Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to information processed through the Service, including vehicle browsing, search features, accounts, seller profiles, dealer and business profiles, vehicle listings, photos, video references, favorites, promotions, contact forms, reports, moderation, security functions, and related marketplace services.

References to “the Service,” “we,” “us,” or “our” refer to the operator of the Service. References to “you” or “your” refer to a visitor, account holder, buyer, seller, dealer, automotive business, or other user of the Service.

This Privacy Policy does not control the independent privacy practices of internet providers, hosting companies, content delivery networks, image storage providers, email providers, video platforms, payment providers, search engines, social networks, browsers, vehicle information providers, or other third parties.

The Service is intended primarily for users located in the United States. Users accessing the Service from another country are responsible for determining whether their use complies with applicable local law.

2. Information We Collect

The information we collect depends on how you use the Service and which features you choose.

Account information

This may include your name, email address, account identifiers, account status, login or verification information, session information, account creation dates, settings, and other information needed to create, secure, and maintain an account.

Google and Facebook sign-in information

You may create or access an account using Google or Facebook authentication. When you choose one of these sign-in methods, the authentication provider may provide us with information associated with your account, such as a provider account identifier, name, email address, profile image, and other basic profile or verification information made available through the sign-in process, depending on the provider and the permissions you approve.

We use this information to create or identify your account, authenticate you, maintain account access, and provide account-related features. We do not receive or store your Google or Facebook password.

Profile and contact information

Information you provide may include display name, company or dealership name, phone number, email information, website, city, state, ZIP code, address, preferred contact method, time zone, social links, business description, and other profile information.

Depending on your settings and how you use the Service, some profile or contact information may be displayed to buyers or used by the Service to help deliver communications related to listings or account activity.

Vehicle listing information

Listing information may include vehicle year, make, model, trim, price, mileage, condition, location, specifications, VIN or other vehicle identifiers when provided, description, seller information, availability, and other information submitted with a vehicle listing.

AI-assisted listing information

When you use an AI-assisted listing feature, we may process the vehicle listing text and other information you submit to help extract vehicle details and generate or organize listing content. The resulting extracted information, titles, descriptions, and other generated content may also be processed as part of providing the feature.

AI-generated or AI-extracted information may contain mistakes, omissions, or inaccurate information. Review all extracted and generated information before using or publishing it in a vehicle listing.

Photos, video, and other uploaded content

We may process vehicle photos, profile images, descriptions, video links or other media references, and other content that you submit to a listing, profile, report, contact form, or other site feature.

Promotions and offers

Sellers and dealers may provide discounts, cashback offers, trade-in bonuses, APR financing information, lease specials, no-money-down offers, deferred payment information, maintenance offers, warranty information, and other promotional details associated with a vehicle.

Marketplace activity

We may process information about listings you create, edit, delete, save as favorites, view, report, or otherwise interact with, along with timestamps and related account activity.

Contact and support information

When you contact us, we may collect your name, email address, message content, support correspondence, and other information you voluntarily include in your request.

Payment and purchase information

The Service may offer optional paid features and services, including full VIN reports, paid listing promotion or highlighting, and other paid services made available through the Service. Payments for these services are processed through Stripe.

Stripe may process payment information required to complete a transaction. We may receive information related to a purchase or payment, such as the service purchased, payment amount, payment status, transaction identifiers, timestamps, and other information needed to provide the purchased service, maintain records, prevent fraud, handle support requests, or resolve payment issues.

Technical information

Technical information may include Internet Protocol address, browser type, device type, operating system, language, request path, referring page, timestamps, server responses, network information, and diagnostic data.

Security and moderation information

We may process login attempts, CAPTCHA activity, failed requests, suspected abuse, blocked activity, listing reports, moderation actions, fraud-prevention signals, security events, and related records.

3. How We Collect Information

Information you provide

We collect information when you create or manage an account, complete a profile, create or edit a vehicle listing, upload photos, add video information, publish promotions, save a favorite, report content, change account settings, or contact us.

Information collected automatically

When you access the Service, our servers and service providers may automatically process technical, request, session, diagnostic, security, and network information needed to deliver pages, maintain account access, protect forms, prevent abuse, investigate errors, and keep the Service available.

Information from service providers

We may receive hosting information, security signals, content delivery information, email delivery results, CAPTCHA results, error information, infrastructure records, and other operational information from providers that help us operate and protect the Service.

Information from Google and Facebook

If you choose to sign in with Google or Facebook, we may receive account and authentication information from the selected provider as part of the sign-in process. The information available to us depends on the provider, your account settings, and the permissions associated with the authentication request.

