🔨 Auction Hero AI Privacy Policy

Privacy Policy

Effective August 21, 2026

The short version

We store the auction data you choose to track, your account email, and your campaign settings — that's what makes the product work.
We never see your Skool password or your payment card details, and your AI key is encrypted with a secret that stays on your device.
We don't sell your data, run ads, or track your browsing.

Who we are

Auction Hero AI is a Chrome browser extension for tracking live auctions run as posts in Skool communities, operated by Jay Beckham ("we", "us"). You can reach us at support@auctionheroai.com.

Auction Hero AI is an independent product. It is not affiliated with, endorsed by, or sponsored by Skool. "Skool" is a trademark of its owner.

What we collect and store

Account information. Your email address and a password managed by our authentication provider (Supabase). We never see your password in plain form.
Auction data you choose to track. When you start tracking a Skool post, we fetch and store that post's comments through Skool's API: comment text, commenter names, public profile handles and avatars, timestamps, and the bids our AI classifies from them. We only ever fetch posts you explicitly track.
Direct-message campaign data. The message templates you write, per-recipient send logs (what was sent, when, to whom), reply-detection metadata, and your suppression list.
Settings. Preferences and your AI API key. The key is encrypted in your browser before storage, using key material that never leaves your device — we cannot decrypt it on our servers.
Purchase records. Which credit packs you bought, when, and their credit balances. Card details go directly to Stripe (see below) and never touch our systems.
Referral attribution. If you arrived through a partner's link, we record that attribution to pay the partner.

Your Skool session

The extension works through the Skool login that already exists in your browser. Requests to Skool go directly from your browser to Skool, carrying your existing session the same way visiting skool.com does. We never ask for, collect, store, or transmit your Skool password or your Skool cookies to our servers.

AI processing

Bid extraction is powered by an AI model. Comment text from posts you track is sent to OpenAI or OpenRouter under your own API key — you choose the provider by the key you supply, and their terms and privacy policies apply to that processing. We do not send them anything from posts you haven't chosen to track.

How we use data

Only to provide the product: tracking auctions, computing leaderboards, generating exports, running the DM campaigns you configure, processing purchases, and support. We do not sell personal data, we do not show ads, and we do not use your data for any purpose unrelated to the features you use. Our use and transfer of information received from Google APIs adheres to the Chrome Web Store Limited Use requirements.

Sharing

Collaborators you invite. If you share an auction via an invite code or assign helpers to a DM campaign, those people can see that auction's data and the campaign rosters assigned to them. Inviting someone is your choice.
Service providers. Supabase (database, authentication, hosting), Stripe (payment processing), and — under your own key — OpenAI or OpenRouter. Each processes data only to provide their service to us or to you.
Legal requirements. We may disclose information if required by law.

That's the whole list. No data brokers, no advertisers.

Security

Data moves over encrypted connections (HTTPS). Database access is scoped with row-level security so accounts can only reach their own data and the data explicitly shared with them. Your AI API key is encrypted with AES-256-GCM using a per-device secret.

Retention and deletion

We keep your data while your account is active. Email support@auctionheroai.com to delete your account and its data; we'll complete deletion within 30 days, except records we're legally required to keep (such as purchase records for tax purposes).

Children

Auction Hero AI is a commerce tool and is not directed to children under 13. We do not knowingly collect data from children.

Changes

If this policy changes materially, we'll update the effective date above and note the change in the extension or by email. Continued use after a change means you accept the updated policy.