Privacy Policy

Last updated: October 21, 2026

This Policy is incorporated by reference into our Terms of Service – Consumer Users and Terms of Service – For Vehicle Dealers. To opt out of the sharing of your personal information for advertising, use Do Not Sell or Share My Personal Information.

Print or save as PDF

---

---

OneAuctionView LLC, a Delaware limited liability company and its affiliated entities (“OAV”, “we,” “us,” and “our”) appreciate having you visit our website, and/or use our app and your interest in our products. We are committed to protecting your privacy and personal information that you provide to us when accessing or using our products, our services, or this website or our related web-based app (described herein as this “Site”). This privacy policy (this “Policy”) explains how we collect, use, disclose, sell, share and retain the information that we collect during your visit to this Site. This Site is intended for use by only U.S. residents.

This policy applies to information we collect:

• On this Site.
• In email, text, and other electronic messages between you and this Site.
• Through mobile and desktop applications you download, which provide dedicated non-browser-based interaction between you and this Site.
• When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

This Policy may change over time, so please be sure to reread it from time to time. Amendments, modifications or changes to this Policy will be posted at this URL and will be effective when posted and supersede this Policy. Your continued use of this Site following the posting of any amendment, modifications or change to this Policy shall constitute your acceptance thereof. If you do not agree with the terms in this Policy or the applicable Terms of Service, please do not use this Site and do not provide any information to us. Unless otherwise defined in this Policy, the terms used in this Policy have the meaning given to them in our applicable Terms of Service which governs your use of the Site and is incorporated into the Privacy Policy by this reference, which you can access here: For consumers https://oav.io/terms-of-service/ and for dealers https://oav.io/terms-of-service-dealers/. We recognize and honor opt-out preference signals such as Global Privacy Control (GPC) as valid requests to opt out of the sale or sharing of personal information. When we detect such a signal from your browser, we will apply your opt-out preference to that browser on that device. You may need to renew your opt-out choice if you use a different browser or device.

1. Restrictions

This Policy covers your access to this Site. Our Site is not directed to and is not intended for access and use by persons aged 16 or under. We do not intentionally collect or use Personal Data from users that we have reason to believe are under the age of 16. If you are between 13 and 16 years old, you may only use this Site with the consent of your parent or guardian.

To request removal of your personal information please contact us using the methods described in this Policy. Note that removal under the law does not ensure complete or comprehensive removal of your information.

2. How Personal Data is Collected

The types of Personal Data (defined below) and Other Data (also defined below) we collect depends on how you interact with this Site. Generally, we gather Personal Data and Other Data as described below.

Personal data is information that identifies you or can be used to identify or contact you, e.g., your name, email address, address, usage data, phone numbers, and unique device identifiers (“Personal Data”). We may need to collect and process Personal Data in order to provide requested information, products or services to you (including this Site) or because we are legally required to do so.

