Privacy Policy

1. Introduction

ShelfPulse (“the Extension”) is a Chrome extension that helps HomeDepot suppliers collect and export Return-to-Vendor (RTV) data from the DirectCommerce supplier portal. This policy explains how the Extension handles information.

2. Data We Collect

The Extension reads the following data only when you actively start a collection:

• RTV data shown on DirectCommerce pages you visit (return numbers, dates, SKU details, amounts, and related fields).

The Extension may store locally in chrome.storage.local:

• Preferences (e.g. language hdLang).
• License state (e.g. status, key, last verification time, device binding identifiers returned by the payment provider).
• Free-trial usage (e.g. cumulative months collected) when you use email-based trial features.

We strongly respect your privacy. We do not and will never sell, rent, or share your email address or any personal information with third parties for marketing purposes. We do not sell personal data. (California users: we do not sell personal information as defined under applicable “Do Not Sell” laws.)

3. Data We Do NOT Collect

• We do not collect your DirectCommerce login credentials or session tokens via the Extension.
• We do not use the Extension to upload your RTV business data to external servers.
• We do not use analytics or ad tracking inside the Extension.

4. Permissions

• storage — save preferences and license state locally.
• activeTab — let the popup talk to the current tab where appropriate.
• alarms — schedule periodic license re-checks (about every 7 days).
• host_permissions (*.directcommerce.com) — read portal pages to collect RTV data.
• host_permissions (shelfpulse.net) — contact our backend for trial email codes, quota, license recovery, and related API calls. No RTV payload is sent to this host.
• host_permissions (live.dodopayments.com / test.dodopayments.com) — activate and validate license keys with DodoPayments’ public license API. Only license-related payloads are sent; no RTV data.

5. Third-Party Services

The Extension may interact with:

• DirectCommerce (my.directcommerce.com) — source of RTV pages. You must be logged in; the Extension does not bypass authentication.
• ShelfPulse backend (shelfpulse.net) — trial email flow, quota, and license recovery. Payloads are limited to what those features require (e.g. email, codes, license key for recovery).
• DodoPayments — payment processor and license issuance. Checkout and card data are handled under DodoPayments’ terms and privacy policy. We do not receive or store full card numbers through the Extension.
• Email delivery — transactional email (e.g. codes, license delivery) may be sent through our provider; addresses are used only for those messages and are not sold.

5a. License activation and validation

When you activate or re-validate a license, data sent to DodoPayments typically includes:

• Your license key.
• A value generated by the Extension and used as the activation “name” / device binding. This is a randomly generated anonymous UUID (or equivalent opaque string). It does not collect your hardware information (such as MAC addresses, serial numbers, or IMEI).
• After activation, an instance id may be stored locally for validation calls.

Your email may be stored on our servers when you complete a purchase (as provided by the payment flow) or use “Recover Key by Email,” solely for fulfillment and support. We do not sell email addresses or use them for unrelated marketing.

6. Data security

RTV data you export is under your control once saved to disk. You are responsible for protecting those files.

7. Limitation of Liability and “As Is” Basis

8. Changes

We may update this policy. Material changes will be reflected here and may be noted in Chrome Web Store release notes. Continued use after updates means you accept the revised policy.

9. Contact

Last updated: March 2026