Privacy Policy
Effective September 10, 2026
DropViper is operated by FX Consultants, LLC, a Virginia limited liability company doing business as Ionai Systems ("Ionai Systems," "we," "us," "our").
This policy covers three things that work together: the website at dropviper.com, the DropViper web application at app.dropviper.com, and the DropViper browser extension for Chrome.
It is organised around how DropViper is actually built rather than around the usual headings, because the honest answer to "what can this see?" depends on which part of the product you are using.
1.The short version
It is business software
DropViper is used by eBay sellers to run listings, pricing, inventory, and orders. It is not a consumer product and is not directed to children.
The extension is narrow by design
It does nothing until you sign in, and Chrome only lets it run on eBay, Amazon, Google Search, Google Lens, and DropViper's own pages. It does not revise, relist, or end your live listings; that work happens on our servers.
We never hold your marketplace passwords
The extension works inside sessions you logged into yourself. We never ask for, receive, or store your eBay or Amazon password.
No selling, no ads, no trackers
We do not sell personal information, we do not run advertising, and the extension contains no third-party analytics or advertising code.
Your workspace holds your buyers' details
Fulfilling an order requires a shipping address. Section 4 explains exactly what we hold and what we do not do with it.
2.Two halves, one account
The hosted application does the work that does not need your browser: watching supplier prices and stock, repricing to your rules, syncing quantities to eBay, and tracking orders through to delivery. It runs on our servers whether or not your computer is on.
Anything that changes a listing once it is live belongs to that half: repricing, syncing quantity, ending an item, relisting it. All of it runs on our servers through the eBay authorisation you gave us, and none of it runs in your browser.
The extension does the narrower set of things that genuinely need your browser: reading the supplier page in front of you, filling in eBay's own listing form to start a new listing, and working through the supplier's checkout when you fulfil an order. It is a companion to a DropViper account, not a standalone tool.
That split is deliberate, and it is also the reason the extension asks for the access it does. Because it acts inside sessions you have already authenticated yourself, we never have to collect or store your marketplace credentials.
3.What the extension can reach, and when
Chrome grants extensions access site by site. DropViper's is limited to the following, and it is inert everywhere else:
eBay
Reads the pages you open, such as Seller Hub, your listings, and search results, including your current selling limits. When you ask it to list something, it fills in eBay's own listing form to start a new listing. It does not revise, relist, or end an existing listing, and deliberately stands down on eBay's edit, revise, relist, and verify screens.
Amazon, for research
Reads product pages for items you are sourcing: title, price, availability, images, item specifics, category, and delivery estimates.
Amazon, for fulfilment
When you use the fulfilment features, the extension saves the buyer's delivery address to your Amazon address book, enters it at checkout, and can place the supplier order on your Amazon account. It reads the resulting order number and tracking back so your eBay order can be updated. Its address-book tool can also bulk-remove saved addresses that you have not marked as protected.
Google Search and Google Lens
Keyword and image lookups that you start, used to match a product to a source listing.
app.dropviper.com
Connects this browser to your workspace and reads your account settings, pricing configuration, and listing defaults.
hCaptcha
Only where a challenge appears inside one of the flows above.
Our backend
The DropViper database and server functions, where your workspace data is read and written.
The extension cannot read any other tab. It has no access to your browsing history, bookmarks, downloads, or the files on your computer.
Why it reads your eBay cookies
The extension reads the ebay.com cookies already present in your browser so that it can make requests to eBay as you, using the session you created when you logged into eBay yourself. Those cookie values are attached to requests sent to eBay and to nowhere else. They are not transmitted to DropViper and they are not stored on our servers.
What stays in your browser
A sign-in token for your DropViper account, your extension settings, and working data for the features you use, such as competitor watch lists, listing history, and research results, and the list of Amazon addresses you have marked as protected. The email address from your last sign-in is remembered so you do not have to retype it.
Your password is never stored, in any form, at any point. Signing out clears the account-scoped data from that browser, which matters on a shared computer.
4.What your account holds on our servers
Your account and workspace
Your name and email address, a securely hashed password, sign-in and activity timestamps, and the organisation and team members your account belongs to.
Your eBay connection
The identifier of each eBay store you connect and the access tokens eBay issues when you authorise DropViper. Those tokens are what let the hosted application publish, reprice, and end listings on your behalf. You can revoke them from your eBay account at any time.
Your catalog and listings
Listing titles, descriptions, images, item specifics, SKUs, quantities and prices; the supplier links and product identifiers behind them; your cost basis and pricing rules; and the record of automated changes we have made.
