Privacy Policy

Last updated: April 22, 2026

This Privacy Policy describes how AuctionEye ("we", "us") collects, uses, and shares information about you when you use myauctioneye.com.

1. Information We Collect

Account data: email address, password (hashed by Supabase Auth), plan tier.
Usage data: VINs you look up, analyses you create, dates and counts of reports issued.
Payment data: handled by Stripe; we never store full card numbers. We receive tokenized customer and subscription IDs.
Technical data: IP address, browser type, pages viewed (via privacy-friendly analytics, no cross-site tracking).

2. How We Use Information

To provide VIN reports, auction analyses, and account features.
To bill subscriptions and pay-per-report charges.
To prevent fraud, abuse, and bulk scraping.
To send transactional emails (receipts, password resets, account notices). Marketing emails only if you opt in.

3. Sharing

We share information only with service providers required to operate AuctionEye:

Supabase — authentication and database.
Stripe — payment processing.
Vercel — hosting and serverless functions.
Vindata — NMVTIS data provider for title and history reports.
MarketCheck / Anthropic / EmailJS — valuation, AI support chat, transactional email.

We do not sell personal information.

4. NMVTIS Data

VIN queries may be sent to the National Motor Vehicle Title Information System via our licensed provider. Queries are logged as required by NMVTIS program rules. We do not attach your name or address to NMVTIS queries; only the VIN is transmitted.

5. Security

Data is transmitted over HTTPS. Passwords are hashed by Supabase Auth. Database tables enforce row-level security so a logged-in user can only read their own records. API keys for upstream services are held server-side, never exposed to the browser.

6. Data Retention

Account data is retained while your account is active. You may request deletion at any time by emailing legal@myauctioneye.com. We may retain minimal billing and NMVTIS query logs as required by law.

7. Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have rights to access, correct, delete, or port your personal data. Contact us to exercise these rights.

8. Children

AuctionEye is not directed to children under 18 and we do not knowingly collect data from them.

9. Changes

Material changes to this Policy will be notified by email or on the site before taking effect.

10. Contact

Privacy questions: legal@myauctioneye.com