Autos legal center

Depending on how you use the service, OpenOffer may process account and contact information; role and dealer-organization information; session and device/security signals; passkey credential records; vehicle-offer and negotiation records; plate or stock-number references; vehicle owner/controller or dealer authority evidence and status; financing-interest and follow-up-permission signals; legal acceptances; alert preferences; payment-status records; support and moderation records; audit events; and other information you choose to provide.

OpenOffer applies data minimization to the application database. The current Stripe Identity integration stores provider references and verification status in OpenOffer's application records rather than intentionally copying raw identity-document or selfie images into the application database.

For protected identity verification, OpenOffer currently uses Stripe Identity. Stripe Identity may collect government-issued identity-document images, selfie/live-camera images, extracted identity information, device information, IP information, and verification results under Stripe's own terms, permissions, and privacy disclosures.

OpenOffer may receive or access the verification status and provider information needed to operate, investigate, support, secure, or legally review the verification flow. Identity verification is not the same as vehicle owner/controller or dealer authority verification.

A passkey may let you authenticate using Face ID, a fingerprint, Windows Hello, or a device PIN. During ordinary passkey authentication, the biometric or PIN comparison is handled by your device or credential provider; OpenOffer receives the cryptographic credential response rather than your fingerprint or face image.

Passkey records, counters, transports, status, last-use information, session records, recovery records, and security audit events may be processed to authenticate users, detect misuse, revoke credentials, and recover accounts.

A plate or stock number entered into OpenOffer is a vehicle-lane reference. Entry of a plate does not authorize access to protected personal information held by a DMV or other motor-vehicle agency and does not create consent from the registered owner.

OpenOffer will not treat a plate as permission to obtain or disclose protected motor-vehicle-record personal information. Any future vehicle-data source that includes such information must be separately reviewed for lawful source, permitted use, purpose limitation, access, security, retention, and disclosure controls.

The current Autos platform may store a buyer-provided financing-interest signal and a separate follow-up-permission signal and may aggregate vehicle-opportunity milestones for private financing-readiness analysis. These signals are not a credit application, preapproval, lender selection, authorization for a credit pull, or underwriting instruction.

Live lender connections and lender data sharing remain disabled in the current build. OpenOffer should not collect Social Security numbers, raw credit reports, bank-login credentials, income or employment documents, bank statements, lender underwriting files, lender decision models, or APR decisions merely to prepare for possible future lender partnerships. If a future lender connection is separately approved, the customer must choose or authorize the connection and approve the data shared; the lender should collect its own underwriting information directly.

Information may be used to provide and secure accounts; create vehicle lanes; route offers and messages; verify identity and vehicle authority; prevent bypass, impersonation, fraud, abuse, and security incidents; process platform opportunity fees; enforce contact-release conditions; send permitted service communications; maintain financing-readiness metrics; provide support; maintain audit evidence; debug and improve the Autos service; comply with law; and establish, exercise, or defend legal claims.

OpenOffer Autos does not use personal information for cross-context behavioral advertising and does not sell personal information for money. Any future material change to those practices requires an updated legal review and notice before activation.

Direct contact information is release-sensitive. The current server flow keeps contact payloads unavailable until the unlock reaches RELEASED status after verified lane-specific payment, current identities, current vehicle authority, current legal acceptances, both participants' protected release authorizations, and release oversight.

Identity documents, selfies, registration or vehicle-authority evidence, and internal review materials are not ordinary participant-to-participant negotiation content and are not intended to be disclosed to the other participant through contact release.

OpenOffer may disclose information to service providers and processors that support identity verification, payment processing, hosting, databases, authentication, email, security, monitoring, support, legal compliance, and similar operational functions. Providers may process information under their own legally applicable terms and privacy commitments.

No live bank, credit-union, or auto-lender connection is authorized in the current Production experience. Any future vehicle-financing connection requires separate Founder approval, lane-specific legal review, explicit customer permission, scoped data sharing, and provider-specific security controls before activation.

OpenOffer may also preserve or disclose information when reasonably necessary to comply with law or valid legal process; protect rights, safety, users, or the platform; investigate fraud or abuse; address payment disputes; or support a corporate transaction subject to appropriate safeguards.

OpenOffer retains information only for periods reasonably necessary for the purposes described, configured operational retention policies, security and fraud prevention, disputes, payment records, audit integrity, legal obligations, and legal holds. Production retention must follow an approved schedule rather than an unsupported promise.

Stripe Identity supports redaction of eligible verification sessions. OpenOffer does not promise immediate automatic redaction of every verification; valid access, correction, deletion, or redaction requests are handled subject to provider capability, technical feasibility, fraud and security needs, audit integrity, payment or dispute records, legal requirements, and legal holds.

Users can manage supported alert subscriptions and unsubscribe from optional communications. Transactional, security, account, or legally required messages may be treated differently from marketing messages under applicable law.

Commercial email, if used, may operate only with the required sender identification, accurate routing and subject information, valid physical postal address, and legally required opt-out mechanisms. OpenOffer must restrict commercial email whenever its approved business postal address or communication controls are not configured and current.

OpenOffer uses access controls, authentication, audit logging, provider signature verification, least-privilege roles, release gates, monitoring, and other safeguards, but no system can guarantee perfect security. Users should protect their devices and credentials and promptly report suspected compromise.

The service is not intended for a person who lacks legal capacity to create the account or make the submitted vehicle-transaction decisions. Age and eligibility language and any jurisdiction-specific minor protections remain subject to ongoing licensed-counsel review before activation where required.

Material changes to this Privacy Policy require a new version and, where required, renewed acceptance. Support is available through the contact channel shown in the Autos application. A valid business postal address must remain configured before public commercial communications; OpenOffer does not publish an unconfirmed address.