Privacy Policy

Our role — controller vs. processor

For our own website, account, and billing data, Private Car Finder is the business/controller. For the lead, contact, and message data a dealership uploads or generates in Reach and Scout (“Customer Data”), the dealership is the controller and Private Car Finder acts as a service provider / processor that handles the data on the dealership’s behalf and under its instructions.

Information we collect

Account information you provide (name, email, organization, billing details).

Customer Data you upload or generate while using Reach and Scout, including consumer names, phone numbers, email addresses, vehicle details, and message content.

Usage and device data collected automatically to operate, secure, and improve the Service.

How we use information

To provide the Service — including transmitting messages you originate through your own connected accounts, surfacing listings, and booking appointments — and to process payments, provide support, maintain security, and improve the product. We do not use consumer mobile phone numbers, opt-in data, or SMS content for our own marketing.

Messaging and your own Twilio account

Reach sends SMS through your dealership’s own Twilio account and numbers, which we help configure. The dealership is the sender and is responsible for consent and opt-outs. See our SMS Compliance page for details on A2P 10DLC, TCPA, CASL, and opt-out handling.

Sharing

We share data with sub-processors that power the Service — for example messaging (Twilio), email, calendar, analytics, and payment providers — under contracts that require them to protect it and use it only to provide their services. We do not sell personal information, and we do not share, sell, lease, or rent consumer mobile numbers, SMS opt-in data, or SMS content to third parties for their own marketing.

U.S. privacy rights (including California)

Depending on your state, you may have rights to access, correct, delete, and know about the personal information we hold, and to opt out of “sale” or “sharing” (we do not sell or share personal information as those terms are defined). California residents have these rights under the CCPA/CPRA. We do not discriminate against you for exercising them.

Canadian privacy rights (PIPEDA)

If you are in Canada, our handling of personal information is subject to PIPEDA and applicable provincial privacy laws. You may request access to, and correction of, your personal information, and you may withdraw consent (subject to legal or contractual limits). Consumers may withdraw consent to messaging at any time as described on our SMS Compliance page.

Data retention and security

We retain data for as long as your account is active or as needed to provide the Service and meet legal obligations, then delete or de-identify it. We use reasonable administrative, technical, and physical safeguards to protect personal information. Data may be processed in the United States and Canada.

Your choices and contact

You can access, correct, or request deletion of your data, and message recipients can opt out at any time. If you are a consumer, contact the dealership that messaged you; you may also reach us and we will route your request. To exercise any right or ask a question, email support@privatecarfinder.com.