Privacy Policy

This Privacy Policy is effective as of 2026-06-11 and applies to ACar websites, apps, marketplace services, private-sale services, identity verification, insurance verification, payments, document signing, title and registration services, support, marketing, analytics, and related communications.

This Policy describes how ACar Technologies, Inc. and, where applicable, ACar NJ LLC collect, use, disclose, retain, and protect personal information. Some services may also be governed by additional notices, including the Cookie Policy, Financial Privacy Notice, Biometric Privacy Notice and Consent, E-Sign Consent, SMS and Messaging Terms, and transaction documents.

We collect personal information directly from you, automatically from your device or use of the platform, from transaction participants, and from service providers, public records, vehicle-history and VIN-data providers, identity-verification providers, payment processors, lenders, insurers, lienholders, the New Jersey Motor Vehicle Commission and other government agencies, and other third parties.

Sensitive data may include driver's license information, government ID, precise geolocation, financial account information, Social Security number or last four digits, biometric information used for identity verification, and information from uploaded vehicle, title, registration, insurance, or identity documents. We collect sensitive data only when needed to provide requested services, comply with law, prevent fraud, protect users, or with your affirmative consent where required.

• Operate accounts, listings, appointments, messaging, checkout, support, and notifications.
• Verify identities, insurance, title ownership, liens, payment eligibility, and fraud risk.
• Prepare bills of sale, Buyers Guides, odometer disclosures, powers of attorney, warranty/as-is disclosures, temporary-registration records, lien payoff records, and MVC submissions.
• Process payments, payouts, refunds, taxes, government fees, lien payoffs, accounting records, and chargebacks.
• Support private-sale services, dealer-sale services, title/registration services, and customer support.
• Improve safety, security, platform performance, pricing tools, user experience, customer support, fraud prevention, and product development.
• Send transactional, relationship, and marketing communications where permitted.
• Measure advertising, analytics, attribution, and marketing effectiveness where permitted by your choices and applicable law.
• Comply with law, enforce agreements, resolve disputes, audit compliance, and respond to lawful requests.

ACar collects vehicle and transaction data because vehicle sale, private-sale support, dealer, title, registration, payment, lien, odometer, warranty, insurance, and tax workflows require durable records.

Vehicle and transaction data may include VIN, plate, mileage, title documents, registration documents, lien payoff records, vehicle photos/videos/scans, condition notes, Buyers Guide acknowledgments, seller disclosures, buyer records, bill of sale, odometer disclosures, warranty/as-is documents, powers of attorney, insurance records, temp-tag records, payment records, tax records, pickup records, and support communications.

We may disclose vehicle and transaction data to buyers, sellers, ACar personnel, payment processors, electronic-signature providers, title/registration partners, NJ MVC, lienholders, insurers, financing partners, tax authorities, regulators, law enforcement, professional advisors, and other parties reasonably needed to complete, document, audit, or defend a transaction.

Some vehicle and transaction records cannot be deleted while they are needed for dealer, title, odometer, temporary-registration, tax, payment, lien, fraud-prevention, dispute, insurance, regulatory, or legal obligations.

Identity verification is performed through Stripe Identity, our current verification provider, or another provider we disclose to you before verification. Verification may require a government ID and selfie for facial comparison. ACar uses biometric information solely for identity verification, fraud prevention, transaction safety, and legal compliance. We do not sell biometric information or use it for advertising.

Before biometric collection, you must receive and accept a separate biometric privacy notice and consent. The public retention schedule is available at /legal/biometric-retention. Those notices control biometric-specific retention, destruction, revocation, and processor details for the verification flow unless applicable law requires otherwise.

We use payment processors, banks, payout providers, lienholders, tax providers, and other financial-service providers to process payments, payouts, refunds, taxes, fees, lien payoffs, and related records.

ACar does not arrange or broker financing. If you independently arrange outside financing, we may process lender funding records needed to close the transaction. If you use payout, bank-link, or other financial services through ACar or an ACar partner, additional authorizations, partner privacy notices, and financial privacy notices may apply. The Financial Privacy Notice describes how we handle financial information for payments, payouts, lien payoff, and financial-service workflows.

We share personal information with:

• Transaction participants, where reasonably needed to schedule, verify, document, or complete a transaction.
• Payment processors, banks, payout providers, lienholders, lenders, tax providers, and financial partners.
• Identity-verification, biometric-verification, insurance-verification, fraud-prevention, and risk-screening providers.
• DocuSign or other electronic-signature providers.
• Cloud hosting, storage, security, analytics, email, SMS, push, call, chat, and customer-support vendors.
• Vehicle-history, VIN-decoding, valuation, inspection, transport, title, registration, and dealer-service providers.
• NJ MVC, tax authorities, law enforcement, regulators, courts, and government agencies where required or appropriate.
• Professional advisors, insurers, auditors, lawyers, accountants, and business-transfer parties.
• Third-party artificial intelligence providers that power our AI features, as described in "Artificial Intelligence Features" below.

