Shop UI Extension — Privacy Policy

Last updated 19 September 2026

Shop UI Extension is an internal tool built by Highline Motorsports for its own staff and the staff of QuickServ Auto Care. It adds shop dashboards to the Shopmonkey web application. It is not a consumer product, it is not sold, and it is distributed unlisted.

What the extension sends, and where

The extension has no analytics, no tracking, and no advertising. It sends data to exactly two places, both operated by the shops themselves, and only when a member of staff uses the feature that does so:

• Shop chat — the chat panel sends the message text a staff member types, together with that person's four-digit staff PIN, to highline-motorsports.com. Messages are stored there so the conversation persists between sessions. The PIN identifies the staff member to the shop's own system; it is not an account password, it is never placed in a URL, and it is kept only in Chrome's local storage on that machine.
• Notes rewriter — when a technician clicks the rewrite button on a repair-order note, the text of that note is sent to qsautocare.com/notes/api-proxy.php, a proxy operated by QuickServ Auto Care, which forwards it to OpenAI's API (model gpt-4-turbo) and returns the rewritten wording. The note text is therefore processed by OpenAI, a third party, under OpenAI's API terms. Nothing is sent unless the technician presses the button, and the original text is preserved so a rewrite can be undone.

No other data leaves the browser. Dashboard tiles only read figures from the shops' own servers; they do not upload anything.

Data we disclose to the Chrome Web Store

• Personal communications — shop chat messages between staff.
• Authentication information — the staff PIN used by the chat.
• Website content — repair-order note text submitted to the rewriter, which may incidentally contain a customer or vehicle name if a technician typed one into the note.

None of this is sold, and none of it is transferred to anyone outside the two shops except OpenAI, which processes note text solely to return the rewrite described above. It is never used for creditworthiness or lending, and never for any purpose unrelated to running the shops.

What it stores

• Its own configuration — which tiles and navigation items to show, and the shop endpoints to read from — in Chrome's storage area.
• The staff PIN, in Chrome's storage.local on that machine only. It is never synced to a Google account.

What it reads

• app.shopmonkey.cloud — the extension reads the page in the browser in order to place its panels in the correct spot in Shopmonkey's interface. That data stays in the browser tab.
• Shop-owned endpoints — dashboards fetch operational figures (technician hours, overhead and gross profit, repair-order housekeeping, call and message counts) from servers Highline Motorsports and QuickServ Auto Care control.

Remote code

None. All code in the extension is contained in the published package. Nothing is downloaded and executed at runtime.

Who can use it

The extension is distributed unlisted and is intended for staff of Highline Motorsports and QuickServ Auto Care. It is not useful without access to those shops' Shopmonkey account.

Contact

Questions about this policy: highline518@gmail.com.