Privacy Policy
Last updated: July 7, 2026
1. Who We Are
Silo Studios L.L.C., doing business as Comp Buddy ("we," "our," or "us"), operates a Chrome browser extension and iOS app that provide pricing intelligence for the secondary market. It works across eBay, Facebook Marketplace, and Whatnot — helping users see real value, make smarter offers, and find flips using sold data plus a community sales database and aggregated market trends. Our website is compbuddylive.com.
2. Information We Collect
Account Information: If you create an account, we collect your email address and an encrypted password via our authentication provider (Supabase). Some eBay features work without an account.
Listing Data: When you visit a supported listing page, the extension reads publicly visible information from the page (such as item titles, prices, and listing details) to provide pricing intelligence. On Facebook Marketplace, listing titles are read automatically to compare against eBay sold data.
Video Frame Data: When you click the "Scan Item" button on Whatnot (paid feature), the extension captures a single frame from the currently playing video and sends it to our server for AI-based item identification. This image is processed in real-time and is not stored after the response is returned.
AI Image Scans: On Facebook Marketplace, paid users may trigger an AI image scan that sends the listing image to our server for more accurate item identification. These images are processed in real-time and are not stored.
Snip Tool: The Snip Tool (activated via the popup button or Alt+S keyboard shortcut) lets you visually select any area on your screen. The selected region is captured as an image and sent to our server for AI-based item identification, then used to search for comparable listings. The captured image is processed in real-time and is not stored. The Snip Tool only activates when you explicitly trigger it — it never captures your screen in the background.
Record Sale Data: When you use the Record Sale feature, you choose to submit details of a completed sale you observed — the item name, sale price, condition and grading information, platform, sale date, viewer count, and the seller's public username — along with an optional screenshot as proof. Unlike scans, this data is stored: the sale details are contributed to a community sales database and may be visible to other Comp Buddy users (for example, in the Whatnot Sales History feature). Screenshots are stored privately and are only displayed inside the Service via short-lived signed URLs — they are never publicly listed or indexable.
Community Sales Database: Comp Buddy maintains a shared database of completed marketplace sales that powers features like Whatnot Sales History, the community feed, and aggregated Market Trends (anonymized, market-wide statistics such as price distributions and sales volume). It is built from two sources: (1) sales you choose to submit via Record Sale, and (2) publicly displayed sale results — item title, final sale price, bid count, the seller's public username/ID, show and listing identifiers, and the time of sale — that Comp Buddy records from public Whatnot live streams through its own operator accounts as those results are broadcast to everyone watching. Your app or extension does not capture sales from the streams you watch. Each comp is labeled with how it was obtained so its trust level is represented honestly. We never read, store, or transmit any information about who bought an item — buyer identity, payment, and shipping details are excluded at the source.
Search Queries: If you use the Check Comps or manual search features, we receive the text query you enter. Queries are used solely to fetch relevant eBay listings and are not stored long-term.
Usage Data: We track basic scan and search counts to manage subscription tier limits — locally in your browser for the extension, or against your account for the iOS app. We do not use this data for tracking or advertising.
3. Information We Do NOT Collect
- Your app or extension does not capture your screen, camera, or video frames from your device automatically or in the background — scans run only when you trigger them
- We do not record or monitor your browsing history
- We do not collect personal information beyond your email address
- We do not use cookies for tracking or advertising
- We do not sell, rent, or share your data with third parties for marketing
- We do not collect buyer identities on live sales — community comps are market facts (what sold, for how much), never who bought
4. How We Use Your Information
- Pricing Intelligence: Listing titles and prices from eBay, Facebook Marketplace, and Whatnot are used to fetch comparable sold data and calculate offer suggestions
- Item Identification: Video frames (Whatnot) and listing images (Facebook Marketplace AI scan) are sent to our AI service to identify items — processed in real-time and immediately discarded
- Comp Lookup: Identified items or manual queries are used to search eBay sold listings for price comparison
- Community Sales Database: Sale details you submit via Record Sale, or that Comp Buddy records from public live-stream broadcasts (item name, price, bid count, condition/grading, platform, sale date, and the seller's public username), are aggregated and shared with other Comp Buddy users through features like Whatnot Sales History, the community feed, and Market Trends — always labeled with how they were obtained, never with buyer information
- Account Management: Your email is used for authentication and account-related communications
- Service Improvement: Aggregated, anonymized usage statistics may be used to improve the service
5. Data Storage & Security
Scan video frames are processed in memory and discarded immediately after generating a response. They are never written to disk or stored in a database. The exception is Record Sale screenshots, which you explicitly choose to attach as sale proof: these are stored in a private storage bucket and served only via short-lived signed URLs.
Account credentials are managed by Supabase with industry-standard encryption. We do not have access to your plain-text password.
All data transmission between the extension and our servers uses HTTPS encryption.
6. Third-Party Services
We use the following third-party services:
- Supabase — Authentication and user account management (Privacy Policy)
- Cloudflare Workers — API hosting and processing (Privacy Policy)
- eBay / eBay Partner Network — Active listing data for price comparisons. Some outbound links to eBay are affiliate links through the eBay Partner Network. If you click an affiliate link and make a purchase, we may earn a small commission at no extra cost to you. This helps support the free features of Comp Buddy.
- OpenAI — AI-based item identification from video frames and images. Images sent to OpenAI are processed via their API and are not used to train their models per OpenAI's API data usage policy (Privacy Policy)
- Stripe — Payment processing for subscriptions. We never see or store your credit card number — all payment data is handled directly by Stripe (Privacy Policy)
- Resend — Transactional email delivery for account-related communications (Privacy Policy)
7. Data Retention
Video frame data and AI image scans: Not retained (processed and discarded in real-time).
Listing data (titles, prices): Used only for the current session and not stored on our servers.
Record Sale submissions (sale details and optional screenshot): Retained in the community sales database while your account is active; you may request deletion of your submissions at any time.
Community sales data recorded by Comp Buddy from public live-stream broadcasts: Retained as anonymous market reference data to provide historical comps and market trends. It contains no buyer information.
Account data: Retained as long as your account is active. You may request deletion at any time.
Local storage data (scan counts, tier info): Stored on your device only.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request deletion of your account and all associated data (email contact@compbuddylive.com — we will process deletion requests within 30 days)
- Uninstall the extension at any time, which removes all local data
- Opt out of marketing emails at any time via the unsubscribe link in any email
For California residents: Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.
Additional CCPA Disclosures:
- Categories of personal information collected: Identifiers (email address); internet or other electronic network activity information (search queries processed in real-time)
- Categories of personal information sold: None. We do not sell personal information.
- Right to request deletion: You may request that we delete any personal information we have collected about you
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights
- To submit a CCPA request: Email contact@compbuddylive.com
For EU/EEA Residents (GDPR): If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your personal data is legitimate interest (providing and improving the Service) and consent (when you create an account). To exercise any GDPR rights, contact us at contact@compbuddylive.com.
8a. Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach. We will also post a notice on our website describing the nature of the breach, the data involved, and the steps we are taking to address it.
8b. AI Data Processing
When AI-powered features run (Whatnot Scan, Facebook Marketplace AI Scan, the Snip Tool, or Comp Buddy's identification of items in the sales it records from public live streams), images are processed as follows:
- Images are sent to OpenAI's API for item identification
- All images are transmitted via encrypted HTTPS connection
- Images are processed in real-time and immediately discarded — they are not stored on our servers or OpenAI's servers
- OpenAI's API data usage policy states that API inputs are not used for model training
- No biometric data is collected or processed from images
9. Children's Privacy
Comp Buddy is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the extension after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or your data, contact us at: