Privacy policy

Account information: your name, email address, optional mobile number, postal code and a hashed password. Passwords are stored as bcrypt hashes and are never readable by us.

Vehicle information: the details you enter about your vehicle, including VIN or plate, kilometres, condition, declared accident and service history, lien status, an optional loan balance and any photographs you upload.

Your Secret Sell Price: stored against your vehicle and treated as confidential owner data.

Activity records: sign-in events, offer responses, consent records and administrative actions, retained as an audit trail. IP addresses are stored only as a one-way hash.

Dealer information: legal business name, dealership name, OMVIC registration number, business address, contact details and the verification document you supply.

To produce your estimated values, to match your vehicle against dealer requests, to compare incoming offers against your Secret Sell Price, and to notify you when your notification rule is satisfied.

We do not sell personal information. We do not share your contact details with dealers, marketers or data brokers. We do not use your Secret Sell Price for any purpose other than deciding whether to notify you.

Verified dealers see an anonymized vehicle record: year, make, model, trim, kilometres, colour, transmission, fuel type, condition, declared accident and service history, whether a lien exists, the first three characters of your postal code, your photographs, the last six characters of your VIN and your owner-selected intent signal.

Dealers never see your name, email address, telephone number, exact address, full VIN, licence plate, ownership documents, loan balance or Secret Sell Price. They are not told how close an offer came to your number.

Your contact details are released to a specific dealer only when you accept their offer or explicitly request more information from them. Each release is recorded as a consent record you can review.

Access is controlled by role. Owners can reach only their own records, dealers can reach only anonymized vehicles and their own offers, and administrative access is limited and logged. Database row-level security policies enforce the same boundaries at the storage layer.

Sessions use signed, HTTP-only cookies. Sensitive endpoints are rate limited. Photographs and dealer verification documents are served through short-lived, access-checked URLs rather than public links.

No system is perfectly secure. If a breach affecting your personal information occurs, we will notify affected users and the appropriate authorities as required under Canadian privacy law.

Vehicle records and Secret Sell Prices are kept while your account is open. Deleting a vehicle removes it and its photographs from dealer visibility immediately.

Audit, consent and transaction records are retained for a longer period where required for fraud prevention, dispute resolution and legal obligations, in a form that minimises personal detail.

You may request access to the personal information we hold about you, ask us to correct it, withdraw marketing consent at any time, and request deletion of your personal data.

Under Canadian privacy law you may also make a complaint to the Office of the Privacy Commissioner of Canada. Ontario residents may have additional avenues depending on the circumstances.

We use a single essential cookie to keep you signed in. It is HTTP-only, scoped to this site and cleared when you sign out. This build sets no advertising or third-party tracking cookies.