Privacy Policy

1Information We Collect

Information You Provide

• Account Information: Name, email address, and password when you create an account
• Business Information: Dealership name, zip code, and search radius preferences
• Payment Information: Credit card and billing details processed through Stripe (we do not store your full card number)
• Vehicle Evaluation Data: VINs, mileage, reconditioning cost estimates, and transportation cost estimates you enter into the Service
• Support Communications: Emails, messages, and feedback you send to us

Information Collected Automatically

• Usage Data: Features used, evaluations run, pages visited, timestamps, batch sizes
• Device Information: Browser type, operating system, device type, screen resolution
• IP Address and Location: Used for session management, security, and to detect unauthorized access patterns
• Cookies and Similar Technologies: Used for authentication, session management, and service functionality (see Section 6)

Information from Third Parties

• Vehicle Data: VIN decoding results from NHTSA and comparable listing data from MarketCheck
• Payment Data: Transaction confirmations and subscription status from Stripe

2How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process vehicle evaluations and deliver pricing estimates
• Process payments and manage your subscription
• Send transactional emails (account confirmation, password reset, payment receipts)
• Detect and prevent unauthorized access, credential sharing, and abuse
• Monitor usage patterns for security and to enforce subscription limits
• Analyze aggregate usage to improve the Service
• Respond to support requests
• Comply with legal obligations

We do not use your information for:

• Selling to third-party advertisers
• Building marketing profiles for external companies
• Sharing your evaluation data with other dealers or competitors

3How We Share Your Information

We share your information only in these limited circumstances:

Service Providers

We use third-party service providers that process your data on our behalf:

• Supabase — Database hosting and authentication
• Stripe — Payment processing
• MarketCheck — Vehicle market data (receives VINs and vehicle specifications for comp searches, not your personal information)
• NHTSA — VIN decoding (public government API, no personal data transmitted)
• Hosting Provider — Application hosting and content delivery

These providers are contractually bound to use your data only as necessary to provide their services to us.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If LLINK Auto Sales LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

We do not sell your personal information. We do not share your vehicle evaluation data, bidding history, or pricing analysis with other users, competing dealers, or data brokers.

4Data Retention

• Account Data: Retained for as long as your account is active. After account deletion, personal data is deleted within 30 days.
• Evaluation Data: Retained for 90 days after subscription cancellation. You may request an export of your data during this period. After 90 days, evaluation data may be permanently deleted.
• Payment Records: Retained for 7 years as required by tax and accounting regulations.
• Usage Logs: Retained for 12 months for security and analysis purposes, then deleted or anonymized.

5Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Passwords are hashed and never stored in plain text
• Database access is restricted and monitored
• Payment information is processed by Stripe, a PCI-DSS Level 1 certified payment processor — we never see or store your full credit card number
• Session tokens expire after periods of inactivity
• Concurrent session limits prevent unauthorized access

While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6Cookies

NexBid uses cookies and similar technologies for:

• Essential Cookies: Required for authentication, session management, and security. The Service cannot function without these.
• Functional Cookies: Remember your preferences (zip code, search radius, display settings).

We do not use advertising cookies, tracking cookies, or third-party analytics cookies that follow you across other websites.

7Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Export: Request a machine-readable export of your data
• Opt-Out: Opt out of non-essential communications

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us at the email address below.

8Children's Privacy

NexBid is designed for business professionals and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

9Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

10Contact

For questions or concerns about this Privacy Policy, or to exercise your data rights, contact: