This Privacy Policy explains what information Spiff, operated by Spiff LLC ("we," "us," or "our"), collects and how we use it. It applies to the Spiff browser extension and the website at spiffauto.com.
Information we collect
Account information: your email address and a securely hashed version of your password. We never store your password in plain text. We also store whether your email has been verified.
Device information: a randomly generated device identifier for each browser where you install Spiff, plus an optional device label and last-seen time. This is used to enforce the device limit on your account.
Usage information: a count of the Marketplace listings you create with Spiff, and the time and dealership domain of each, used to administer the free trial and detect abuse.
Payment information: processed by Stripe. We receive a customer reference and payment status from Stripe but do not receive or store your card number.
Support reports: if you use the in-extension "report this site" feature, we receive the website URL you were on, any notes you add, your email, and basic technical diagnostics about the page so we can add support for that site.
Information we do NOT collect
We do not collect your Facebook password or log in to Facebook for you.
We do not sell your personal information.
Vehicle data Spiff reads from dealer pages is processed to help you create a listing; we do not build a profile of you from it.
How we use information
To create and manage your account, verify your email, and verify your license.
To administer the free trial, enforce the device limit, and protect against account sharing and trial abuse.
To process your purchase and send transactional emails (email confirmation, welcome, password reset, and payment receipt).
To respond to support requests and improve dealership-site coverage.
AI processing
When Spiff needs help reading an unfamiliar dealership page, the page's text may be sent to our backend and to our third-party AI provider (Groq) to extract vehicle details and generate a listing description. This text is processed to produce your listing and is not used to identify you.
Service providers
We share limited information with the providers that run the Service, including our hosting provider (Render), database provider (Supabase), payment processor (Stripe), email provider (Resend), and AI provider (Groq). They process information only to provide their service to us.
Data retention
We keep account information while your account exists. You may request deletion of your account and associated data by contacting us at support@spiffauto.com.
Your choices and rights
You can remove devices from your account at any time in your account settings.
You can request access to, correction of, or deletion of your data by emailing us.
Depending on where you live, you may have additional rights under laws such as the Colorado Privacy Act or other state privacy laws. To exercise them, contact us at the address above.
Children
Spiff is a business tool not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
We may update this policy and will post changes here with a new date.