Privacy Policy
Version 2026-11-09 (draft)
Draft: this policy is written in plain language and has not yet been reviewed by a lawyer. It may change before it is final, and we will update the version shown here when it does.
The short version: your reports, VINs, notes and recon numbers are private to your store. We never sell them or share them with other dealers, auctions or brokers.
What we collect
- Account details: business name, your name, business email, ZIP code and, if you give it, phone number.
- Your reports and what comes from them: the text of the history reports you upload or paste (and the PDFs you drop, which are read for their text), VINs, the analysis we produce, and your Garage notes, stock numbers, statuses, actual recon costs, expected retail prices and store settings.
- Usage and technical data: sign-in events, timing and error logs, and your IP address as handled by our hosting provider. We use a sign-in cookie to keep you signed in.
- Website analytics: our public pages use Google Analytics 4 to count visits and clicks.
How we use it
To run the service for you (produce and save your analyses), keep it secure, give support, and understand how the product is used. We do not use your reports for advertising.
Who handles it (our service providers)
- Railway: hosting and our database.
- Anthropic: the AI service that reads your report text to produce the analysis. The report text is sent to it for that purpose.
- Resend: sending our emails, such as your sign-in link. If email-in launches, it also receives the emails you forward to us.
- Stripe: payments, once paid plans are available. Card details go to Stripe, not to us.
- Google Analytics: website analytics on public pages.
- NHTSA (U.S. government): we look up a vehicle’s recalls and decode its VIN using NHTSA’s public services, which means the VIN or year, make and model are sent to NHTSA.
What we do not do
- We do not sell your data.
- We do not share your reports, VINs, recon numbers or notes with other dealers, auctions, brokers or data buyers.
- Any cross-store benchmark would use only anonymized totals, and only if you turn that on in your store settings. It is off by default.
Keeping it and deleting it
Your reports stay in your Garage until you ask us to delete them. To delete your data or close your account, email hello@vehicleiq.com from your account email and we will take care of it. If email-in launches, we do not store the PDFs you forward; we keep the extracted text only until each car is processed (and delete it after a short retention window if it was never processed). Final retention periods will be stated here once they are set.
Security
We use reasonable measures to protect your data, including keeping each store’s reports separate and signed-in access to the Garage. No system is perfectly secure, so we cannot promise absolute security.
Who this is for
VehicleIQ is for businesses. It is not meant for people under 18.
Changes
If we change this policy, the version and date at the top will change, and for material changes we will tell account owners.
Contact
Privacy questions or requests: hello@vehicleiq.com.