Your orders, and your buyers' details
When an order comes in, DropViper receives what fulfilling it requires: the buyer's name, street address, city, state, postal code, country, their phone number where eBay supplies one, their eBay username, and the tracking information for the shipment.
That is personal information about someone who is not our customer, and we treat it that way. We hold it on your behalf so your store can be fulfilled and supported. We do not market to your buyers, we do not sell or share their information, and we do not use it for any purpose beyond the order it belongs to. You remain responsible for handling it in line with eBay's policies and the law that applies to you.
Operational records
Event and error logs, which extension version each of your browsers is running and when it last checked in, and any support correspondence you send us.
Billing
Your plan, subscription status, and billing history. Payments are processed by Stripe. Full card numbers never reach our servers and we do not store them.
5.Automated processing and AI
Several features send content to Google's Gemini API for processing. Those calls go through our own server-side proxy, so the API key stays with us and the request is made by our infrastructure rather than from your browser.
What is sent is product and page content: text taken from a listing or product page, and in some cases an image of the page area being worked on. It is used for automated content generation and for page-interaction assistance. Google processes that content as our service provider and returns a result to us.
We do not send your buyers' personal information to Gemini, and we do not use your data to train our own models.
Separately, the hosted application acts on your listings automatically: repricing, pausing, restocking, and ending items according to the rules you configure. This runs on our servers against your eBay authorisation, not in your browser, and it happens whether or not the extension is installed. Every automated change is recorded and visible to you in the application's event history, and you can turn the automation off.
6.Who else handles your data
We rely on a small number of providers, each for a specific job:
Supabase
Database, authentication, and server functions. Your workspace data is stored in the United States (AWS, us-east-1).
Stripe
Subscription payments and billing records.
Google
The Gemini API, as described in section 5.
ScrapingDog
Retrieves public Amazon product data on our behalf. It receives product identifiers, never your personal information or your buyers'.
eBay
Receives the listing, inventory, and order actions you authorise, under eBay's own terms and privacy policy.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will disclose information where the law requires it, where it is needed to investigate fraud or abuse of the service, or in connection with a merger or sale of the business, in which case this policy goes with it.
7.Chrome Web Store limited use
DropViper's use of information received from Google APIs, and of any data obtained through the browser extension, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.
In practice that means we use the data only to provide and improve the features you asked for; we do not sell it; we do not transfer or use it for advertising, ad targeting, or credit assessment; and nobody at Ionai Systems reads it except with your permission, to resolve a support issue you raised, to investigate a security or fraud problem, or where the law requires it.
8.How long we keep things
While your account is open
We keep your workspace data for as long as you use DropViper.
After you close your account
Your workspace data, including listings, orders, and buyer shipping details, is deleted within 90 days.
Billing records
Kept for about seven years, because tax and accounting law requires it.
Logs
Kept on a short rolling window and then discarded.
Product reference data
Supplier catalog information such as product identifiers and price history is not personal information and is not tied to you once your account is gone, so it may be retained.
If you want your data removed sooner than that, email us and we will do it.
9.How we protect it
Traffic is encrypted in transit with TLS, and data is encrypted at rest by our hosting provider. Database access rules keep each seller's workspace separated, so one customer cannot read another's listings, costs, or orders. Marketplace tokens and service credentials are held in a managed secrets vault rather than in application code, and access to production data is limited to the people who need it.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell you and will do so as quickly as the law requires.
10.Your choices
See and correct
Most of what we hold about you is visible and editable inside the application.
Disconnect a store
You can disconnect an eBay store in DropViper, and revoke our access from eBay directly, at any time.
Uninstall the extension
Removing it from Chrome ends all browser-side access immediately.
Get a copy, or have it deleted
Email support@dropviper.com and we will export or delete your data. We verify the request against the account's email address first.
California residents
If you live in California, you have the right to know what personal information we hold, to have it deleted, to have it corrected, and not to be treated differently for exercising those rights. We do not sell or share personal information as the CCPA and CPRA use those terms, so there is no opt-out to offer you. Use the same email address above and we will respond within the time the law allows.
Where your data lives
DropViper is sold to businesses in the United States, and all data is processed and stored there. If you use the service from outside the US, you are sending your data to the US by doing so.
11.Age
DropViper is for people aged 18 and over running a business. It is not directed to children and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.
12.Changes to this policy
We will update the effective date above whenever this policy changes, and we will tell you in the application or by email when a change is significant. Continuing to use DropViper after a change takes effect means you accept it.
13.Contact
Questions about this policy, or a request about your data, go to the same place: