Last updated July 30, 2026

PartFin is a Chrome extension built for a single auto parts shop's internal use — it reads a photographed parts receipt, looks up the matching customer in that shop's Shopmonkey account, and marks the corresponding parts "Ready." This page explains what data the extension touches and where it goes.

What PartFin accesses

• Receipt photos. When you drop or scan a receipt image, it's sent directly to Mistral AI's OCR API (api.mistral.ai) to read the part numbers and customer name off the photo. The image is used only to generate that text — PartFin does not store the photo itself anywhere.
• Shopmonkey data. After logging in, PartFin uses a Shopmonkey API key to search Shopmonkey's REST API for the customer named on the receipt, read their orders and parts, and update part labels (adding "Ready", removing "Ordered"). This happens directly between your browser and Shopmonkey's own servers.
• Shop login. Access is gated behind a Firebase Authentication login specific to this shop. Signing in uses Google's Firebase Identity Toolkit REST API and does not involve a real email address — it's a shop-specific login created for this purpose only.
• API keys. The Shopmonkey and Mistral API keys are stored in a Firebase Realtime Database, readable only after a successful shop login, and are not editable by any client — they can only be set by the developer directly.

What's stored locally

The current parts checklist, customer name, and your login session are kept in the browser's local extension storage (chrome.storage.local) so the list survives closing the popup. This data stays on your device and is never sent anywhere except the services listed above.

What PartFin does not do

• No advertising, analytics, or tracking of any kind.
• No data is sold, shared, or used for any purpose other than looking up and updating the specific receipt/customer/part you're working on.
• The content script that runs on Shopmonkey's site only types a part number into Shopmonkey's own search box for visual confirmation — it does not read, click, or extract anything from the page.