Privacy Policy

Last updated: September 30, 2026

Deal Snap REI is a Chrome extension that reads the Zillow listing you are viewing and calculates underwriting metrics (cash flow, cap rate, BRRRR score, flip max-offer, AI deal review) inside a sidebar on the page, plus a web portal where you keep a pipeline of deals, buy boxes, and comparisons. This policy explains exactly what we read, what we store, and what leaves your browser.

Short version. We read public fields from the Zillow listing page you're on and save your underwriting assumptions on your device. If you sign in to a Deal Snap REI account, the deals you save, your buy boxes, and any photos or feedback you send are stored in that account so they sync between the extension and the web portal — only you can see them. When you click “AI Deal Review” we send the listing summary to our server to generate a review. We never collect your browsing history or data from other tabs, and we never sell your data.

1. What the extension reads

The extension's content script runs only on Zillow listing pages matching https://www.zillow.com/homedetails/*. On those pages it reads the public listing fields already rendered on the page:

List price
Address, city, state, ZIP
Bedrooms, bathrooms, square footage, year built, lot size
Property tax estimate, HOA dues, and Zestimate (when shown)
Listing coordinates (used to look up the FEMA flood-hazard layer)

The extension does not read any other tab, your browsing history, cookies, form inputs, or content from any site other than the active Zillow listing.

2. What is stored on your device

The extension uses Chrome's local storage API to save information on your own computer only. This never leaves your device unless you sync Chrome profiles yourself. Stored items:

Your underwriting assumptions — rent, vacancy %, management %, insurance, maintenance, capex, loan terms, rehab budget, strategy toggles
Market defaults you've edited for your area
Your paid-plan state as returned by ExtensionPay
If you sign in, your Deal Snap REI session token (so you stay signed in)

3. Your Deal Snap REI account (optional)

The extension works without an account. If you sign in — with email and password, or with Google — we store the following in your account so it is available in both the extension and the web portal:

Your email address, and your name and profile picture if you sign in with Google (we request only Google's basic email, profile, and openid scopes)
Deals you save: the listing's address, price, property details, listing photo link, and the numbers you entered
Your buy boxes, pipeline stages, and notes
Photos you upload to replace a property's picture
Feedback you choose to send us from the portal

Account data is stored with Supabase (database, sign-in, and file storage) and is protected so that only your account can read it. The web portal is hosted on Vercel. When a deal has no listing photo, the portal asks Google Maps Platform for a Street View image of the property using its address or coordinates; the address autocomplete in the portal also uses Google Maps Platform. No other personal information is sent to Google.

4. What leaves your browser, and when

AI Deal Review (only when you click the button)

When you click AI Deal Review, the extension sends a summary of the listing you're viewing, plus your underwriting assumptions, to our Cloudflare Worker at dealsnap-rei-proxy.jose-acosta.workers.dev. The Worker forwards the summary to an AI provider, receives a written review, and returns it to the extension. The payload contains only the data needed to produce the review — no Google identity, no browsing history, no data from other tabs. Requests are not used to train AI models.

Flood-hazard lookup

When the sidebar renders, it sends only the listing's latitude and longitude to hazards.fema.gov (a public U.S. government service) to determine whether the property sits inside a FEMA flood zone. No personal identifiers are sent.

Billing

When you upgrade on dealsnaprei.com, payment is processed by Stripe. We store your Stripe customer and subscription IDs and your plan's status and renewal date so Pro works in the portal and the extension; we do not receive, see, or store your card details. Plans purchased earlier inside the extension are handled by ExtensionPay and their payment processor; the extension only exchanges the anonymous identity token needed to confirm and restore that plan.

Crash reports

When the extension or the web portal hits an error, it sends a crash report to Sentry: the error message and stack trace, the app version, and the browser. Emails, sign-in tokens, and URL query strings are removed first. Crash reports are used only to find and fix bugs.

5. What we do not collect

Your name or email, unless you create an account; your phone number or postal address
Access to your Google account beyond basic sign-in (no Gmail, Drive, contacts, or calendar)
Passwords, authentication tokens, or form inputs from any site
Browsing history, bookmarks, or content from other tabs
Analytics events, click trails, or behavioral profiles
Facial images, biometrics, or health information

6. Sharing and selling

We do not sell user data. We share data only with the service providers named above, strictly to operate the features you requested: Supabase (accounts and saved deals), Vercel (portal hosting), Cloudflare Workers (the AI proxy), Stripe and ExtensionPay (billing), Google (sign-in, Street View photos, and address autocomplete), and Sentry (crash reports). We do not use data collected by the extension for any purpose unrelated to the single purpose of Deal Snap REI, which is to analyze real estate deals.

7. Retention

Locally stored assumptions remain on your device until you uninstall the extension or clear its storage from chrome://extensions. Account data (saved deals, buy boxes, uploaded photos, feedback) is kept until you delete it or ask us to delete your account; deleting a deal also deletes its uploaded photos. Crash reports are kept for up to 90 days. AI-review request logs at our Cloudflare Worker are retained for up to 30 days for abuse prevention and debugging, then deleted. FEMA requests are stateless and are not logged by us.

8. Your choices

Uninstall the extension to stop all reading and local storage. Uninstalling also removes local data.
Skip AI Deal Review — the feature is opt-in per listing. Never clicking it means no listing data is sent to the AI service.
Delete deals anytime from the portal, or email us to delete your account and everything in it.
Sign out of the extension or portal at any time; the extension keeps working without an account.
Disable the content script on a per-site basis from the Chrome extension menu if you don't want the sidebar to appear.

9. Children

Deal Snap REI is not directed to children under 13 and we do not knowingly collect information from them.

10. Changes

If this policy changes in a material way we will update the “Last updated” date above and, if the change affects what leaves your browser, note it inside the extension before the change takes effect.

11. Contact

Questions about this policy or a data request: email privacy@dealsnaprei.com.