Privacy Policy

Last updated: May 13, 2026

VanillaScoop is a Chrome extension that helps insurance agents move lead data from Vanillasoft into Textdrip and Ringy. This page explains what data we collect, what we don't, and how we protect it.

Short version: Your lead data never leaves your computer. We can't see lead names, phone numbers, addresses, or anything else about your leads — only your email and license key, which we need to verify your subscription. That's it.

1. What VanillaScoop does NOT collect

The VanillaScoop Chrome extension reads lead data from Vanillasoft and pushes it to Textdrip and Ringy using API keys you configure locally. None of this data is sent to us. Specifically, we do NOT have access to or store:

Lead names, phone numbers, email addresses, or mailing addresses
Lead DOB, income, household size, or any other PII
Property values or address history we look up on your behalf
Your Vanillasoft credentials
Your Textdrip API key
Your Ringy SID, auth token, or contact settings
Your Census API key
The contents of any leads you submit through the extension
Your dial history, conversion funnel, dashboard stats, or recent leads list

All of that data lives in Chrome's local encrypted storage (chrome.storage.local) on your device. The extension reads it from there to populate the popup and send to your configured services. It never transits our servers.

2. What VanillaScoop DOES collect

The only data we receive is the minimum needed to verify your subscription is active:

Email address — when you start a 7-day free trial, you provide an email so we can send you the license key. We store this in Cloudflare KV (encrypted at rest) alongside your license key.
License key — a randomly generated string we issue you. The extension sends this key to our verify endpoint approximately once per day to confirm your subscription is still active.
Subscription status from Lemonsqueezy — when you purchase via Lemonsqueezy, they send us webhook events (subscription created, renewed, cancelled, expired). We record these so we know when your license is valid.
Anonymous request logs — Cloudflare logs every request to our server (timestamp, IP, URL path, response code) for security and debugging. These are retained for 7 days and never linked to your identity.

3. Third-party services we use

VanillaScoop relies on the following third parties. Each has its own privacy policy:

Cloudflare — hosts our license server (Workers + KV).
Lemonsqueezy — processes payments. They handle your billing details (card, tax info, etc.); we never see or store them.
Resend — sends transactional emails (license key delivery, welcome message).

4. Third-party services YOU configure

The extension talks directly to these services using credentials you provide. We never see them:

Vanillasoft — where the lead data comes from. The extension reads the visible content of pages you're already viewing.
Textdrip API — where leads are pushed. Uses your Textdrip API key.
Ringy API — where leads are pushed. Uses your Ringy SID and auth token.
US Census Bureau API — for property value and neighborhood lookups. Uses your free Census API key.
Zillow public pages — fallback for property value when Census doesn't have data. No key, no auth.

Your relationship with each of these vendors is governed by their own terms and privacy policies.

5. Data security

License keys, email addresses, and subscription status are stored in Cloudflare KV with encryption at rest. Webhooks from Lemonsqueezy are HMAC-verified with a shared secret to prevent forgery. All traffic to our server uses HTTPS with TLS 1.2+.

The extension stores all your local data in Chrome's chrome.storage.local, which Chrome encrypts on disk. We do not transmit any of it.

6. Your rights

You have the right to:

Request a copy of any data we hold about you (which is limited to: your email, your license key, and your subscription status from Lemonsqueezy)
Request deletion of that data — we'll remove it from KV within 7 days. Note that this will cancel your active subscription and require you to re-subscribe to use Pro features again.
Cancel your subscription at any time via your Lemonsqueezy account dashboard.

To exercise any of these rights, email support@vanillascoop.org.

7. Children's privacy

VanillaScoop is a tool for licensed insurance professionals. It is not directed at children under 18, and we do not knowingly collect any information from children.

8. Changes to this policy

If we materially change how we handle your data, we'll update the "Last updated" date at the top and notify subscribers via the email on file. Continued use of the extension after a change constitutes acceptance.

9. Contact

Questions, requests, or concerns? Email support@vanillascoop.org. You'll be emailing the developer directly.

VanillaScoop is created by Covered by Greco LLC. Florida, USA.