Privacy Policy
This Privacy Policy describes how Dolezal Innovative Solutions, LLC ("we," "us," or "Trusted Iron") collects, uses, stores, and shares information when you use the Trusted Iron — Marketplace Lister Chrome extension (the "Extension") and the related Trusted Iron service at trustediron.com (the "Service").
1. Who We Are
Trusted Iron is a software platform built for heavy equipment dealers. The Extension is a productivity tool that helps dealers fill out the Facebook Marketplace listing form using equipment data from their own Trusted Iron dealer account, so they don't have to retype the same information into every listing.
2. What Data We Collect
The Extension collects and processes the following categories of user data:
Authentication information. When you sign in to the Extension, you provide your Trusted Iron account email address and password. The password is transmitted once over HTTPS to authenticate you and is not stored by the Extension. After successful sign-in, the Extension stores a session access token locally in Chrome's chrome.storage.local so you do not have to sign in repeatedly.
Dealer inventory data. When you use the Extension, it retrieves equipment listings (year, make, model, price, description, photos, and similar machine attributes) from your Trusted Iron account so it can prefill the Facebook Marketplace listing form.
Facebook Marketplace listing URLs. After you publish a listing on Facebook Marketplace, you may paste the resulting Facebook listing URL into the Extension. This URL is sent to Trusted Iron and stored against the corresponding machine record so you can track which inventory items are currently posted on Marketplace.
The Extension does not collect browsing history, web activity on sites other than facebook.com/marketplace and trustediron.com, keystrokes, location, contacts, financial information, health information, or any data unrelated to the workflow described above.
3. How We Use Your Data
We use the data described above solely to:
- Authenticate you to your Trusted Iron account.
- Display your equipment inventory inside the Extension popup.
- Prefill the Facebook Marketplace vehicle listing form with data from a machine you select.
- Record which Trusted Iron machines have been posted to Facebook Marketplace, so the Extension can show you which listings are active and which need to be removed.
We do not use your data for advertising, profiling, credit decisions, or any purpose unrelated to the dealer-facing functionality of the Extension and Service.
4. How We Store Your Data
Locally on your device. The Extension uses chrome.storage.local to store your session access token so you stay signed in. This data is stored on your computer and is not synced to any Google account.
On Trusted Iron servers. Your account information, inventory data, and Marketplace posting records are sent to trustediron.com, which is the only server the Extension communicates with directly. From there, your data is stored in our database, hosted by Supabase (a Postgres database provider) on infrastructure operated by Amazon Web Services in the United States. The Extension itself does not connect to Supabase or AWS directly.
All data in transit is encrypted using HTTPS/TLS. All data at rest is encrypted by our database provider.
5. How We Share Your Data
We share data only as follows:
- With Facebook (Meta Platforms, Inc.) — When you choose to use the prefill feature, the Extension enters your selected machine's data (year, make, model, price, description, photos) into the Facebook Marketplace create-listing form in the browser tab you opened. Photos retrieved from your Trusted Iron account pass through your browser as part of this prefill process. You remain in control of the form at all times and choose whether to publish the listing.
- With our infrastructure providers — Supabase and Amazon Web Services process data on our behalf solely to host the Trusted Iron Service. They are bound by contractual data-protection obligations.
- When required by law — We may disclose data if required by a valid legal process or to protect the safety, rights, or property of Trusted Iron, our users, or the public.
We do not sell your data, share it with advertisers or data brokers, or use it for any purpose unrelated to providing the Extension and Service.
6. Data Retention
We retain your account data and inventory records for as long as your Trusted Iron account is active. If you close your account or request deletion, we will delete your personal data within 30 days, except where we are required to retain it to comply with legal obligations or resolve disputes.
7. Your Rights and Choices
You can:
- Access, correct, or delete your account data by signing in to trustediron.com, or by emailing the address below.
- Sign out of the Extension at any time, which removes the locally stored session token.
- Uninstall the Extension at any time, which removes all locally stored data.
- Revoke the Extension's access to your Trusted Iron account at any time by signing out, uninstalling, or by contacting us to revoke the associated access token.
- Request a copy of the personal data we hold about you, or request its deletion, by emailing the address below.
If you are located in the European Union, United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and CCPA/CPRA respectively, including the right to data portability and the right to lodge a complaint with a supervisory authority.
8. Children's Privacy
The Extension and Service are intended for business use by heavy equipment dealers and are not directed to children under the age of 16. We do not knowingly collect personal information from children.
9. Limited Use Disclosure
Our use of information received through the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use user data only to provide and improve the dealer-facing features described in this policy, and we do not transfer, sell, or use the data for advertising, profiling, or any unrelated purpose.
10. Security
We use industry-standard safeguards to protect your data, including HTTPS/TLS for all network communication, encrypted storage at rest, and access controls on our backend systems. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through the Trusted Iron Service or by email.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact:
Dolezal Innovative Solutions, LLC
Privacy contact: privacy@trustediron.com
General contact: nick@trustediron.com
Website: https://www.trustediron.com