Google and Facebook process information under their own terms, privacy policies, security practices, and legal obligations. Your use of those services remains subject to the policies and settings of the applicable provider.

Information from other users

Another user may provide information about you while creating a listing, identifying a dealership or business, submitting a report, communicating about a vehicle, or contacting us.

A person who submits personal information about another individual is responsible for having any authority or permission required to provide that information.

4. How We Use Information

We may use information to:

• Create, maintain, verify, secure, and provide account access.
• Provide Google and Facebook sign-in, session, authentication, and account-related functions.
• Create, save, publish, display, edit, manage, and delete vehicle listings.
• Display seller, dealer, or automotive business profile information.
• Display vehicle photos, video references, specifications, prices, descriptions, and promotions.
• Provide search, sorting, filtering, favorites, listing management, and other marketplace features.
• Help buyers and sellers communicate using available contact methods.
• Respond to contact requests, support messages, reports, complaints, and privacy requests.
• Review, restrict, hide, reject, or remove listings or other submitted content.
• Prevent spam, fraud, automated abuse, unauthorized access, malicious activity, and policy violations.
• Protect users, accounts, infrastructure, legal rights, and Service availability.
• Diagnose errors, investigate outages, maintain technical logs, and improve performance.
• Store, cache, resize, optimize, and deliver images and other site content.
• Maintain backups, migrate data, and operate hosting, storage, and content delivery systems.
• Enforce our Terms of Use and other site policies.
• Comply with applicable laws, legal process, and valid government requests.
• Establish, exercise, or defend legal claims.

Legal grounds where required

Where applicable law requires a legal basis, information may be processed because it is necessary to provide a requested service, maintain an account, operate a marketplace feature, protect legitimate operational or security interests, comply with law, establish legal claims, or act with your consent.

5. Public Listings and Public Information

Vehicle listings are intended to be viewed by other users and visitors. Information published in a listing may be publicly available and may appear in search results, vehicle categories, location pages, recent listings, seller profiles, internal recommendations, or other public areas of the Service.

Depending on the information you choose to publish or make visible, a listing or profile may include vehicle details, photos, price, location, seller or business name, contact information, promotions, descriptions, and other information.

Public content may be indexed, cached, copied, archived, shared, or displayed by search engines, social networks, browser services, automated systems, or other third parties.

Removing or changing information on the Service does not guarantee immediate removal from search engine caches, archives, screenshots, third-party copies, or other systems outside our control.

6. How Information May Be Shared

At your direction

Information may be displayed or shared when you publish a vehicle listing, make profile information visible, provide contact information to buyers, add business information, share a listing, or otherwise direct the Service to make information available.

Service providers

Information may be processed by service providers that perform hosting, storage, content delivery, image delivery, security, DNS, email delivery, authentication through Google or Facebook, payment processing through Stripe, CAPTCHA, backups, database services, technical support, monitoring, fraud prevention, or other functions needed to operate the Service.

Service providers may receive information reasonably necessary to perform their assigned function and may process information under their own agreements, systems, privacy practices, and legal obligations. Stripe processes information associated with payments for paid services made available through the Service under Stripe's own terms, privacy practices, security practices, and legal obligations.

Legal and safety purposes

We may preserve, use, or disclose information when reasonably necessary to:

• Comply with applicable law, legal process, court orders, subpoenas, or valid government requests.
• Investigate suspected fraud, scams, abuse, unauthorized access, security incidents, or policy violations.
• Protect the rights, safety, property, accounts, users, providers, or infrastructure of the Service.
• Respond to privacy, ownership, intellectual property, defamation, fraud, or other legal complaints.
• Establish, exercise, or defend legal rights and claims.

Business transfer

Information may be transferred as part of a sale, merger, financing, reorganization, asset transfer, change of operator, service migration, insolvency proceeding, or similar business transaction.

Aggregated or de-identified information

We may use or disclose aggregated or de-identified information that does not reasonably identify a particular individual, subject to applicable law.

7. Cloudflare, bunny.net, and Content Delivery

We use third-party infrastructure and content delivery services to improve security, reliability, and page loading performance.

These providers operate their own infrastructure and process information under their own agreements, security practices, privacy policies, and legal obligations.

8. Sessions, Cookies, and Similar Technologies

The Service uses sessions and related technical mechanisms to maintain account access, protect forms, remember temporary authentication state, provide security functions, and support essential website functionality.

A session identifier may be stored in your browser through a cookie or similar storage mechanism. Disabling required session storage may prevent login, account management, form submission, security verification, listing management, favorites, or other site functions from working correctly.

