VinePilot Privacy Policy

Effective date: 12 September 2026 Last updated: 31 October 2026

VinePilot is operated by Blockover Corp, a Wyoming corporation ("Blockover", "we", "us"). This policy explains what information VinePilot collects, why, who sees it, how long we keep it, and the choices you have. It covers the VinePilot website and web app at vinepilot.org and the VinePilot browser extension (together, the "Service").

VinePilot is not affiliated with Amazon. Amazon's own privacy notice governs what Amazon does with your data.

1. Summary

• We collect your email address and display name to run your account.
• We collect the Amazon Vine pages you visit or that the extension fetches for you (your review queues, orders, account statistics, tax report, and the items shown to you), plus public product information found while researching products on the web, to help you write reviews and track your Vine activity.
• We store a one-way hash of your Amazon customer id, never the id itself, and never your Amazon password, phone number, or address.
• Photos you upload are stripped of location and camera metadata and deleted after Amazon confirms your review (or after 30 days if you abandon the draft).
• Product-level information is pooled across all users to build shared summaries. Your personal information is never shared with other users and never sold.
• Google is optional. Sign in with Google gives us your email, name, and picture. Connecting Google Photos lets you pick photos through Google's own picker — it gives us no access to your library, only the items you choose (section 10).
• We use AI providers to generate summaries and drafts. They receive product information and the notes you type, not your identity, and never your photos.
• You can export or delete everything at any time.

2. Information we collect

2.1 Account information (you give it to us)

2.2 Amazon identity (derived)

When the extension first runs on an Amazon marketplace, it reads your Amazon customer id from the page you are signed in to and sends it to our server, which immediately computes a SHA-256 hash and stores only the hash, together with the display name Amazon shows for you and your Vine tier (for example "Silver" or "Gold"). We use the hash to:

• link your VinePilot account to your Vine account on each marketplace;
• make sure one Vine account is not linked to two VinePilot accounts; and
• keep per-account limits and fair-use budgets tied to the Vine account rather than to an email address.

We do not collect your Amazon password, payment methods, phone number, or postal address. Where an Amazon page contains your address (for example the orders page), the extension removes that block before anything leaves your browser.

2.3 Amazon Vine pages (collected by the extension)

The extension fetches pages inside your own signed-in Amazon session, at a paced rate set by our server and spread out over time rather than fetched all at once, and sends a trimmed copy of each page to our server, where it is parsed and then discarded. From these pages we keep the structured data, which includes:

We also capture pages you visit yourself on the Amazon Vine site while the extension is installed (the same page types as above). This is part of how the Service works and is not optional. Pages outside /vine/ are never captured.

2.4 Public product information (collected by the extension)

For items in your queue, and as part of the shared catalog (section 5), the extension researches products on the web, fetching public pages about them. For the shared catalog it also fetches, in the background and at the same paced rate, pages of the Vine item lists ("Available for all", "Additional items", and your own "Recommended for you") and the item details shown on them. The work is split across all members, so each extension fetches only a small share, and it pauses while you are browsing Vine yourself. With each of these pages we record your Vine tier, so the catalog can tell which tiers were offered an item. We also keep the list of what is in your own "Recommended for you" right now, so the alerts page can show it to you; an item that leaves it is marked gone and deleted 30 days later. From these we keep product title, brand, images, features, description, rating and rating count, and public commentary published about the product (including the author's public display name, rating, title, text, date, country, badges, helpful votes and image URLs, as shown publicly).

2.5 What you type and upload

• Notes, ticked points, tones, star rating, and edits you make while drafting a review.
• Outside links you paste (for example a manufacturer page or an article). We fetch the page content once, without your cookies, and keep the text to inform the summary.
• Photos and videos you add to a review, from your computer, Google Photos, or your phone. On upload we remove EXIF and similar metadata (including GPS location, device make and model, and capture time) and, if you crop or rotate, produce an edited copy.
• Tax flags you set (consumable, brand-name, fair-market-value override).
• Alerts you ask for and items you hide from them, from the extension's right-click menu or the alerts page: the Amazon product (ASIN and marketplace), with its title and image when we already know them.
• Express Order setting, kept in your browser by the extension, not by us: whether your Confirm click also stands for pressing Amazon's "Place your order" button on a checkout (off unless you turn it on in the extension's popup).

