Privacy Policy

Overview

RTAFlow ("we", "us", "our") provides appraisal workflow software for independent vehicle appraisers, including a web application at rtaflow.com and a companion Chrome extension ("Comp Capture"). This policy explains what data we collect, how we use it, and your rights.

Chrome Extension — Comp Capture

What the extension does

The Comp Capture extension helps appraisers document vehicle comparable sales. When you visit an auto listing page (dealer websites, auction platforms, listing aggregators), the extension can read visible listing details — such as VIN, price, mileage, and dealer zip code — directly from the page and send them to your RTAFlow account. It can also capture a PDF of the listing page using Chrome's built-in print-to-PDF capability.

Data read from auto listing pages

The extension reads the following fields from auto listing pages you visit when you choose to add a comparable:

• Vehicle Identification Number (VIN)
• Listed sale or asking price
• Odometer reading (mileage)
• Dealer or seller zip code

This data is sent to the RTAFlow API (rtaflow.com) solely to create a comp record in your appraisal file. It is not used for any other purpose.

Authentication token

When you log in to RTAFlow in your browser, the extension automatically reads your authentication token from the browser's local storage for rtaflow.com. This token is stored locally in the extension's own storage (chrome.storage.local) and used to make authenticated requests to the RTAFlow API on your behalf. The token is never sent to any third party.

Chrome Debugger API

The extension uses Chrome's Debugger API exclusively to invoke Page.printToPDF — the same mechanism as Chrome's built-in print dialog — to capture a listing page as a PDF. The debugger is attached only during the capture operation and immediately detached. No debugging data, page source, or network traffic is recorded or transmitted.

Permissions summary

• storage — stores your auth token and active appraisal selection locally in the browser
• activeTab / scripting — reads visible listing data from the current tab when you initiate a capture
• debugger — captures the current tab as a PDF via Chrome's print-to-PDF function
• host permissions (<all_urls>) — required because auto listings appear on hundreds of different dealer and auction websites; there is no finite list of domains

Web Application

When you use RTAFlow at rtaflow.com, we collect the information you provide directly: account details (name, email, business name), appraisal data you enter, and documents you upload. This data is stored securely and used only to provide the RTAFlow service.

Data We Do Not Collect

• We do not track your browsing history or pages you visit outside of an active capture
• We do not sell your data to any third party
• We do not use your data for advertising
• We do not share your data with anyone except as required to operate the service (e.g. transactional email via Resend)

Data Retention

Your account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

Security

All data transmitted between the extension, the web application, and our servers is encrypted using HTTPS/TLS. Authentication tokens are stored in chrome.storage.local (extension) or browser localStorage (web app) and are never exposed to third-party scripts.

Contact

If you have questions about this policy or want to request data deletion, email us at support@rtaflow.com.