Cloudflare and other infrastructure providers may also use cookies or similar technologies where needed for security, traffic management, abuse prevention, or related technical functions.

We may add additional cookies or similar technologies in the future for functionality, preferences, analytics, advertising, personalization, or other site features. When applicable law requires notice, consent, or an opt-out mechanism for those technologies, we will provide the required control.

Do Not Track

Some browsers provide a “Do Not Track” setting. Because there is no single universally accepted standard for all Do Not Track signals, the Service may not respond to every such signal.

Browser-based privacy preference signals

Where applicable law requires recognition of a legally valid browser-based privacy or opt-out preference signal, we will process that signal as required for the browser or device from which it is received.

9. Sale of Personal Information and Advertising

We do not currently sell personal information for money.

We do not currently use personal information for cross-context behavioral advertising based on activity across unrelated websites or services.

If these practices change, this Privacy Policy will be updated and any notice, consent, opt-out mechanism, or other control required by applicable law will be provided.

Processing by hosting, security, storage, CDN, email, technical, or other operational service providers is not treated as a sale when the provider processes information only to perform services on our behalf, to the extent provided by applicable law.

10. External Links, Video, and Third-Party Services

The Service may interact with third-party services, including Google and Facebook for account authentication. Vehicle listings, profiles, messages, or other areas of the Service may also contain links to third-party websites or external services. Listings may contain video links or references to external video platforms.

Opening a third-party link, playing externally hosted content, using an outside vehicle report, visiting a dealership website, or interacting with another provider may allow that provider to receive information such as your IP address, browser information, device information, referring page, account information, or other information depending on the service.

Third parties operate under their own terms, privacy policies, security practices, retention rules, and legal obligations. We do not control their independent collection, use, disclosure, storage, security, or retention of information.

Review the privacy practices of a third-party service before providing personal or financial information to that service.

11. Data Retention and Deletion

Information is retained for as long as reasonably necessary for the purposes described in this Privacy Policy, including operating the Service, maintaining accounts and listings, providing marketplace functions, resolving disputes, preventing abuse, meeting legal obligations, and protecting legal rights.

Account and data deletion

You may delete your account through the User Profile page.

Before the account can be deleted, you must first delete every vehicle listing associated with the account. After your account contains no vehicle listings, use the available account deletion function on the User Profile page.

You may also request deletion of personal information associated with your account, including information received through Google or Facebook authentication, through the Contact page.

Information received through Facebook authentication will be deleted without undue delay when you delete your account or request deletion of that information, except where retention is required by applicable law.

If you have difficulty deleting a listing, closing your account, or submitting a data deletion request, contact us through the Contact page.

Account and profile information

Account and profile information may be retained while an account remains active and for a reasonable period after account closure, suspension, or deletion when needed for operational, security, fraud-prevention, or legal purposes.

Vehicle listings and uploaded content

Listing information, photos, promotions, and related content may be retained while a listing is active and for a reasonable period after deletion, expiration, moderation, or removal when needed for backups, abuse prevention, dispute resolution, or legal purposes.

Server and security records

Technical logs, IP information, authentication events, reports, moderation records, fraud-prevention information, and security events may be retained for a reasonable period based on operational, security, and legal needs.

Contact and support records

Contact messages and related correspondence may be retained while a request is handled and afterward when necessary to document the response, prevent abuse, resolve disputes, or comply with law.

Backups, caches, and CDN copies

Deleted information may remain temporarily in backups, disaster recovery systems, logs, caches, CDN systems, provider infrastructure, or other technical copies until those copies are overwritten, expired, or removed through normal retention processes.

Deletion from our active systems does not remove copies created or retained independently by visitors, search engines, social networks, archives, browsers, or other third parties.

12. Information Security

We use administrative, technical, and organizational measures intended to protect information against unauthorized access, alteration, disclosure, destruction, loss, misuse, and abuse.

Security measures may include account sessions, protected forms, CAPTCHA verification, infrastructure security, access controls, software updates, logging, monitoring, backups, moderation, CDN protections, and restrictions on administrative access.

Security incidents

If we become aware of a security incident affecting personal information, we may investigate, contain, document, and remediate the incident and provide notices to affected persons or authorities when required by applicable law.

13. Your Privacy Choices

Profile information

You may update available profile and contact information through the account features provided by the Service.

Vehicle listings

You may use available account tools to edit or delete vehicle listings associated with your account.

Contact visibility

Where the Service provides contact visibility settings, you may choose whether certain contact information is displayed directly to buyers. Information that is hidden from public display may still be used by the Service to provide account, listing, notification, or communication functions.

