Privacy Notice: Refix browser extension

Sign-in data: Your Refix email address and the authentication tokens of your session. They are stored in the browser's extension storage on your device so that you stay signed in, and are transmitted only to Refix and to our authentication provider (Supabase).

Page context on Amazon: When you open a product or review page on one of the Amazon shops the extension runs on (amazon.de, amazon.com, amazon.co.uk, amazon.fr, amazon.it and amazon.es), the extension transmits the product identifier (ASIN), the marketplace, the company selected in the extension and the identifiers of the reviews visible on that page to Refix, so that we can show you their status. It does so on every product page you open, including products of other sellers, because only Refix can tell whether a product belongs to your company. On another seller's product it also transmits that product's title and category. Search terms you enter in the extension's window are also sent to Refix. We keep these requests only in our server logs, which are anonymised after 90 days.

New critical reviews: Whenever you open a page of one of your company's products, the extension transmits every review shown there with one to three stars that Refix does not have yet, with what the review shows. That is the title, text, star rating, date, country, variant, the reviewer's displayed name and profile link, the “Verified Purchase” and Vine labels, helpful votes and the addresses of photos and videos. If it cannot read a review at all, it transmits only its identifier, and our servers retrieve the review from Amazon. We check these reviews like every other review of your products, including by our team, and automatic approvals your company has set up apply to them as well. Sending these reviews is part of what the extension does; it ends when you disconnect the browser or uninstall the extension. All functions of Refix remain available in the dashboard without the extension.

Product data of your products: Whenever you open a page of one of your company's products, the extension transmits the star rating, the number of ratings and their distribution shown there, and the Buy Box with its seller and any notice, the Buy Box only if your delivery address lies in the shop's country and no business prices are shown. Refix adds these values to your company's product data, as it does with values it retrieves from Amazon itself, and records which account sent them. Disconnecting ends this.

Actions you start yourself: Releasing a review for removal transmits the identifiers of the case, the review, the product and your company. Reporting a competitor product transmits the product identifier and, if you write one, your note. Refix then retrieves public data about that product and notifies its team, who may contact you about it. Amazon and the competitor are not notified.

Usage statistics: To improve the extension, Refix records which of its features you use, for example opening its window or overview, opening the approval dialog and its outcome, reporting a competitor product, opening a link and failed requests. Our servers and, once you have connected it, the extension itself send these events to our analytics provider (PostHog, EU). They are linked to your internal account ID and contain only fixed values such as the view, the number of cases or a known error code, never product numbers, page addresses, product titles, review content, company names, search terms or names. In addition, the extension sends a daily count of the product pages opened and of pages with problems, without any link to you. We do not record which Amazon pages you open. To find problems in its window, the extension also records how you use it (clicks, scrolling and the sequence of views). In this recording all content is masked, including texts, numbers, inputs and images; only the fixed labels of the interface and the Refix logo remain visible, and charts are not recorded. It therefore shows no product numbers, review content or names; it covers only the extension's window, never Amazon pages or other websites. Disconnecting the extension ends this. We use these statistics as described in Section 3.9 of our general Privacy Policy. You can object at any time by writing to info@getrefix.com.

Error reports: If the extension runs into an error once you have connected it, it sends an error report to our error monitoring provider (Sentry, EU). A report contains the type of error, its message with quoted text, addresses and values with digits removed, the places in the extension's own code where it occurred, the version of the extension, the Chrome version and the operating system, and it is linked to your internal account ID. It never contains product numbers, page addresses, review content or names, nor anything from Amazon pages or other extensions, and no IP address is stored with it. The extension sends at most ten reports in ten minutes. We use them only to find and fix errors in the extension. Disconnecting the extension ends this.

Stored on your device only: Your session, your display settings, the company you chose for each product, the products you recently opened and short-lived copies of what Refix last showed you, so that pages and the extension's window appear without delay. Depending on the type, they are deleted when you sign out, close the browser, the extension is updated or you uninstall it.

Purpose: making the functions of your Refix account available directly on Amazon, so that you do not have to switch to the dashboard. Legal basis: where you are our contract partner, performance of our contract with you (Art. 6 (1)(b) GDPR); where you use the extension for a company that is our customer, our legitimate interest and that of the company in providing the service it booked (Art. 6 (1)(f) GDPR). The extension is one way of using that service, not a separate offering. Reading Amazon pages for the status display and storing your session and settings in the browser are strictly necessary to provide the extension you asked for (Sec. 25 (2) no. 2 TDDDG).

Reading new reviews, and the star rating and Buy Box of your products, to send them to Refix is strictly necessary for the service you ask for by connecting the extension (Sec. 25 (2) no. 2 TDDDG). Insofar as consent is required (Sec. 25 (1) TDDDG), you give it by connecting and withdraw it by disconnecting; this does not affect data sent before. The reviews sent contain data about their authors. We process them as we do reviews we collect in other ways, on the basis of our and our customers' legitimate interest in identifying and handling illegitimate reviews (Art. 6 (1)(f) GDPR). Section 13 of our general Privacy Policy informs reviewers.

Where we process your data on the basis of legitimate interests (Art. 6 (1)(f) GDPR), you may object at any time on grounds relating to your particular situation, by email to info@getrefix.com. We will then stop processing it unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or need it for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Data from the extension reaches Refix and the service providers we use to run the service: hosting and database (Vercel, Supabase, Google Cloud, Upstash), AI checks of reviews (Google Gemini, Langfuse), retrieval of public Amazon pages (Oxylabs), product data for competitor products (Keepa, which receives only the product identifier), internal notifications to our team (Slack), a case list for law firm cases (Google Workspace), error monitoring (Sentry, EU) and usage statistics about the extension's functions (PostHog, EU). When you release a review, either our partner law firm reviews the case on its own responsibility and files any request with Amazon, or Refix reports the review to Amazon under Amazon's Community Guidelines. Transfers to the United States are described in Section 6 of our general Privacy Policy; you can obtain a copy of the safeguards from info@getrefix.com.

• It runs only on the Amazon shops amazon.de, amazon.com, amazon.co.uk, amazon.fr, amazon.it and amazon.es and reads no other website. On amazon.de it starts by itself; on the other five only after you click the Refix icon on that page or allow it once in Chrome's own dialog, which you can withdraw at any time. This is enforced by the extension manifest and Chrome's permissions, not by a setting.
• It sets no cookies and reads none.
• It contains no advertising and records no Amazon pages or other websites.
• It never sells data and does not use it for advertising or credit checks. Data from the extension serves only to provide and improve Refix for your company: reviews it sends become cases like reviews Refix finds itself, the star rating and Buy Box of your products complete the product data Refix retrieves itself, and our team looks after your account using your company's case figures and may contact you about competitor products you report. Our use of data from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements; people at Refix see it only to handle your cases and requests, for security, where the law requires it, in error reports to fix errors or, to improve the extension, in aggregated form and in the masked recording of its window.
• The extension itself does not automate anything on Amazon. It does not click, post, edit or report anything there; what happens after you release a review is described under “Recipients”.

Page requests are kept only in our server logs and anonymised after 90 days. Everything else the extension transmits enters the same systems as data you enter in the dashboard and is stored and deleted as described in Section 7 of our general Privacy Policy. Besides the local browser storage described above, the extension keeps no storage of its own. Your rights of access, rectification, erasure, restriction and portability, your right to object and your right to lodge a complaint with a supervisory authority are set out in Section 8 of that Policy.

Uninstalling it in your browser deletes everything it stored on your device, including your session. Your Refix account and the data in it are unaffected; to delete those, contact us at info@getrefix.com.