Privacy Policy

Information We Collect

We collect information you provide directly to us:

• Email address — when you sign in to view inventory. Used solely for authentication via a one-time code.
• Name, email, and phone number — when you submit a contact or lead form to inquire about a deal or vehicle.
• Message content — any details you voluntarily include in a contact form submission.

We also collect some information automatically when you use our site:

• Usage data — pages you view and actions you take, such as submitting a form or tapping a call, text, or email link.
• Ad click identifiers — if you arrive by clicking one of our ads, the link may include a click ID added by the ad platform (for example, Google’s “gclid”) and campaign tags. We record these with the actions above so we can tell which ads lead to inquiries.

How We Use Your Information

• To verify your identity and grant access to inventory listings.
• To respond to your inquiries and help you with a vehicle purchase or lease.
• To contact you via email, phone, or SMS in connection with a deal you expressed interest in.
• To measure how well our site and advertising work, as described under “Advertising” below.

We do not use your information for marketing purposes. We will not send you unsolicited promotional emails or add you to any mailing list.

SMS Communication

If you provide a phone number, we or our affiliated dealers may contact you via SMS in connection with your inquiry. Message and data rates may apply. You can opt out at any time by replying STOP or by contacting us directly.

Cookies and Session Data

We use HttpOnly cookies solely to maintain your authenticated session after you sign in. These cookies are not used for advertising or cross-site tracking and are deleted when your session expires or you sign out.

We do not use third-party advertising cookies. Our analytics tool (PostHog) is configured without cookies and does not store data in your browser. Ad click identifiers are held only in memory while the page is open and are not saved to your browser.

Third-Party Services

We use the following third-party services to operate our site:

• Resend — to send authentication codes and forward your contact form submissions to us.
• Quо — for SMS communication.
• PostHog — for privacy-friendly, cookie-free analytics.
• Vercel — for hosting and infrastructure.

These services may process your data as necessary to perform their functions. We do not sell your information to any third party.

Data Retention

We retain your data for as long as your account is active or as needed to respond to your inquiry. You may request deletion of your data at any time by contacting us.

Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information. We do not sell your data. To opt out of the limited sharing described under “Advertising,” email us.
• Not be discriminated against for exercising your privacy rights.

Advertising

We run ads on Google, Meta (Facebook and Instagram), and Reddit. If you interact with one of our ads and visit our site, these platforms may collect data about your visit in accordance with their own privacy policies. We do not install these platforms’ tracking pixels or tags on our site, and we do not use them for retargeting.

To measure which of our Google ads lead to inquiries, we report conversions back to Google Ads. A report contains the ad click ID from your visit, the type of action (such as a form submission, call, or text), and when it happened. It does not include your name, email address, phone number, or message. Google uses this information to report on and optimize our ad campaigns.

For more information, see the privacy policies of Google, Meta, and Reddit.

Contact Us

If you have any questions about this policy or would like to exercise your privacy rights, please contact us at hi@ocautoaddict.com.