• Account Registration. We request Personal Data from you if you register or create a client account. The registration process requests that you provide your name, email address, phone number, and other similar information.
• Voluntary Disclosure. We may collect Personal Data voluntarily provided by you, including in emails to this Site, online forms, order and registration forms, surveys, promotion participation, phone calls and online chats with our customer service staff and through other means.
• Listing Price Reports. If you use our form to report a vehicle listing (for example, a listing whose advertised price may depend on dealer financing, a down payment, a trade-in, a rebate not every buyer gets, or fees not included in the price), we collect what you submit: your name, email address and, if you choose, your phone number; your role (for example, shopper or dealer employee); the vehicle identification number (VIN), a link to the listing and any details you provide; and your confirmation that the information is true to the best of your knowledge. We also record a one-way hashed form of your IP address, your browser’s user-agent, the time of the report, and a copy of the listing information this Site displayed at that time. We use this information to review the report, to contact you with questions, and to detect and prevent misuse of the form, such as automated or repeated reports. We do not share your identity with the dealer whose listing you report unless the law requires it. A report does not by itself change any listing or rating.
• AI Shopping Assistant. Some vehicle pages offer an AI assistant (“Ask about this car”) that answers questions using the information published on that page and can help you write a question for the dealer. It is an automated AI system, not a person. You must press Start before sending your first message. When you use it, the messages you type and the assistant’s replies are sent to our AI service provider, Anthropic, PBC, to generate each response. We do not keep chat transcripts. We record only technical details about each reply (such as the time, the vehicle page and the length of the response) and a general topic category for each message (for example, financing or availability), never the words themselves, and we temporarily use your IP address to limit misuse. Our AI provider processes messages under its commercial terms, which do not permit it to use them to train its models, and may keep them for a limited period for safety and abuse monitoring. Please do not share sensitive personal information, such as Social Security or payment card numbers; the assistant is designed to decline it. The assistant never sends anything to a dealer: if it helps you draft a question, you review it and decide whether to send it through the dealer form on the page, which explains what is shared. If you arrive from an AI assistant such as ChatGPT, we set a first-party cookie for 24 hours that records only which assistant referred you, so the feature works consistently as you browse. We may show the assistant on some vehicle pages and not others to learn whether it helps shoppers.
• Payment Services. We may use third-party payment services (each, a “Payment Service”), such as Stripe, to collect payments made through this Site. If you wish to make a payment through this Site, you may be directed to a webpage that is hosted by the Payment Service (or the Payment Service’s service providers) and not by us. Any Personal Data that you provide through a Payment Service page will be collected by Payment Service and not by us, and will be subject to Payment Service’s privacy policy, rather than this Policy. We have no control over, and are not responsible for, Payment Service’s use of information collected through the Payment Service page. Therefore, we recommend that you review the terms of use and privacy policy of any Payment Service prior to use.
• Log data. We may collect log data, such as network and connection information (including Internet Service Provider (ISP) and Internet Protocol (IP) addresses), device and browser identifiers and information (including device, application, or browser type, version, plug-in type and version, operating system, user agent, language and time zone settings, and other technical information), advertising identifiers, cookie identifiers and information, and similar data.
• Usage information. We may collect usage metrics (including usage rates, occurrences of technical errors, diagnostic reports, settings preferences, backup information), content interactions (including searches, views, downloads, and prints), and user journey history (including clickstreams and page navigation, URLs, timestamps, content viewed or searched for, page response times, page interaction, and similar data).
• Other Means. We may collect information through various other means, including social media platforms and from selected third-party business partners that we may utilize to deliver certain content, products, or services or to enhance your experience.

We ask that you not send, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through this Site or otherwise to us.

3. Use and Disclosure of Personal Data

Our primary goal in collecting, using, and sharing your information is to enhance and improve our services. To that end, we will only use Personal Data for legitimate business purposes, including the following:

• Fulfillment of Requests. We may use Personal Data about you (a) to deliver products and services to you, (b) process your transaction and provide you with information about products and services you’ve ordered, (c) for internal research and development purposes, (d) when it is necessary for employees, agents and contractors to operate or maintain this Site or to correct a technical problem, (e) to detect and prevent fraud and abuse to ensure the security and protection of all customers and others; (f) to comply with the law and our legal obligations, including to respond to a request or order from a court, regulator, or government authority; and (g) to effectuate the sale, merger, acquisition, or other disposition of our assets or business (including in connection with any bankruptcy or similar proceedings). We will engage in these activities to manage our contractual relationship with you and/or to comply with a legal obligation.
• Other Communications. From time to time, we may use Personal Data about you to inform you of products, programs, services and promotions that we believe may be of interest to you. If you or your employer is one of our customers, we may also inform you of products, programs, services and promotions using Personal Data about you that you or your employer provided to us. If you would prefer that we not send electronic marketing messages to you, please see the “OPT-OUT” section below.
• Other Business Purposes. We may also use Personal Data about you for other business purposes, such as data analysis (for example, to improve the efficiency of our Site), editorial and feedback purposes, providing customer support, customizing and improving the content and layout of this Site, completing business transactions (for example, to confirm information requested is received by users), development of marketing and promotion plans and materials, statistical analysis of user behavior (for example, to understand what parts of this Site are of most interest to users), product development, market research, administering individual accounts, and meeting government regulatory requirements such as sales tax collection, audits, etc.
• Administrative Communications. We reserve the right to use Personal Data to send to you important information regarding this Site, products, services, your account status, changes to this Site’s terms of use, this Policy, or any other policies, agreements or transactions relevant to your use of this Site, products and/or services. We will engage in this activity to manage our contractual relationship with you and/or to comply with a legal obligation.