2.6 Technical and usage information

• Extension version, browser type, the Amazon marketplace you belong to, and the time your extension last checked in.
• A per-device token we issue (stored hashed on our side) and the IP address of the last check-in.
• Task and check-in logs: which fetches ran, how long they took, and whether they succeeded (for example "signed out", "network error"). These feed your contribution scorecard (pages fetched, tasks completed) and our reliability metrics.
• AI usage: model, tokens, cost, and latency for each summary or draft generated for you.
• Notices we send to your browser (for example "Review posted"), and when each was delivered.
• Extension error reports: when the extension hits an error, the error message, where in the extension it happened, the extension version and the page address it was working on (an Amazon or vinepilot.org address).
• Log dumps: when you or our support ask for one, the extension's own recent activity log (what it fetched, when, and how each fetch ended, and its settings). No page content.
• "See details" repair reports: whether the extension's repair of Amazon's Vine item-details box worked, for which item (ASIN), and how long it took.
• Rate reports: how quickly Amazon answered the extension's fetches and whether it pushed back, so our server can slow everyone's share down when Amazon does.
• Checkout-page shape reports: the page structure described in section 2.3, from an Express Order's checkout window.
• Standard server logs (IP address, user agent, timestamps) retained briefly for security.
• We do not use third-party advertising or analytics trackers on the Service.

2.7 Cookies

vinepilot.org uses a session cookie to keep you signed in, a preference cookie for theme, and a short-lived cookie (one day at most) that carries your tick on the sign-in page's Terms box to the first page after you sign in, where we record it. No advertising cookies. The extension does not set cookies on Amazon and does not read Amazon's cookies; requests simply run in your existing session.

3. How we use information and our legal bases

We do not use your information to build advertising profiles, and we do not make decisions about you with legal or similarly significant effects by automated means.

4. AI processing

VinePilot uses large language models from third-party providers to produce two things. We change AI models and providers often, based on availability, cost, quality, and other factors. Which models and providers we use is at VinePilot's sole discretion and may change at any time without notice. Whichever we use, the rules in this section apply: they receive only the information described below.

1. Product summaries: ranked positives, negatives, red flags, and a guess whether an item is a consumable or a brand-name product (for tax flagging). Inputs are public product information found while researching the product, and any outside links a user supplied. No account or identity data is sent.
2. Review drafts: written from the summary points you ticked, your notes, your star rating, and your chosen tone. Your notes are sent as you typed them; your name, email, and Amazon identity are not.

Photos and videos are never sent to an AI provider. That includes photos you import from Google Photos. The model is told only how many images are attached, as a number, so it can refer to them in the text it drafts; the image itself never leaves our storage for a model.

Providers process this data to return a result. Because we send no name, email address, Amazon identity, or photo, nothing in a request identifies you unless you type it into your notes, so do not put personal information in your notes. Summaries are cached and shared with other users (section 5); drafts are private to you. You are the author of what you post: drafts are suggestions, and you review and edit them before anything goes to Amazon.

5. Sharing

5.1 The shared catalog (product-level data, pooled)

Public product information, category listings, which items appeared in Vine and when, and AI summaries are stored once per product and shown to every VinePilot user. This is how one user's fetch saves everyone else a fetch. The catalog contains no personal data about VinePilot users: not your name, email, identity hash, orders, quality scores, drafts, notes, or photos. Internally, a catalog row records which account contributed it so we can measure contributions and remove abusive data; that provenance is never displayed to other users.

Other customers' public reviews in the catalog are already public on Amazon, including the reviewer's public display name. If you are an Amazon reviewer and want your public review removed from our catalog, contact us (section 13).

5.2 Service providers (processors)

Each processes data only on our instructions under a data processing agreement.

5.3 Everyone else

We do not sell personal information and have not done so. We do not share personal information with advertisers or data brokers. We may disclose information when required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition (with notice to you). Amazon receives only what you choose to post through the Service, exactly as you would by posting yourself.

