The short version: we collect the minimum needed to run the service — your email if you create an account, the vehicles you research, and payment confirmation from Stripe. We never see your card number, and we do not sell your personal information.
1. Information We Collect
- Account information: email address and password (managed by our authentication provider, Supabase; passwords are hashed — we never see them in plain text).
- Research activity: VINs and listing URLs you search, and the optional inputs you add to a report (ZIP code or city/state, asking price, mileage). Saved reports are linked to your account.
- Payment information: handled entirely by Stripe. We receive a payment confirmation and the last four digits of your card — never the full card number.
- Chat messages: messages you send to Mama Bear, processed by our AI provider (Anthropic) to generate responses.
- Technical data: IP address, browser type, and request logs, used for security, rate limiting, and debugging.
2. How We Use Information
- To generate and deliver reports, and save them to your history if you have an account.
- To process payments and verify report entitlement.
- To operate, secure, and improve the Service (including abuse prevention and rate limiting).
- To respond to support requests.
- To send transactional emails (e.g., account confirmation). We will not send marketing email without your consent.
3. How We Share Information
We share data only with the service providers required to operate AutoBear:
- Stripe — payment processing.
- Supabase — account authentication and session management.
- Anthropic — AI chat processing (your chat messages and, if a report is open, its vehicle data are sent to generate responses).
- Vehicle data providers — we send only the vehicle search parameters (VIN, make/model, ZIP) needed to fetch listings and government data; never your name or contact information.
- Hosting and infrastructure providers — to run the website and database.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of AutoBear or others. We do not sell or rent personal information to anyone.
4. Cookies
We use essential cookies to keep you signed in (authentication session cookies). We do not use third-party advertising cookies. If we add analytics in the future, this policy will be updated first.
5. Data Retention and Deletion
Saved reports are retained while your account is active. Vehicle lookups are cached (without any personal identifiers) to speed up repeat searches. You can request deletion of your account and associated personal data at any time by emailing support@getautobear.com — we will complete verified requests within 30 days, except where retention is required by law (e.g., payment records).
6. Your Rights
Depending on where you live (including California and the EU/UK), you may have the right to access, correct, delete, or export your personal information, and to object to certain processing. Exercise any of these rights by emailing support@getautobear.com. We will not discriminate against you for exercising them.
7. Security
We use industry-standard measures — encrypted connections (HTTPS), hashed passwords, and access controls — to protect your information. No system is perfectly secure; notify us immediately if you suspect unauthorized access to your account.
8. Children
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to This Policy
We will post any changes on this page with an updated date. Material changes will be highlighted on the site or sent to account holders by email.
10. Contact
Privacy questions or requests: support@getautobear.com