We may disclose Personal Data for the following purposes:

• Sharing for Cross-Context Behavioral Advertising. We may share your Personal Data with third-party advertising networks and analytics providers for cross-context behavioral advertising purposes. This activity may constitute ‘selling’ or ‘sharing’ under California law. California residents have the right to opt out of such selling or sharing. To exercise this right, please see the California Residents section or visit https://app.oav.io/do-not-sell.
• When You Consent. We may share Personal information with third parties if you have given us your consent to do so.
• SMS opt-in data. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. OAV is the registered Brand name of OneAuctionView LLC for A2P messaging. SMS opt-in data and consent records are used solely to deliver the buyer-inquiry notifications the recipient asked for, and are never sold, rented, or shared for marketing.
• Third-Party Service Providers. We may provide Personal Data to third-party service providers, who provide services to us, including but not limited to, data analysis, order fulfillment, email management, customer support, CRM, payment processing, and other services.
• Affiliate Communications. We may transfer Personal Data among our affiliates to allow our affiliates to contact you regarding products, programs, services and promotions that they believe may be of interest to you, and such affiliates may otherwise use your Personal Data in accordance with this Policy. If you would prefer not to receive marketing communications from us or our affiliates, please see the “OPT-OUT” section below. We will be the party responsible for jointly-used Personal Data.
• Strategic Partners and Co-Branded Sites. From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with us to provide or promote joint products, services, applications, or features (together, “Jointly Offered Items”). These special relationships may include co-branded web sites (“co-branded pages”). Any information, including Personal Data that you provide in connection with one of these Jointly Offered Items, and/or on one of these co-branded pages will be shared with our third-party partners. You should check these third parties’ web sites for information regarding their privacy practices. PLEASE NOTE THAT THIS POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES. If you do not want Personal Data about you shared with such third parties, please do not provide Personal Data in connection with the Jointly Offered Items and/or co-branded pages.
• Assignment. We may disclose or transfer any and all Personal Data that we collect to an affiliated entity or a third party (and their respective advisors) in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
• Law Enforcement; Emergencies; Compliance. We may use and disclose Personal Data about you to others as we believe to be appropriate: (a) in compliance with laws, rules, or regulations; (b) to comply with legal process; (c) to respond to requests from government or public authorities; (d) to enforce our Site’s terms of use; (e) to protect our operations or those of any affiliated entities; (f) to protect the rights, privacy, safety or property of us, our affiliated entities, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain. For example, we may, to the fullest extent the law allows, disclose Personal Data about you to law enforcement agencies to assist them in identifying individuals who have been or may be engaged in unlawful activities.

4. Collection and Use of Other Data

Our service providers and we may also collect and use the following types of data, referred to in this Policy as “Other Data”:

• Monitoring Data. Our service providers and we may collect and/or track other information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of this Site (“Monitoring Data”). We use Monitoring Data to help us understand who uses this Site and to improve and market it, as well as our other websites and services. Unless combined with Personal Data, Monitoring Data does not personally identify you or any other user, and we may use it for any purpose.
• Aggregated Data. We may aggregate Personal Data in a manner such that the end-product does not personally identify you or any other user of this Site, for example, by using information to calculate the percentage of our users who have a particular telephone area code. Such aggregate information may also be used for any purpose.
• Cookies. To enhance the Internet experience on this Site, our service providers and we may use ‘cookies’, web beacons, pixels, or other tracking technologies on this Site. Cookies are data that a web server transfers to an individual’s computer for recordkeeping and other purposes. We use cookies and other technologies to facilitate users’ ongoing access to and use of our Site. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or to be given the choice of declining or accepting the transfer of a particular cookie, or cookies from a particular web site, to your computer. If cookies are disabled, however, all features of this Site may not operate as intended. Information about disabling cookies can be found on your Internet browser provider’s web site. This Site may have a Cookie Policy that applies to its use of cookies and other similar tracking technologies. If it does, then the Cookie Policy will apply in addition to this Policy. We may use the following types of cookies:
• Strictly Necessary. These include cookies that are required to allow users to authenticate and perform account related functions, as well as to save the contents of virtual “carts” for e-commerce functionality.
• Analytics and Performance. Performance cookies collect information on how users interact with our Site, including what pages are visited most, as well as other analytical data. We use these details to improve how our Site functions and to understand how users interact with our Sites.
• Functionality. These cookies are used to store preferences set by users, such as account name and language.
• Security. We use these cookies to help identify and prevent potential security risks.
• Advertising. These cookies are used to display relevant advertising to users who use our Site, as well as to understand and report on the efficacy of ads served on our Site. They track details such as the number of unique visitors, the number of times particular ads have been displayed, and the number of clicks the ads have received. They are also used to build user profiles, including showing you ads based on products you’ve viewed or acts you have taken.
• Third-Party / Embedded Content. Our Site may utilize third-party applications and services to enhance the experience of use of our Site. These third-parties may use cookies alone or in conjunction with web beacons, pixels or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
• Tools. Our service providers and we may also use various common Internet tools such as ‘pixel tags,’ ‘action tags,’ ‘web beacons,’ ‘gif tags,’ ‘JavaScript’ or similar technologies (together, “Tools”) in connection with Site pages and email messages in certain formats to, among other things, track the actions of Site users and email recipients, to determine the success of marketing campaigns and to compile statistics about Site usage and response rates. Tools allow us to count users who have visited certain pages of this Site, and to help determine the effectiveness of promotional or advertising campaigns. When used in email messages in certain formats, Tools can tell the sender whether and when the email has been opened.