6. Retention

7. Security

• All traffic uses HTTPS. The extension only communicates with Amazon (in your own session) and vinepilot.org; server CORS rules accept requests only from the published extension.
• Amazon customer ids are hashed before storage; device tokens are stored hashed; Google tokens are encrypted at rest with a key held separately from the database.
• Photos are stored in private storage and served only through short-lived signed URLs.
• Access to production data is limited to Blockover staff who need it, with two-factor authentication, and administrative actions are logged.
• No method is perfectly secure. If we learn of a breach affecting your personal data we will notify you and the relevant authorities as the law requires.

8. International transfers

Blockover Corp is in the United States and our providers store data there. AI requests (section 4) may be processed by an AI provider outside the United States; they contain no identity data. If you use the Service from the EU, UK, or another region with data transfer rules, your data is transferred to the United States. We rely on Standard Contractual Clauses (and the UK Addendum) with our processors and, where a provider is certified, the EU-U.S. Data Privacy Framework.

9. Browser extension disclosures

This section restates, for the browser extension specifically, the disclosures Chrome Web Store and other stores require.

• Single purpose. The extension is a community-powered Amazon Vine assistant: it helps Vine members write their reviews, track their Vine account, find Vine items (alerts and the shared catalog, built by every member's browser), and order the ones they choose. It works on amazon.com only, and does nothing on sites other than amazon.com and vinepilot.org.
• Permissions. storage (your VinePilot token, settings, an hourly page counter), alarms (the periodic check-in), notifications (VinePilot notices, with buttons only from a fixed set), contextMenus (up to four VinePilot items in the right-click menu on Amazon pages), idle (to hold notices while you are away and close the connection below while your screen is locked), offscreen on Chrome and Edge (to play a notice's sound), the side panel (the alerts page, opened only when you ask), and access to amazon.com plus vinepilot.org, and two Amazon photo-upload hosts. If Amazon starts uploading review photos to one of its image hosts, the extension may ask you to grant that host too.
• What it reads. Amazon Vine pages (/vine/*) and, when working on an item, public product and review pages, all inside your own signed-in session. When you choose a VinePilot item in the right-click menu, the address of the link or page you clicked. On Amazon's checkout pages, only in a window it opened for an Express Order you confirmed: the order total and the buttons and boxes a checkout step names, and the structure of each page (element ids and names, never their contents). It does not read other tabs, your browsing history, passwords, or cookies.
• What it stores locally. The items under storage above, the notices it is showing, any Express Order checkout window in progress, the orders you confirmed in that browser in the last 15 minutes, and your "Confirm button places an express order" setting. No Amazon page content is kept in your browser.
• What it sends. Trimmed copies of the pages above, the results of tasks it ran, the outcome, order total and page structure of an Express Order checkout, and the extension's own error reports, log dumps, "See details" repair reports and rate reports (section 2.6), to vinepilot.org only. When we turn it on for your device it also keeps a connection open to vinepilot.org whose only message from us means "check in now".
• Your agreement. When you install the extension, it shows you what it reads, including the Vine item lists it reads for the shared catalog, and asks you to agree. Until you do, it reads and sends nothing.
• Ordering. The extension orders an Amazon Vine item only after two clicks of yours: the lightning bolt, then a confirm the extension itself receives: the bolt again (a button the extension draws), a button on its own notification, or a keyboard shortcut you set up yourself (none is set by default). It never starts an order on its own, and runs no part of an order it did not see you confirm. An order request may be sent from an amazon.com Vine tab you already have open; the extension never opens a tab for it. When an item goes through Amazon's checkout, the extension opens it in its own window, always in front of yours, and stops at "Place your order" for you to press, unless you turned on "Confirm button places an express order" in its popup; then it presses it once, only if the total is zero.
• Remote code. None. The VinePilot web app appears inside the extension in an iframe as an ordinary web page; the extension's own code is entirely in the package. Our server sends it only data that fills in rules the package already has: which amazon.com pages to read, how much of each to keep, where on Vine and review pages its own link and photo row go, the text of notices and menu items, and the wait-for and Continue steps of checkout pages before "Place your order".
• Data use certification. We do not sell your data, do not use it for purposes unrelated to the extension's single purpose, and do not use it to determine creditworthiness or for lending.
• Pausing. Where the popup offers "Pause syncing", the extension reads nothing in the background for as long as you choose; reviews you send and orders you confirm still go through. The pause is kept in your browser and reported to us so our pages can show it.
• Uninstalling the extension stops all collection immediately. The browser then opens a short vinepilot.org page that signs that browser out of VinePilot and asks, if you want to answer, why you removed it. Your account and data remain until you delete them (section 11).

