CaseFlow AI privacy policy

1. The short version

The extension adds a side panel to Amazon Seller Central. When you ask it a question, it reads a small, fixed set of fields from the page you are on so its answer is about your actual order or listing rather than a generic one.

2. You must be signed in, and how that works

The extension does nothing useful without a Rufusly account. Every request it makes is checked against your Rufusly session on our servers, and a request without a valid session is refused before anything is read or processed. Installing the extension without an account gives you a panel that asks you to sign in, and nothing else.

The extension never asks for, reads, or stores a password. Not your Amazon password, not your Rufusly password, not a security question or a PIN. It has no way to see any of them.

What it does rely on is the sign-in cookie your browser already holds for rufusly.ai. When the panel makes a request, your browser attaches that cookie, exactly as it does when you use the Rufusly website. That cookie is what proves you are signed in, so it is fair to say the extension transmits an authentication credential, and we declare it as such on the Chrome Web Store. Two things are worth being precise about:

• The extension cannot read the cookie’s contents. Your browser handles it.
• It is only ever sent to rufusly.ai, never to Amazon and never anywhere else. The extension refuses to call any other address.

The extension does not sign you in, cannot create an account, and cannot change your password. If you are signed out, it says so and sends you to the website.

3. What the extension reads

When you send a message from the side panel, the extension reads the fields below from the Seller Central page in front of you and sends them with your question. This is a fixed list held in our code, not a general page capture: any field not on this list is discarded before the request is sent, including one added by a page we did not expect.

Your own typed message is sent as well, because it is the question being answered. Every field above, and your message, is scanned for email addresses, phone numbers and UK postcodes, which are removed before anything reaches an AI model. That scan is a second line of defence: the extension should never pick up those details in the first place.

4. What it never reads

• Buyer names
• Delivery or billing addresses
• Buyer email addresses and phone numbers
• Payment card details, bank details, or any part of them
• Your Amazon or Rufusly password, a security question, or a PIN. See section 2 for how sign-in works without them
• Buyer messages and buyer-seller correspondence
• Any page outside Amazon Seller Central. The extension has no access to your other tabs, your browsing history, or your bookmarks

The extension runs only on Seller Central and on rufusly.ai. It is not installed into, and cannot read, any other site you visit.

5. Where the data goes

The fields above are sent to Rufusly’s servers, which pass your question and that context to Anthropic’s Claude models to produce the answer, the case draft, or the invoice you asked for.

Anthropic does not retain prompts sent through our account for model training. We do not train any model on your data, and we do not use one seller’s data to answer another seller’s question. Rufusly’s assistant draws on reference answers our own team has written, which contain no customer content at all.

6. What is stored, and for how long

In your browser

Support case drafts waiting to be filed are held in your browser’s session storage so the panel can show them while you work. Chrome clears that storage when you close the browser. Nothing is written to your hard drive by the extension.

On our servers

A support case you choose to draft is saved to your Rufusly account, so you can see it on the Support cases page and track whether Amazon has answered. It holds the case text, the SKU and ASIN it concerns, and the Amazon case ID once you tell us what it is. Chat messages in the panel are not stored after the conversation ends.

Case records are kept while your account is open and deleted when you close it. You can ask us to delete them sooner at any time.

7. Permissions, and why each one

8. What we do not do

• No analytics, tracking pixels, or session recording in the extension
• No advertising, and no data sold or shared with data brokers
• No use of your data to train AI models, ours or anyone else’s
• No sharing of your data with other Rufusly customers
• No reading of pages outside Seller Central and rufusly.ai
• No transfer of your data to any third party except the processors named in section 5

9. Your rights

Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to how we use it, or ask us to restrict that use. Email hello@rufusly.ai and we will respond within one month.

Uninstalling the extension stops all data collection immediately. It does not delete case records already saved to your Rufusly account, which you can delete from the app or by asking us.

You can also complain to the Information Commissioner’s Office at ico.org.uk if you think we have handled your data badly.

10. Who we are

If we change what the extension reads or where that data goes, we will update this page and its date before the change reaches the published extension.