We use cookies and Tools to understand how this Site is used and to customize and enhance the Internet experience of individual users. When you revisit this Site, we may recognize you through a Tool and customize your experience. For example, once you have completed the registration process, a cookie and/or Tool will be used to avoid having you register again. We believe cookies and Tools add value to the user experience.

• HubSpot Analytics. We may use HubSpot Analytics and other similar programs which uses cookies and other similar technologies, to collect and analyze information about Site use and to report on activities and trends. These programs may also collect information regarding the use of other websites, apps and online resources.
• Verification. We may use third-party services to verify that you are a human user. Any information collected as part of such verification is subject to the privacy policy of the third-party service provider.
• IP Addresses. When you visit and interact with this Site, we and our third-party service providers may collect Internet Protocol (IP) addresses. We use IP addresses to understand how this Site is used by our users, to improve this Site and to enhance user experience of this Site. We may also use your IP address to help diagnose problems with our server and to administer our Site. We may also derive your approximate location from your IP address.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Click here #do-not-track for information on how you can opt out of behavioral tracking on this website and how we respond to web browser signals and other mechanisms that enable consumers to exercise choice about behavioral tracking.

5. Our Advertising

We may use third-party advertising companies (like Reddit)to serve advertisements regarding products and Services that may be of interest to you when you access and use this Site, our apps and other websites or online services, based on information relating to your access to and use of this Site and other websites or online services on any of your devices, as well as on information received from third parties. To do so, these companies may place or recognize a unique cookie on your browser (including through the use of pixel tags). They may also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.

6. Security

We may store your Personal Data. This information is retained and used in accordance with existing laws, rules, regulations, and other policies.

While there is no such thing as “perfect security” on the Internet, we will take reasonable steps to ensure the safety of your Personal Data. Personal Data is stored on our or our service providers’ server and is not publicly accessible. We take reasonable precautions and have security measures in place to protect the loss, misuse and alteration of the information under our control. Although we attempt to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally accessing and/or obtaining this information. We are not responsible for any breach of security or for the actions of any third parties that may obtain any Personal Data. You are prohibited from violating or attempting to violate security for or otherwise interfering with the operation of this Site. We do not make, and expressly disclaim, any representation or warranty, express or implied, regarding the security or integrity of this Site and your Personal Data.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately by sending an email to privacy@oav.io.

7. Data Integrity; Retention Period

We will use Personal Data only in ways that are compatible with the purposes for which it was collected, authorized by this Policy, or authorized by you. We will take reasonable steps to ensure that Personal Data is relevant to its intended use, and is accurate, complete, and current (as provided by you). We depend on you to update or correct your Personal Data whenever necessary.

We will retain Personal Data about you for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

8. Consent

By visiting our Site, you expressly consent to the collection and use by us of Personal Data according to this Policy.

9. Opt-Out

We give you choices regarding our use and disclosure of your Personal Data for marketing purposes.

• If you no longer want to receive marketing-related emails from us on a going-forward basis, you may stop receiving these marketing-related emails by sending an email to oavsupport@oav.io.
• If you would prefer that we do not share your Personal Data on a going-forward basis with our affiliates or with unaffiliated third parties for marketing purposes, you may cease this sharing by sending an email to privacy@oav.io.

We will try to comply with your request(s) as soon as reasonably practicable. Please note that we will not be able to remove your Personal Data from the databases of our affiliates or unaffiliated third parties with which we have already shared your Personal Data (i.e., to which we have already provided your Personal Data as of the date that we implement your request). Further, please note that requesting us not to share your Personal Data with affiliates or unaffiliated third parties may result in you no longer receiving any marketing emails from us. Please also note that if you choose not to receive marketing-related messages from us, we may still send you important administrative messages, and you cannot elect to stop receiving such administrative messages.

