Privacy Policy

AutoAnon ("we," "us," "our") operates autoanon.app, an anonymous car-buying platform that connects buyers with competing dealer offers. We are based in the United States.

Questions about this policy: privacy@autoanon.app

What you provide: When you submit a vehicle request, we collect the vehicle type, make, model, condition, ZIP code, and budget. We do not ask for your name, email, or phone number at this stage. You receive a buyer code (e.g. AA-X4K9P2) that identifies your request without identifying you.

What you provide at acceptance: If and when you choose to accept a dealer's offer, we collect your name, email, and phone number solely to share with that specific dealer. This information is never shared with any other dealer or third party.

What we collect automatically: Standard web server logs (IP address, browser type, pages visited, timestamps). We use Google Analytics to understand aggregate traffic patterns. Analytics data is not linked to your buyer code or any personal information.

Dealers provide a name, email, dealership name, address, and ZIP code during signup. We store this to manage their account and match them with relevant buyer requests.

Payment information (card number, expiration, CVV) is handled entirely by Stripe and never stored on AutoAnon servers. We store only a Stripe payment method ID and the last four digits of the card for display purposes.

We use the data we collect to:

• Match buyer requests with qualified dealers in your area
• Deliver dealer offers to the correct buyer code
• Process bid fees and acceptance fees through Stripe
• Generate AI-assisted offer summaries to help buyers evaluate offers
• Improve the platform based on aggregate usage patterns
• Send transactional notifications (offer received, offer accepted) if you have opted in

We do not sell your data. We do not share buyer data with dealers beyond what is explicitly described above. We do not build advertising profiles from buyer information.

AutoAnon uses the following third-party services to operate:

• Supabase — database and authentication hosting. Data may be stored in data centres outside Canada, including the United States. By using AutoAnon, you consent to this transfer.
• Stripe — payment processing. Stripe's privacy policy governs payment data: stripe.com/privacy
• Google Analytics — aggregate traffic analysis. We use anonymized IP addresses and do not share personal data with Google Analytics.
• AI summarization services — offer summaries are generated using a third-party AI API. Offer data (price, vehicle details, dealer notes) is transmitted to generate the summary and is not used to train third-party models under our agreements.
• Vehicle data providers — we use third-party vehicle market data to provide pricing context in offer summaries. No personal buyer data is shared with these services.

We use cookies for session management (keeping you logged in as a dealer) and for Google Analytics. We do not use advertising cookies or sell cookie data to third parties.

You can disable cookies in your browser settings. Disabling cookies will prevent dealer login functionality from working correctly. Buyer functionality (submitting requests, viewing offers via buyer code) does not require cookies.

Buyer requests and associated offers are retained for as long as the request is active, plus 90 days after closure, to support dispute resolution and platform integrity.

Contact information shared at offer acceptance (name, email, phone) is retained for 12 months after acceptance and then deleted.

Dealer accounts are retained while the account is active. Deactivated dealer accounts are retained for 12 months and then deleted, except for records required for financial compliance.

You may request deletion of your data at any time by contacting privacy@autoanon.app.

You have the right to:

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of non-essential communications at any time

AutoAnon is based in Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). Canadian residents have the right to access personal information we hold about them and to challenge its accuracy. Residents of Quebec have additional rights under Law 25 (Act respecting the protection of personal information in the private sector).

California residents have additional rights under the CCPA, including the right to know what personal information is sold or disclosed (we do not sell personal information) and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, contact us at privacy@autoanon.app. We will respond within 30 days.

We use industry-standard security measures including encrypted connections (HTTPS), database-level row security policies, and server-side secret management. Access to personal data is restricted to the minimum necessary for platform operation.

No system is perfectly secure. If you discover a security vulnerability, please report it to security@autoanon.app before disclosing publicly.

AutoAnon is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information through our platform, contact us at privacy@autoanon.app and we will delete it promptly.

We may update this policy as the platform evolves. Material changes will be communicated to registered dealers via email. The effective date at the top of this page reflects the most recent revision. Continued use of the platform after a policy update constitutes acceptance of the revised policy.