SourceHound Browser Extension — Privacy Policy

Last updated: May 17, 2026

This policy describes what the SourceHound browser extension reads from web pages, what it sends to SourceHound servers, and how long that data is kept. It applies only to the extension. The SourceHound website (www.sourcehound.ai) is governed by the separate website privacy policy linked from the site footer.

What the extension does

When you visit a supported marketplace page (Facebook Marketplace, eBay, or ShopGoodwill), the extension reads the listing data already displayed on the page — title, price, image, and the listing's marketplace identifier — and sends it to SourceHound's evaluation service. SourceHound returns an estimated resale value and expected profit, which the extension overlays on each listing card. You then decide whether to act on that listing.

What we collect

• Your account identity. The extension signs you in with the same Auth0 account as the SourceHound website. We receive your email and Auth0 user identifier so we can verify your subscription, enforce per-user rate limits, and personalize your dashboard.
• Listing metadata you view on supported marketplaces. Specifically: the marketplace name, the listing's numeric ID, its title, its current price, its primary image URL, optional shipping price, optional location string (Facebook Marketplace only). No personal data about the marketplace seller is sent. No data is read from pages outside the three supported marketplaces.
• Evaluation activity. When you view a listing in the extension, we record that your account viewed that listing's evaluation, along with the estimated value and expected profit we returned. This appears in the "Recent extension activity" panel on your dashboard at www.sourcehound.ai.

What we do NOT collect

• Any data from web pages outside the three supported marketplaces.
• Browsing history, search queries, or page content beyond listing cards.
• Information about the marketplace seller (name, profile, contact, location beyond what FB Marketplace shows publicly on the card).
• Keystrokes, mouse movements, or any user-input data.
• Analytics or telemetry from third-party services (no Google Analytics, no Sentry, no Segment, etc.).

How we store and protect data

• Authentication tokens are stored in your browser's encrypted extension storage (chrome.storage.local). They are never sent to any server other than Auth0 (for refresh) and SourceHound's API (as a Bearer credential).
• Listing evaluations are stored in our database on AWS (US-East). They are associated with your account so you can review your evaluation history.
• We do not sell, rent, share, or trade your data with third parties for marketing, advertising, or any other purpose.

Third parties

The extension communicates with:

• Auth0 (privacy policy) — for sign-in. Auth0 issues the access token the extension uses to call our API.
• SourceHound API (www.sourcehound.ai) — for listing evaluations and account services.

The extension does not include third-party trackers, advertising SDKs, analytics, or affiliate-link rewriting.

Permissions the extension requests, and why

• storage — stores your Auth0 access token and a small evaluation cache so we don't re-evaluate the same listing within five minutes.
• identity — opens the Auth0 sign-in flow in a browser tab managed by Chrome.
• declarativeNetRequest — adds the Access-Control-Allow-Origin header to Auth0's token-endpoint responses, which is required for the sign-in flow to complete in a Manifest V3 extension. The rule applies only to sourcehound.us.auth0.com and modifies only response headers, not request data.
• host_permissions for www.facebook.com/marketplace/*, www.ebay.com/*, shopgoodwill.com/*, www.sourcehound.ai/*, and *.auth0.com/* — the minimum needed to extract listing data on supported marketplaces, call our evaluation API, and complete sign-in.

Your choices and rights

• Stop the extension entirely by removing it from chrome://extensions/ (Chrome / Edge) or about:addons (Firefox). All locally stored auth tokens and cache are wiped immediately.
• Delete your evaluation history by emailing support@sourcehound.ai; we'll remove the per-user activity edges associated with your account within seven days.
• Delete your full SourceHound account via your account settings on the website, or by the same support email.

Children

SourceHound is intended for adult resellers. The extension is not directed to children under 13 and we do not knowingly collect data from minors.

Changes to this policy

Material changes will be posted at this URL with a new "Last updated" date. Continued use of the extension after a change means you accept the updated policy. Significant changes will also be announced via the in-product notification panel at sourcehound.ai.

Contact

Questions, requests, or complaints: support@sourcehound.ai.