You may also indicate your choices regarding marketing-related emails by contacting us via postal mail or telephone using our contact information below, or if you have a profile/account, by changing your preferences on the profile/account at any time.

10. Correct; Update; Accessibility; Conflicts

If you would like to request to review, correct, update, suppress, delete or otherwise limit our use of your Personal Data that has been previously provided to us, or if you would like to request to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may make a request by contacting us as described in the Contact Us section. We will respond to your request consistent with applicable law. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting the change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Depending on the specific interactions you have with us, we may provide different or supplemental privacy statements that describe and govern how we use your personal information. When we do so, those different or supplemental privacy statements apply to those specific interactions you have with us.

11. Links

This Site may contain links to other Internet web sites, including social media sites and third-party hosted collaboration tools. These linked sites are not under our control. We provide links only as a convenience, and we do not endorse or control, and are not responsible for, the privacy practices or the content of these linked sites. If you provide any Personal Data through any third-party web site, or choose to communicate with us using third-party collaboration tools or other social media platforms, your transaction will occur on that third party’s web site (not this Site) and the Personal Data you provide will be collected by, and controlled by the privacy policy of that third party. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties. PLEASE NOTE THAT THIS POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES, INCLUDING, WITHOUT LIMITATION, AFFILIATED ENTITIES THAT DO NOT POST OR LINK DIRECTLY TO THIS POLICY.

12. Governing Law and Enforcement of Privacy Policy

Use of this Site and this Policy is governed by United States law and the laws of the State of California. If you are accessing this Site or services from a physical location outside of the United States with laws or regulations governing personal data collection, use, and disclosure that are different from United States laws, you agree that by accessing this Site, you are transferring your Personal Data and Other Data to the United States and you consent to the application of the laws of the United States and the State of California with respect to use of this Site and Services and any dispute regarding this Site or this Policy. You further irrevocably consent to the exclusive jurisdiction of, and agree that venue is proper in, the state and federal courts located in San Bernardino County, California; provided, however, that if the state and federal courts in such county are found not to have exclusive jurisdiction, then any controversy between the parties to this agreement involving the construction or application of any of the terms, covenants, or conditions of this Policy shall be submitted to binding arbitration. The arbitration shall be conducted in San Bernardino, California, and be in accordance with the rules established by the American Arbitration Association, and include limited discovery to be in accordance with and governed by the provisions of the California Arbitration Act, Sections 1280 through 1294.2 of the California Code of Civil Procedure. The prevailing party shall be entitled to recover its reasonable costs and expenses of arbitration, including reasonable attorneys’ fees. Nothing in this section or agreement shall limit or impair any party from seeking and obtaining temporary and permanent injunctive relief to enforce the terms of this Policy. Any arbitration provisions contained in the applicable Terms of Service shall supplement and control over any differing terms in this Policy.

If any provision of this Policy is held by a court of competent jurisdiction to be illegal, unenforceable, or in conflict with any applicable law, the validity of the remaining portions or provisions shall remain in full force and effect. Sections 12 and 13 of this Policy shall be specifically subject to any Terms of Service that apply to your relationship with us and such Terms of Service shall control.

13. Class Action Waiver

TO THE MAXIMUM EXTENT PERMITTED BY LAW, YOU AGREE THAT ANY CLAIM OR DISPUTE SHALL BE BROUGHT ONLY ON AN INDIVIDUAL BASIS. YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION, COLLECTIVE ACTION, REPRESENTATIVE ACTION, OR PRIVATE ATTORNEY GENERAL ACTION ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS.

Specifically, you agree that:

Any dispute or claim arising from or related to your use of the Site, services, or this Privacy Policy, shall be resolved on an individual basis.

You will not initiate, join, or participate in any class action, collective action, or representative action, whether as a plaintiff, member of a class, or in any other capacity, against us or any of our affiliates.

This waiver applies to any claims that you may have against us, our employees, affiliates, agents, or service providers related to your use of our website or services, including but not limited to claims related to privacy, data security, or breach of contract.

This Class Action Waiver does not prevent you from pursuing claims on an individual basis through arbitration, as outlined in the Terms of Service, as applicable.

If any part of this Class Action Waiver is found to be unenforceable or invalid by a court of competent jurisdiction, the remainder of this Privacy Policy and our applicable Terms of Service will remain in full force and effect.

