Privacy policy

Who is responsible

Lot Radar acts as the controller for account, website, analytics, billing, security, and support data. For customer workspace content, dealer organizations decide what client information they enter and share.

Data we collect

• Account data: name, email, authentication state, organization membership, role, language, theme, and security settings.
• Organization data: company name, team members, plan, entitlements, billing state, API keys, audit events, and communication preferences.
• Workflow data: searches, filters, watchlists, saved searches, lot views, briefs, client requests, comments, bid confirmations, alerts, and workspace activity.
• Public listing data: lot identifiers, VIN, vehicle attributes, sale dates, auction source, source freshness, media references, title/damage signals, pricing, bids, and related risk indicators.
• Support and contact data: messages you send to the team, request metadata, and follow-up history.
• Technical data: IP address, device/browser data, cookies, logs, request IDs, security events, and performance telemetry.

Why we use data

• To provide the App, catalog, VIN lookup, watchlists, briefs, share links, alerts, API access, and account settings.
• To authenticate users, prevent abuse, protect sessions, investigate errors, and maintain audit trails.
• To process subscriptions, invoices, balances, plan limits, trials, and entitlement checks.
• To respond to support, legal, security, and data-rights requests.
• To improve product reliability and usability with consent-based analytics and performance measurement.
• To comply with legal obligations and enforce the Terms.

Legal bases

• Contract: operating the service, account, subscription, API, and customer workspace.
• Legitimate interests: security, fraud prevention, service diagnostics, product quality, source freshness, and business communication.
• Consent: optional analytics cookies and similar tracking where consent is required.
• Legal obligation: tax, accounting, compliance, dispute, and law-enforcement response requirements.

Sharing and subprocessors

• Hosting and infrastructure: Vercel and Cloudflare.
• Analytics and performance: Vercel Analytics, Speed Insights, and Google Analytics 4 after consent.
• Observability and logs: Better Stack and related operational monitoring.
• Email and communications: Resend or similar transactional providers.
• Billing and payments: payment, invoicing, tax, and subscription providers.
• Legal or safety recipients when required by law, to protect rights, or to investigate abuse.

International transfers

Lot Radar is operated with cloud infrastructure and vendors that may process data in the United States, the European Economic Area, Ukraine, or other jurisdictions. Where required, transfers rely on contractual safeguards and vendor data-processing terms.

Retention

We keep data for as long as needed to provide the service, maintain security, resolve disputes, comply with tax and accounting obligations, and preserve audit integrity. Account deletion, export, and retention workflows are handled from account settings or support.

Your rights

• Depending on your location, you may request access, correction, deletion, export, restriction, objection, or withdrawal of consent.
• California residents may have rights to know, delete, correct, limit sensitive-data use, opt out of sale/share, and not be discriminated against for exercising privacy rights.
• EU/UK/EEA users may also have the right to complain to a supervisory authority.

Children

Lot Radar is a business tool and is not intended for children. Do not use the service if you are not legally able to enter business software terms.