What we do
POXA helps users estimate repair costs by selecting damaged parts from a catalogue and sourcing replacement parts from eBay. The service consists of a Chrome browser extension and a web application.
Data we collect
When you use the extension on a supported auction site (Copart, IAA, Synetiq, or Salvage Market), we collect:
- Vehicle listing data — title, lot number, damage category, colour, mileage, VIN, and other metadata displayed on the auction page.
- Listing images — the photos shown on the auction page. These are sent to our server for vehicle colour detection.
- Page URL — the URL of the auction listing you are viewing.
When you create an account on the web app via Clerk authentication, we also store your email address and authentication tokens to manage your session.
How we use your data
- Vehicle data and images are processed by AI (Anthropic Claude) to verify part listings and detect vehicle colour. Users manually select parts from the catalogue.
- Part searches are performed via eBay (through the Countdown API) to find replacement part listings and prices.
- Estimates are stored in your account so you can review them later on the dashboard.
- We do not sell, rent, or share your data with third parties for marketing purposes.
Data storage & retention
- Estimates and associated data are stored in a secure database hosted on Neon (PostgreSQL).
- The Chrome extension stores recent scrape data locally in your browser using
chrome.storage.local. This data stays on your device and is limited to the 20 most recent listings. - If you provide a bearer token in the extension settings, it is stored locally in
chrome.storage.local on your device only. - You can delete your estimates at any time from the dashboard.
Third-party services
- Anthropic (Claude API) — processes images and verifies part listings. Subject to Anthropic's privacy policy.
- Countdown API — retrieves eBay search results. No personal data is shared with this service.
- Clerk — handles user authentication. Subject to Clerk's privacy policy.
- Vercel — hosts the web application.
- Neon — hosts the database.
Permissions explained
The Chrome extension requests the following permissions:
- activeTab — to detect when you are on a supported auction site and read the listing page.
- storage — to cache scraped data and your submission history locally in the browser.
- tabs — to open the POXA dashboard and estimate pages in new tabs.
- Host permissions — limited to Copart, IAA, Synetiq, Salvage Market, eBay image CDN, and the POXA backend. We do not access any other websites.
Your rights
You can request deletion of your account and all associated data at any time by emailing olly@poxa.co.uk. You can also uninstall the Chrome extension at any time, which removes all locally stored data.
Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the extension or web app after changes constitutes acceptance of the revised policy.
Contact
If you have questions about this privacy policy, email olly@poxa.co.uk.