14. Do Not Track Disclosures

Some third-party sites may track your actions when you are browsing and accessing content. You may be able to set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly. We recognize and honor opt-out preference signals such as Global Privacy Control (GPC) as valid requests to opt out of the sale or sharing of personal information for California residents. When we detect such a signal from your browser, we will apply your opt-out preference to that browser on that device. You may need to renew your opt-out choice if you use a different browser or device.

15. Cross Border Transfer of Personal Data

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. If you are accessing this Site from outside the United States, you may be sending information, including Personal Data to the United States where our servers are located. That information may be transferred within the United States or back out of the United States to other countries outside your country of residence. These countries do not necessarily have data protection laws as comprehensive as those in your country. Information transferred to the United States or another country is subject to the laws of that country and may be disclosed or accessed in accordance with those laws. By transferring information or allowing information to be transferred to us, you consent to the transfer, processing and storage in countries outside your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your Personal Data.

16. Contact Us

If you have any questions about this Policy or the practices of this Site or if you would like to request that we disclose or you wish to exercise any rights granted to you by statute (such as those granted to you by the CCPA, or other applicable statutes), please email us at privacy@oav.io.

OneAuctionView LLC
31631 Outer Highway 10
Redlands, California 92373

ATTN: Legal Compliance

Email: privacy@oav.io

17. California Residents

California residents are afforded certain additional rights with respect to their Personal Information under the California Consumer Privacy Act as amended by the California Privacy Rights Act and their regulations the “CCPA” (California Civil Code Section 1798.100 et. seq.), as well as the “Shine the Light” Law (California Civil Code section 1798.83). To learn more about your rights under these laws, please visit our “Privacy Notice” or contact us pursuant to the “Contact Us” section of this Policy. In the case of any discrepancies between this Privacy Policy and your rights under the Privacy Notice, your rights under the Privacy Notice will govern.

18. Nevada Residents: Your Privacy Rights

Nevada consumers may opt out of the sale of certain information that a website operator may collect about them. We do not sell your Personal Information to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. To make such a request, please contact us using the methods described in the “Contact Us” section of this Policy. In the case of any discrepancies between this Privacy Policy and your rights under relevant Nevada statutes, your rights under the statutes will govern.

• COLORADO, CONNECTICUT, DELAWARE, FLORIDA, INDIANA, IOWA, KENTUCKY, MONTANA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TENNESSEE, TEXAS, UTAH, VIRGINIA AND OTHER STATE PRIVACY RIGHTS

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To exercise these rights, contact us or refer to the contact details in this Policy. Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

PRIVACY NOTICELast Updated:October 21, 2026

California residents have certain additional rights with respect to their personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act and implementing regulations (the “CCPA” California Civil Code section 1798.100 et seq.) and the Shine the Light Act (California Civil Code section 1798.83) (“California Rights”). For more information about your California Rights, please contact us in accordance with the “Contact Us” section of this Policy. If there is any discrepancy between this Policy and your California Rights, your rights under the Privacy Notice shall prevail.

19. Your Privacy Rights in California

This policy is a supplement to our general privacy policy (“Policy“) for those persons covered by California law. All terms defined in the Policy shall retain the same meaning on this page. As used herein and in any of its supplemental policies, “Personal Information” has the same meaning as in the CCPA.

20. California Consumer Privacy Act

California residents have the right to know the categories and specific items of Personal Information we have collected, the purposes for which such information is collected or used, whether such information was sold, shared or disclosed to third parties, and the length of time we intend to retain such information.

California residents also have the right to (1) request deletion of any Personal Information collected; (2) request correction of inaccurate Personal Information; (3) request disclosure of information collected, including specific pieces of Personal Information; (4) request disclosure of Personal Information sold or shared; (5) opt out of any such selling or sharing; (6) limit the use and disclosure of sensitive personal information; (7) right not to be discriminated against for exercising CCPA rights; and (8) for automated decision-making technology, the right to access information about the logic involved in the decision-making process, opt out of such processing, and request human review of automated decisions that produce legal or similarly significant effects.

Requests regarding your information can be submitted by contacting us pursuant to the “Contact Us” section of our general Privacy Policy. For requests to know categories of personal information, we will verify your identity to a reasonable degree of certainty by matching at least two data points you provide with data points maintained by us. In order to verify your requests related to (1) – (4) above, we will require you to submit personal information (such as an email address or telephone number) that will allow us to confirm that you are the consumer about whom we have collected information, or you are an agent authorized by the consumer to act on their behalf. We will review your request and either provide you with a notice that we have complied with your request or an explanation of why we were not able to comply with your request. You may appeal our determination by following the instructions included in a denial. Your authorized agent may make a request on your behalf via the methods described above. We require that your authorized agent provide: (1) a signed permission document from you authorizing the agent to act on your behalf, or (2) a copy of a valid power of attorney. We may also require you to verify your own identity directly with us and directly confirm with us that you provided the authorized agent permission to submit the request. These requirements do not apply when you have provided the authorized agent with power of attorney pursuant to California Probate Code sections 4000 to 4465.