We may share aggregated or de-identified information where it cannot reasonably identify you.

We use cookies and similar technologies as described in the Cookie Policy. These may support authentication, security, preferences, analytics, advertising, attribution, saved vehicles, chat, and platform performance.

Some analytics or advertising technologies may be considered a "sale," "sharing," or targeted advertising under certain privacy laws if they disclose identifiers, device data, or browsing activity to advertising partners. Where applicable, you may opt out of targeted advertising or sale/share through our cookie controls, account settings, browser or device settings, or by contacting [email protected].

If ACar uses AI-assisted tools, chatbots, support automation, session analytics, call transcription, vehicle-photo analysis, pricing tools, fraud/risk tools, or similar automated systems, we may process inputs, outputs, transcripts, usage events, photos, videos, scans, and support records to provide, secure, monitor, and improve those tools. We do not knowingly use sensitive personal information for targeted advertising.

Some ACar features are powered by a third-party artificial intelligence provider. We name that provider here so you know exactly who receives your information:

• OpenAI — powers the ACar AI assistant (chat on our website and in our mobile apps) and our photo-reading tools that read a VIN plate or a vehicle title you choose to scan.

When you use the AI assistant, we send OpenAI the messages you type, the recent history of that conversation, and basic context about the page or vehicle listing you are viewing when you ask. When you use a VIN or title scan, we send the photo you captured, which may include the name, address, and VIN printed on the document.

We do not send OpenAI your Social Security number, date of birth, government ID images, biometric data, or your bank account or card details. OpenAI processes this information as our service provider, and under OpenAI's API data-usage terms, information submitted through the API is not used to train their models.

Our AI features are clearly labeled as AI wherever they appear, and the AI assistant shows this disclosure before you send a message. Using the AI assistant or a photo scan is entirely optional — if you would rather not have your information processed by a third-party AI provider, simply do not use those features. You can reach a real person on the ACar team through chat, email at [email protected], or by phone.

We do not sell personal information for money. Depending on applicable law, some disclosures to advertising, analytics, or marketing partners may be considered a sale, sharing, or targeted advertising.

Where required, you may opt out of sale, sharing, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects by using available cookie controls, account settings, or by emailing [email protected]. We honor opt-out preference signals, such as Global Privacy Control, where applicable law requires us to do so and our systems can recognize the signal; a browser-based signal applies to that browser or device and may not connect to your ACar account unless you also identify yourself to us.

We retain information for as long as needed to provide services, maintain records, comply with law, resolve disputes, prevent fraud, enforce agreements, and support legitimate business needs.

Retention varies by category:

We delete, de-identify, or aggregate data when it is no longer needed and retention is not legally required.

Depending on where you live and whether a law applies to ACar at the time of your request, you may have rights to:

• Access or confirm processing of your personal information.
• Correct inaccurate personal information.
• Delete personal information.
• Obtain a portable copy of personal information.
• Opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Limit or restrict certain sensitive-data uses where applicable.
• Appeal a denied privacy request.

New Jersey residents may exercise rights under the New Jersey Data Privacy Act when it applies. Other state privacy laws may provide similar rights.

To submit a request or appeal, email [email protected]. We may verify your identity before acting on a request. You may use an authorized agent where applicable law permits, but we may require proof of authorization and verification of your identity.

We will respond within the time required by applicable law. If we deny your request in whole or in part, we will explain the reason where the law requires, and you may appeal by replying to our decision or emailing [email protected] with "Privacy Appeal" in the subject line. If your appeal is denied, you may contact the New Jersey Division of Consumer Affairs or your state attorney general. Some requests may be denied or limited where records are needed for legal, dealer, title, odometer, payment, tax, fraud-prevention, security, warranty, dispute, or regulatory obligations.

You may opt out of marketing emails by using the unsubscribe link or contacting us. You may opt out of marketing texts according to the instructions in the message or the SMS and Messaging Terms. Transactional communications about accounts, purchases, listings, appointments, payments, title, registration, legal documents, security, or support may continue where permitted by law.

Push notifications can be controlled through your device or app settings.

We use administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include access controls, encryption, monitoring, vendor controls, authentication, and internal procedures. No system is perfectly secure, and we cannot guarantee that information will never be accessed, used, disclosed, altered, or destroyed without authorization.

If a security incident requires notice under applicable law, we will provide notice as required.

Browsing public vehicle listings is open to everyone and does not require an account. The platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 18 to create an account, list a vehicle, schedule a test drive, sell, purchase, complete identity verification, or complete title/registration services.

We may update this Privacy Policy from time to time. Material changes will be posted on the platform and, where appropriate, emailed or shown in-product. The effective date or version date will identify the current policy. If a change requires consent, we will request consent as required by law.

Privacy requests: [email protected]. General support: [email protected]. Legal notices: [email protected].