10. Google user data

Two separate, optional Google features. Each asks for its own consent, and you can use VinePilot without either.

10.1 Sign in with Google

If you choose "Continue with Google" instead of an emailed sign-in link, we request the scopes openid, email, and profile. We receive your email address, your name, and your profile picture, and use them only to create and identify your account — the same information we would hold if you signed up by email. We do not receive your Google password, your contacts, or anything else in your Google account.

10.2 Google Photos

If you connect Google Photos, we request one scope: https://www.googleapis.com/auth/photospicker.mediaitems.readonly.

This scope does not give VinePilot access to your photo library. We cannot list, search, or browse your photos. Picking happens in Google's own picker, hosted by Google, and we receive only the specific items you select there for the review you are working on. If you pick three photos, those three are all we ever see.

• How we access it. Our server exchanges your consent for an access token and a refresh token, then downloads the bytes of the items you picked.
• How we use it. Only to attach those photos to the Amazon review you are writing. Nothing else.
• How we store it. Photos go to our media storage, stripped of location and camera metadata on arrival, exactly like photos you upload from your computer. Tokens are encrypted at rest with AES-256-GCM.
• How long we keep it. Photos are deleted when Amazon confirms the review that used them, or 30 days after you last touch an abandoned draft. Tokens are kept until you disconnect, revoke, or delete your account.
• Who else sees it. Nobody. Photos are not shared with other users, not included in the shared catalog, not sold, and never sent to an AI provider (section 4).

10.3 Limited Use

VinePilot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not and will not:

• use Google user data for advertising, or transfer it to anyone for advertising;
• sell Google user data;
• allow humans to read it, except with your explicit consent for a support request you raised, where it is necessary for security or to comply with law, or on data that has been aggregated and anonymised;
• use it to develop, improve, or train generalised artificial intelligence or machine learning models. Our AI features never receive your photos at all (section 4).

10.4 Disconnecting

You can disconnect Google Photos at any time from Settings → Google Photos → Disconnect. That deletes our copy of your tokens immediately; any photos already attached to a draft stay with that draft until the draft is posted or expires, and you can delete them individually from the photos step.

You can also revoke VinePilot's access from your Google account directly at myaccount.google.com/permissions. Revoking there stops any further access; we discover it the next time we try to use the connection, and treat it as disconnected.

Deleting your VinePilot account deletes the connection and its tokens along with everything else (section 11).

11. Your rights and choices

Everyone, regardless of location, can do the following from Settings or by emailing privacy@vinepilot.org:

We will respond within 30 days (45 days for CCPA requests, extendable once). We may need to verify your identity, typically by confirming access to your account email. We do not discriminate against you for exercising these rights.

12. Children

The Service is for adults who are members of Amazon Vine. It is not directed to anyone under 18, and we do not knowingly collect information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

13. Contact

Blockover Corp, a Wyoming corporation 30 N Gould St Ste R Sheridan, WY 82801 privacy@vinepilot.org

Email us for anything in this policy, including the rights in section 11. We answer within 30 days. Formal notices can also be sent to the postal address above.

14. Additional information for California residents

Under the CCPA/CPRA, the categories of personal information we have collected in the past 12 months are: identifiers (email, display name, hashed Amazon id, device token, IP address); commercial information (Vine orders, items received, estimated taxable value); internet or network activity (Vine pages visited, extension check-ins); audio/visual information (photos and videos you upload); and inferences (none about you personally; product-level summaries only). Sources, purposes, and recipients are described in sections 2, 3, and 5.

We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information other than to provide the Service. You have the rights to know, delete, correct, and to non-discrimination described in section 11. You can appoint an authorized agent by giving them written permission; we may ask them to prove it.

15. Additional information for the EU, UK, and Switzerland

The controller is Blockover Corp (section 13). Legal bases are in section 3. Transfers are in section 8. Retention is in section 6. You may lodge a complaint with your supervisory authority; in the UK that is the Information Commissioner's Office.

16. Changes to this policy

We will post any changes here with a new "Last updated" date. For material changes we will email you or show a notice in the app at least 14 days before they take effect, and where the law requires, ask for your consent.