We may share your information only under particular situations, as described herein.

21. Collection and Use, Disclosure and Sale of Personal Information

In general, in the previous 12 months, we have collected, used and/or disclosed the following categories of Personal Information: Identifiers, Commercial information, Internet or other electronic network activity, Geolocation Data, Professional or employment-related information, Sensitive Personal Information from dealers, and other categories of Personal Information that relate to, describe or can reasonably be associated with you.

For a list of the specific data we collect, may disclose and sell, the sources from which we collect this personal information, and the personal information we use for business and marketing purposes, please visit our “Privacy Disclosure Page” below.

Personal information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
• Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
• Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

We do not knowingly sell or share the personal information of individuals under the age of 16.

22. CCPA Opt-Out and Limitation on Use or Sharing of Personal Information

We do not sell your personal information to third parties for monetary consideration. However, we may share your personal information with third-party advertising networks and analytics providers for cross-context behavioral advertising, which may constitute “sharing” or “selling” under California law. You have the right to opt out of such sharing or selling. Opt-out requests and requests to limit use of Personal Information may be made by (1) contacting us via email at privacy@oav.io, or mail to OneAuctionView LLC, 31631 Outer Highway 10, Redlands, California 92373, ATTN: Legal Compliance in accordance with the “Contact Us” section of our general Privacy Policy, (2) clicking the “Do Not Sell or Share My Personal Information” link on our website, or (3) enabling an opt-out preference signal such as Global Privacy Control (GPC) on your browser.

23. Automated Decision-Making Technology

Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

Audit Rights for Automated Decision-Making: If we use automated decision-making technology that produces legal or similarly significant effects, you have the right to request information about our compliance with applicable CCPA requirements, including our annual cybersecurity audit results as they relate to automated decision-making systems. Such requests may be submitted using the contact methods provided in this Policy.

24. Shine the Light Act

Residents may request certain information about our disclosure of Personal Information to third parties, including our information-sharing practices, including the names and addresses of companies with whom we have shared your personal information, for their direct marketing purposes. To make such a request, please contact us in accordance with the “Contact Us” section of our general privacy policy.

25. Privacy Disclosure Page

This section explains your rights regarding the Personal Information we collect, as set forth in the CCPA. The following summarizes our Personal Information collection, use and sharing practices for the 12-month period from October 21, 2025 to October 21, 2026, which is the date we last updated this policy. You can find your rights regarding the sale or sharing of your Personal Information here. You can find our Privacy Policy at https://oav.io/privacy-policy/. In the descriptions below, we refer to auto dealers that establish an account to receive inquiries from us as “Dealers,” and individuals who visit our Site as “Consumers.”

Identifiers —Consumers: Name, Email address, IP address. Dealers: contact name, email, phone, business address, account username.

• Source: From you via web forms and automatically from your device/browser when you use the Site.
• Purpose of Collection: To route vehicle-availability request to the dealer selected; to send confirmation and follow-up emails; to register and authenticate dealer accounts; to process dealer subscription payments; to detect and prevent fraud, abuse, and automated scraping and to rate-limit our Site; to operate, secure, debug, and improve the Site; for online advertising; to enforce our applicable Terms of Service; and to comply with applicable law and legal process.
• To Whom We Disclose: Dealers (consumer inquiries only). Service providers: Neon (database hosting/storage); Vercel (application hosting, CDN/edge delivery, first-party analytics, rate-limiting); Sentry (error monitoring and diagnostics); SendGrid (transactional and alert email); Reddit (retargeting – sharing subject to opt-out); HubSpot (Dealer CRM and outreach); Stripe (Dealer payment processing).
• Purpose of Disclosure: To route inquiries to the appropriate Dealer; to host and store application data; to deliver emails requested; to authenticate Dealer accounts; to process dealer subscription payments; to detect, diagnose, and fix technical errors; and to secure the Site against fraud and abuse.
• Retention: Consumers: the earlier of a request for deletion, or 24 months from last interaction. Dealers: duration of the subscription relationship plus 7 years (contract, tax, and statute-of-limitations purposes). Hashed-IP analytics logs: 24 months.

