Privacy

What we receive

The sheet works on the car, never on the customer. From a dealer we receive vehicle data only: VIN, mileage, and, for a Portfolio Scan or a repo backtest, the sale date and an outcome flag for each note. Never borrower data. We do not ask for it, we do not want it, and if it arrives in a file we delete the file.

When you run the free check: the car you typed, the VIN and mileage if you gave them, any service history you pasted, and standard technical data (referrer, timestamps). Records you drop in as files are read once for their line items; the parsed items stay with the report, the files do not. We keep a salted hash of your IP address to count reports for the daily limit, never the address itself. From the second report on we ask for an email address once per browser, and we store that address with a count of the reports it unlocked.

When you ask for sheets or a backtest: the form takes your name, dealership, phone, email, city, DMS, and the VINs you hand over. We call and email you about that request.

For a dealer account: your business contact details and your sheet history. When you buy by link, the payment processor (Stripe) handles your card; we never see the number.

The sheet ledger

Every sheet rendered for a dealer is stamped in a ledger (the sheet_predictions table): the VIN, year, make, model, and mileage; the engine version that produced it; the flag state and the flags it raised; which complaint windows it named and where the car sat in each; the note term; and the repair set-aside it suggested. The ledger exists so that what the engine said can be matched against what happened later, per sheet, and so that we can publish how often it was right. It holds nothing about the person on the note.

How we use it

To build your sheets, scans, and free reports, follow up when you asked us to, fulfill what you bought, and improve the engine, including measuring sheets against real outcomes. If we ever publish figures drawn from submissions, they are aggregated and anonymized: a figure and a sample size, never your name, your dealership, or the document itself.

What we do not do

We do not sell your personal information, and we do not share one dealer’s sheet activity with another. We use no third-party advertising trackers; analytics are first-party. We do not email you unless you gave us your address for that purpose, and every email includes a way out.

Who else touches the data

Our processors: Vercel (hosting), Supabase (database hosting, in the United States), Stripe (payments, as above), and an email delivery service for the messages we send. Anthropic provides the AI research pass on the free consumer check only, for car generations we have no curated profile for; it receives the car and the public complaint data, never your identity, and it never runs on dealer sheets. Vehicle data comes from public government sources: NHTSA complaints, recalls, manufacturer communications, and investigations; BLS wage data for labor rates; EPA fuel economy. For a few collector-car generations the free check also queries a licensed sales-data supplier by make and model only.

Retention

Sheet history and the ledger are kept while your account is active. Free reports are kept while their permalink lives. Cancelled dealer accounts can export their history for 90 days after cancellation; after that a scheduled job deletes it, keeping only what billing and tax law requires. A sheet or backtest request stays in our lead list until you ask us to remove it.

Your rights

You can ask what we hold about you, ask for corrections, or ask for deletion, whichever state or country you are in. Reach us at the contact page and say it is a privacy request; we respond within 30 days and do not treat you differently for asking.