires; rejected listing samples are not retained in our application database. Pending sample uploads remain in private browser storage until delivery or expiry of that authorization.

Account and support records: we retain account information while the account is active and as needed to operate the Service. On a verified deletion request, we delete or de-identify information no longer needed, subject to outstanding billing matters, security needs, and legal retention requirements. Support correspondence and technical logs are kept only as reasonably needed for their purposes. Application database backups rotate on a 30-day schedule; deleted records may remain in restricted backups until rotation.

Stripe and other service providers apply their own retention obligations to records they maintain. Deleting a LotGeek account does not require a payment provider to remove records it must keep by law.

7. Cookies and browser storage

The extension uses local browser storage for reports, settings, analysis progress, and authentication state. Authentication tokens and recovery state are kept in extension-origin storage. These functions are needed to keep you signed in and continue your work.

The current landing page does not include advertising trackers or an analytics script. The blog uses authentication cookies for signed-in editors, and published articles may show the author’s public name. Infrastructure providers may use security-related cookies. Stripe and authentication providers may use their own cookies on their pages. Third-party marketplace cookies remain subject to those marketplaces’ policies.

8. Your choices and rights

You can change report retention, edit or export analyses, sign out, and remove local extension data. Manage or cancel your subscription through the extension’s subscription controls. For account access, correction, deletion, or other privacy requests, email [email protected]. We may verify your identity before fulfilling a request.

Depending on your location, applicable law may give you rights to access, correct, delete, or obtain a portable copy of personal information, restrict or object to processing, withdraw consent, and complain to your local data protection authority. You may exercise applicable rights without unlawful discrimination. Some information may need to be retained to meet legal obligations. Local reports are on your device and must be exported or removed there.

9. Security

We use encrypted connections for account and API communications, authenticated access, restricted service credentials, and access controls. Password authentication is handled by our authentication provider, and card entry is handled by Stripe’s hosted payment pages. No system can guarantee absolute security. Protect your device and accounts, and avoid sending passwords, session cookies, or card details in support messages.

10. Children and policy updates

LotGeek is intended for adults and is not directed to children under 18. We do not knowingly create accounts for children. Contact us if you believe a child has provided personal information.

We will update the date on this page when this policy changes. For material changes, we will provide appropriate notice through the Service or email and obtain consent where required.

11. Contact

For privacy questions or requests, visit Contact or write to [email protected].

Our Terms of Service explain permitted use and your responsibility for complying with marketplace rules.