Privacy requests

You may contact us through the Contact page concerning applicable requests to access, correct, or delete personal information or to ask questions about our privacy practices. Account and data deletion instructions are provided in the Account and data deletion section.

We may request information reasonably necessary to verify your identity, account ownership, or authority before completing a privacy request.

We will not ask for your email password, temporary login code, complete payment card number, or bank account password to verify a privacy request.

Operational communications

Login or verification messages, account notices, listing notices, security alerts, moderation messages, support replies, and legal notices are operational communications. You may be unable to opt out of communications that are necessary to operate an account, respond to a request, or protect the Service.

14. United States State Privacy Rights

Depending on where you live, the information involved, and whether a particular state privacy law applies to the Service, you may have rights concerning your personal information.

Applicable rights may include the right to:

• Confirm whether personal information is being processed.
• Request access to certain personal information.
• Request correction of inaccurate personal information.
• Request deletion of certain personal information.
• Request a portable copy of certain information.
• Learn categories of information collected, used, or disclosed.
• Learn categories of recipients receiving personal information.
• Opt out of certain sales, sharing, targeted advertising, or qualifying profiling where applicable.
• Limit certain uses of sensitive personal information where applicable.
• Appeal certain privacy request decisions where applicable.
• Exercise applicable privacy rights without unlawful discrimination.

These rights are subject to legal definitions, applicability thresholds, identity verification requirements, exceptions, retention obligations, and other limitations under applicable law.

Submitting a request

Privacy requests may be submitted through the Contact page. Provide enough information for us to understand the request and identify the account, listing, profile, or other information involved.

Authorized agents

Where applicable law permits an authorized agent to submit a request, we may require proof of the agent’s authority and may require the user to verify their identity or confirm the request directly.

Request limitations

A request may be denied or limited when identity cannot reasonably be verified, the request is fraudulent or abusive, an exception applies, information must be retained by law, or fulfilling the request would interfere with another person’s rights, security, fraud prevention, legal obligations, or legal claims.

15. Children’s Privacy

The Service is not directed to children under 13 years of age.

We do not knowingly collect personal information online from a child under 13 without legally required parental notice and verifiable parental consent.

If we learn that personal information from a child under 13 was submitted in circumstances requiring parental consent and the required consent was not obtained, we may restrict or delete the information as required by applicable law.

A parent or legal guardian who believes a child has submitted personal information may contact us through the Contact page.

16. Processing and International Access

The Service is operated primarily for users in the United States. Information may be processed, cached, transmitted, or stored in the United States or in other locations where our hosting, security, storage, CDN, email, or other service providers maintain infrastructure.

Data protection laws in another state, country, or region may differ from those that apply where you live.

If you access the Service from outside the United States, information may be transferred to and processed in the United States and other locations involved in providing the Service, subject to applicable law.

17. Events and Services Outside Our Control

Operation of the Service depends on internet networks, hosting providers, content delivery networks, image storage providers, DNS services, email systems, software, browsers, devices, and other infrastructure that we do not fully control.

To the maximum extent permitted by applicable law, we are not responsible for privacy, access, delivery, availability, or security problems caused solely by circumstances outside our reasonable control, including:

• A user’s device, browser, network, email account, password, verification code, or security settings.
• Information voluntarily published or shared by a user.
• Search engines, social networks, archives, browser caches, screenshots, or independent third-party copies.
• Independent hosting, CDN, image storage, email, video, payment, security, or other service providers.
• Internet outages, provider failures, power failures, cyberattacks, malware, or software vulnerabilities.
• False, unlawful, unauthorized, misleading, or inaccurate information submitted by another user.
• Government action, court orders, disasters, war, civil unrest, or other events beyond reasonable control.

Nothing in this section excludes any responsibility or legal obligation that cannot lawfully be excluded.

18. Changes to This Privacy Policy

We may revise, replace, add to, or remove portions of this Privacy Policy as the Service, technology, legal requirements, or our information practices change.

The updated Privacy Policy will be posted on this page with a revised effective date.

Where applicable law requires advance notice, consent, or another process for a material change, we will use the process required by that law.

You should review the current Privacy Policy periodically to understand the information practices that apply when you use the Service.

19. Contact and Privacy Requests

Questions, privacy requests, deletion requests, security reports, children’s privacy concerns, or complaints concerning this Privacy Policy may be submitted through the Contact page.

Provide enough information to identify the account, listing, profile, content, or activity involved and to explain the request.

Do not include passwords, temporary login codes, complete payment card numbers, bank account passwords, Social Security numbers, government identification numbers, or other highly sensitive information in your message.

Privacy-related disputes and use of the Service are also subject to the applicable provisions of our Terms of Use.