California Customer Records statute categories — Consumers: NOT COLLECTED. Dealers: Credit card information is provided directly to our payment processor (Stripe) by dealers. OAV never receives or stores card numbers.

Protected classification characteristics — NOT COLLECTED.

Commercial information — Consumers: Listings and vehicles viewed, searches run and saved, dealer connection requests submitted. Dealers: subscription plan and billing history.

• Source: From you and from your activity on the Site.
• Purpose of Collection: To provide the services requested; to deliver saved-search and availability alerts; to improve our search results; and to administer dealer subscriptions.
• To Whom We Disclose: Neon (storage); SendGrid (consumer alert/notification email); HubSpot (dealer marketing and CRM); Stripe (dealer billing records).
• Purpose of Disclosure: Consumers: Data storage; delivery of alerts and communications. Dealers: Billing and account management.
• Retention: Consumers: The earlier of unsubscribe or deletion request, or 24 months of inactivity. Dealers: Subscription term + 7 years.

Biometric information — NOT COLLECTED

Internet or electronic network activity — Consumers: Browsing history, search history, information about a consumer’s interaction with a website, application or advertisement. Pages and listings viewed, searches, clickstream and navigation path, referring URL, timestamps, user-agent and device/browser type, hashed IP address; error-session replay.

• Source: From you, your device/browser, and our service providers.
• Purpose of Collection: To operate, secure, debug, and improve the Site; to measure performance and diagnose technical errors; for the administration and protection of our business; for online advertising; and to comply with applicable law and legal process.
• To Whom We Disclose: Neon (storage); Vercel (hosting and first-party analytics/performance measurement); Sentry (error monitoring and diagnostics); Anthropic (processing messages you send to the AI assistant); Reddit (for online advertising – sharing subject to opt-out).
• Purpose of Disclosure: Data storage and hosting; product and performance analytics; detecting, diagnosing, and fixing technical errors and security incidents.
• Retention: Analytics and interaction logs: 24 months. Error and replay data: 90 days.

Geolocation data —We do not collect precise geolocation. We collect (a) the ZIP code Consumers type into the form, and (b) an approximate city/region derived by our hosting provider from your IP address.

• Source: From you (ZIP you enter) and derived from your device’s IP address.
• Purpose of Collection: To show vehicles and dealers and deliver location-relevant results.
• To Whom We Disclose: Vercel (edge/hosting); Neon (storage); the dealer you contact (your ZIP is included in the inquiry so the dealer can assess distance).
• Purpose of Disclosure: To deliver location-relevant results and give the dealer the context needed to respond to Consumer requests.
• Retention: ZIP submitted with an inquiry upon deletion request or 24 months from last interaction. IP-derived approximate location: not stored beyond the request, except within hashed-IP analytics logs retained 24 months.

Sensory information — NOT COLLECTED

Professional / employment-related information — Dealers only: Job title/role and employer (dealership) of a Dealer contact.

• Source: From the Dealer contact directly, publicly available business listings and commercially available business contact lists.
• Purpose of Collection: Business-to-business outreach, account management, and CRM.
• To Whom We Disclose: HubSpot (dealer CRM and outreach); Neon (storage).
• Purpose of Disclosure: To manage our business relationship with the dealership and deliver Dealer communications.
• Retention: Duration of the dealer relationship + 7 years.

Non-public education information — NOT COLLECTED

Inferences —Vehicle and shopping preferences inferred from saved searches and browsing (body style, price band, geography). We do not infer psychological trends, predispositions, attitudes, intelligence, abilities, or aptitudes.

• Source: Derived from your activity on the Site.
• Purpose of Collection: To deliver relevant saved-search alerts and improve the results.
• To Whom We Disclose: Neon (storage); SendGrid (alert delivery).
• Purpose of Disclosure: Data storage and delivery of alerts you signed up for.
• Retention: Earlier of unsubscribe or deletion request, or 24 months of inactivity.

Sensitive personal information is a subtype of personal information consisting of specific information categories. The table below identifies the categories of sensitive personal information. We do not collect sensitive personal information.

Unless otherwise stated above, we will retain categories of your Personal Information only for as long as necessary. We make this determination based on our relationship with you, applicable laws, and our data retention policies. We will retain each category of your Personal Information for as long as we have a relationship with you and for a reasonable period thereafter.

We also consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We review our retention periods for each category of Personal Information on a regular basis, and all data is retained in compliance with applicable data protection laws.