Privacy Policy

Overview

DrivenToCollect provides vehicle collection management tools, checklist workflows, vehicle records, document storage, image storage, and controlled vehicle sharing. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, applications, and related services.

Information We Collect

We may collect information you provide directly, including:

• Account information, such as name, email address, phone number, and password.
• Collection and vehicle information, including titles, VINs, mileage, values, notes, checklist responses, sale details, and service records.
• Uploaded content, including photos, documents, checklist attachments, and other files.
• Communications you send to us, including support requests and demo inquiries.

We may also collect technical information automatically, such as IP address, browser type, device information, pages visited, referring URLs, timestamps, and authentication/session activity.

Legal Bases for Processing

Where GDPR applies, we process personal data based on one or more legal bases, including providing the service requested by you, our legitimate interests in securing and improving the service, consent where required for optional cookies or communications, and compliance with legal obligations.

How We Use Information

We use information to:

• Provide, secure, operate, and improve DrivenToCollect.
• Create and manage accounts, collections, vehicles, checklists, shares, and permissions.
• Store and display user-uploaded photos, documents, notes, and checklist data.
• Send service emails, including account, password reset, invitation, and sharing emails.
• Monitor usage, troubleshoot errors, prevent abuse, and protect users and the service.
• Comply with legal obligations and enforce our terms.

Sharing Information

We do not sell personal information. We may share information with service providers who help us host the application, store files, send email, maintain databases, process logs, or support the service. We may also share information when you direct us to do so, such as when you invite users to a collection or create a shared vehicle page.

DrivenToCollect is hosted on DigitalOcean infrastructure in a United States data center. DigitalOcean acts as a service provider or processor for hosting and infrastructure services. International transfers may rely on DigitalOcean's Data Processing Agreement, Standard Contractual Clauses, or other lawful transfer mechanisms made available by DigitalOcean.

We may disclose information if required by law, to protect rights and safety, to investigate fraud or security issues, or in connection with a business transaction such as a merger, acquisition, financing, or sale of assets.

Cookies

We use first-party cookies for authentication, session security, cookie consent status, and optional preferences such as theme. Authentication cookies are necessary to provide signed-in areas of the service. We do not currently use advertising cookies or load third-party analytics cookies. If analytics, advertising, or other non-essential cookies are added later, we will update this policy and use the consent controls provided in the service where required.

Shared Vehicle Pages

Users may create public or limited-access vehicle sharing links. Anyone with access to a valid sharing link may be able to view the vehicle information and media included on that shared page until the link expires or is revoked.

Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, enforce agreements, and comply with legal obligations. Users may request deletion or correction of certain information by contacting us.

Our retention rules are published on the Data Retention page, including rules for account data, vehicle records, uploads, imports, backups, logs, cookies, and privacy request records.

Storage and Uploaded Files

Uploaded photos, documents, checklist attachments, generated optimized images, and related metadata are stored to provide vehicle and checklist features. When a record or file is removed through the service, the corresponding database record and storage object should be removed or made inaccessible as part of the deletion workflow. Some copies may remain temporarily in backups or logs until those systems expire or are overwritten.

Security

We use reasonable technical and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

You may update account and collection information through the service where available. You may also contact us to request access, correction, export, or deletion of personal information, subject to identity verification and applicable legal exceptions.

Signed-in users may download an account-related JSON export and request account deletion from the Profile page. Account deletion anonymizes account profile fields, disables login, clears active sessions, and records the erasure request. Collection and vehicle records may remain where needed for shared collection history, legal obligations, security, or dispute resolution.

Children

DrivenToCollect is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

Contact

Questions about this Privacy Policy can be sent to info@driventocollect.com.