Privacy Policy
Afar Labs (Trenton O'Neill LLC) collects only what it needs to forward your packages and run your account. We don't sell your information, show ads or use tracking cookies.
What we collect
- Your account: your name, email address and password. Your password is stored only in scrambled (hashed) form, so no one at Afar Labs can see it.
- Your orders: the Poshmark Order #, the item description and any notes you add, the order's status and dates, and the USPS tracking number.
- Item photos: one photo of each item, taken when it arrives.
- Poshmark shipping labels: the label emails you forward to us and the label files. Labels include your buyer's name and address, which we use only to ship that order. For each email that reaches [email protected] we also keep a short log entry (who sent and forwarded it, the subject line, when it arrived and what happened to it) for 30 days, so we can sort out a label that didn't attach.
- Credits and payments: your credit balance and history, and the amount of each purchase or refund. Card details go straight to our payment processor, Stripe; we never see or store your card number.
- Gmail forwarding: if you set up forwarding to [email protected], Gmail emails us a confirmation link. We keep the link and your Gmail address for 7 days so we can show you a Confirm forwarding button on the Setup page. When you send yourself a forwarding test, we keep the address it went to, the address that forwarded it back, a one-time code and when it came back for 7 days.
- The Afar Labs Chrome extension (if you install it): see the next section.
- Settings: your email notification choices, the Gmail addresses you forward from (listed on the Setup page, with the date each was verified) and, if you make one, your request to delete your account.
The Afar Labs Chrome extension
The extension is optional. It works only on Poshmark sale pages and on amazon.com, and only for the Afar Labs auto-order you start:
- Signing in: you sign in with your Afar Labs email and password. Your password goes only to our login service (Supabase) and isn't stored by the extension; the login session is kept in your browser.
- On Poshmark: on a sale's page it reads the Poshmark Order # (from the page address) and the item title, and sends them to Afar Labs when you start an auto-order.
- On Amazon: while an auto-order is in progress it fills in the delivery address (your Order # as Full name, and our address) and, on Amazon's order-placed and order history pages, checks whether your Order # is shown so it can record the order. It sends Afar Labs only the auto-order it belongs to, and that you're still checking out. It doesn't read or send your Amazon account details, payment details, other orders or browsing history.
- On our side: we record when the extension was last signed in, so the Setup page can show it's working.
The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to run your Afar Labs orders, never for advertising, and we don't sell it or share it except with the services listed below.
How we use it
- To match packages to your orders, ship them and show you their status.
- To email you about your orders and credits: when a package arrives without its label or has a problem, and, if you leave them on in Settings, when an order is received, shipped or delivered and when your credits are running low.
- To sell you credits and keep your balance right.
- To answer you when you contact us.
Who handles it for us
We use these services to run Afar Labs. Each one handles your information only to provide its service to us.
- Supabase: our database, login and file storage (photos and labels), hosted in the United States.
- Stripe: card payments and refunds, and payment receipts.
- Resend: sends our emails: account confirmation, password reset, order emails and low-credit warnings.
- Cloudflare: hosts this website and receives emails sent to our @afarlabs.com addresses.
How long we keep it
- Item photos and Poshmark labels: 14 days after the order is delivered, then deleted.
- Account and order details: kept while your account is open.
- Credit and payment records: kept for 7 years for our tax and accounting records, even after an account is deleted, without your name or email attached.
Your choices
- You can update your name, email and password in Settings at any time.
- You can ask us to delete your account from Settings → Delete account, or by emailing [email protected]. Within 30 days we delete your login, name, email, order notes, item photos and labels, and refund any unused credits to your card. Order and credit records stay for 7 years without your name or email.
- To ask what we hold about you, email [email protected].
Cookies and your browser
The portal stores your login session in your browser so you stay logged in. We don't use advertising or analytics cookies.
Changes
If we change this policy, we'll update the date at the top.
Contact
Privacy questions: [email protected].