Privacy Policy

01Information We Collect

To operate a repossessed-vehicle auction and transfer title legally, we collect the following:

We do not store full card numbers — payment data is tokenized by Stripe and other trusted payment processors.

02How We Use Your Information

• Platform operations — manage your account, process bids, collect payments, and facilitate vehicle transfers.
• Identity verification — confirm bidding eligibility (KYC).
• Fraud prevention — analyze transaction patterns to detect fraudulent activity.
• Communications — transactional emails (bid confirmations, outbid alerts, payment receipts, shipping updates).
• Legal compliance — retain records as required by applicable law.

03Bidding & Verification Data

Because bidding is binding, we keep a complete record of every bid, buy-now request, and auction you win — including timestamps and amounts. Government ID submitted for verification is reviewed solely to confirm eligibility.

• Bid history — retained 7 years for legal and dispute purposes.
• ID documents — encrypted, access-logged, and deleted within 30 days of approval.
• Proxy / auto-bid settings — stored while the listing is active.

04Payments & Escrow Data

Card payments are processed by Stripe and other trusted payment processors; bank wire transfer details are handled securely. When you win, funds are held in escrow until you confirm delivery. We store transaction metadata — never full card numbers.

05Information Sharing

We do not sell your personal information. We share data only with:

• Service providers — payment processors, shipping carriers, ID-verification services.
• Sellers — when you win, the seller receives your name and contact for title transfer only.
• Law enforcement — when required by valid legal process.
• Business transfers — under the same privacy commitments in the event of an acquisition.

06Data Retention

• Active accounts — retained for the life of your account plus 7 years.
• Closed accounts — anonymized within 90 days, except where a legal hold applies.
• ID documents — deleted within 30 days of verification approval.
• Bid & transaction records — retained for 7 years.

07Your Rights

You have control over your personal data, regardless of where you live:

08California Residents (CCPA)

If you live in California, the CCPA gives you the right to know what we collect, request deletion, and opt out of the sale of personal information (we don't sell it). We will not discriminate against you for exercising these rights.

09Security

We implement TLS encryption in transit, AES-256 encryption at rest, multi-factor authentication options, and role-based access controls. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by law.

10Cookies & Tracking

We use cookies for authentication, fraud prevention, and analytics. See our Cookie Policy for full details. You can manage preferences through your browser settings.

11Children's Privacy

RepoVendor is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

12Governing Jurisdiction & Contact

RepoVendor operates across multiple U.S. states. This policy is governed by the laws of the states in which we conduct business, including:

Questions? Email privacy@repovendor.com. We respond within 5 business days for general inquiries, and within 30 days for formal rights requests.