Marketplace Assistant privacy policy

Purpose

DriveMatch Marketplace Assistant is a companion to the DriveMatch Command Center. It helps an authorized dealership user capture vehicle information from their approved dealership website, create a reviewed vehicle-listing draft, download approved vehicle photos, and prefill fields on Facebook Marketplace. The extension never publishes a listing, advances past Facebook’s review step, or sends Facebook messages.

Account information

A valid Command Center account is required. The extension sends the username and password entered on its account screen directly to DriveMatch over HTTPS to authenticate the user. The password is not stored by the extension. After successful sign-in, the extension stores a random, revocable session token, basic account identity, session expiry, and the dealership configuration returned by Command Center. The session normally expires after 30 days and can end sooner if the user signs out, the account is disabled, the password is reset, or the dealership’s subscription access ends.

Vehicle and browsing data

The extension runs only on the dealership website domains approved for the signed-in organization and on Facebook’s vehicle-listing creation page. On an approved individual vehicle page, it captures the page URL, a bounded embedded vehicle record, and vehicle-photo URLs found in the rendered gallery and page source. Command Center validates and extracts listing-related information such as vehicle specifications, description, price, mileage, stock number, VIN, and approved vehicle-photo URLs. It does not send the complete page, collect unrelated browsing history, or monitor other websites.

The vehicle capture is sent to DriveMatch Command Center when the visible assistant initializes on an approved vehicle page. DriveMatch uses DeepSeek as an AI-processing provider only when the user requests draft listing copy. Users must review the result. Short-lived draft details and photo URLs may be cached in the extension and Command Center for up to 30 minutes so the user can complete the workflow.

Facebook and photo handling

When the user chooses to continue, the extension downloads the selected public dealership vehicle photos to a clearly named folder through the browser’s download system. If the user sets a crop, the extension reads each photo from the dealership's photo host and crops it inside the browser before saving it; photos are not sent anywhere else, and the website's photos are not changed. The crop chosen for a dealership website is kept in the browser so the next vehicle starts with it. The user manually chooses which downloaded photos to upload to Facebook. The extension prefills supported vehicle form fields only after the user opens the Facebook Marketplace vehicle form through the extension. Facebook processes information entered on its service under Facebook’s own terms and privacy policy.

Storage, sharing, and retention

Extension data is used only to provide and secure the Marketplace Assistant workflow. DriveMatch does not sell extension data, use it for advertising, or use it to track browsing activity. Data is shared only with service providers necessary to operate the feature, including DriveMatch hosting infrastructure and DeepSeek for requested draft generation, and with Facebook only through the user-visible form-prefill action.

Disconnecting the account removes the local session and cached extension drafts. Expired drafts are removed automatically. Command Center may retain security audit records and server-created handoff records according to the dealership’s retention requirements. Users can request access, correction, or deletion through their dealership administrator or by contacting DriveMatch.

Browser permissions

• Storage: keeps the revocable account session, approved dealership configuration, and short-lived drafts.
• Downloads: saves selected dealership vehicle photos at the user’s request.
• Scripting and optional dealership website access: activates the visible vehicle-capture panel only on the exact domains supplied by Command Center and approved by the user. Optional access to the dealership's photo host lets the extension crop photos the user downloads.
• DriveMatch Command Center access: authenticates the account, checks entitlement and usage limits, retrieves dealership configuration, validates the captured vehicle record, and creates listing copy.
• Facebook Marketplace vehicle-form access: prefills supported fields for user review without publishing.

Security and user controls

Connections to DriveMatch, dealership websites, photo hosts, DeepSeek, and Facebook use HTTPS. Authentication tokens are restricted to trusted extension pages and the background service worker. Every protected action revalidates Command Center access, and signing out removes locally cached drafts.

Chrome Web Store Limited Use

DriveMatch handles extension data in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide and secure the features described here. It is not sold, used for personalized advertising, or used to determine creditworthiness or lending eligibility.

Contact

For privacy questions or requests, contact privacy@drivematchcanada.ca or your dealership’s DriveMatch administrator.