Privacy

• Your phone number. Every account has one confirmed mobile number. We text a code through Twilio to confirm it works. It is what makes a seller reachable and a troublemaker blockable, and it is where we text you about messages and saved searches.
• Google, if you sign in with it. We ask Google only for basic sign-in: your name, email address, profile picture and Google account ID. We use them for one thing, to sign you in and recognise your account when you come back. We don’t show any of them on the site, don’t use them for advertising, and don’t sell or share them. We can’t see your Gmail, contacts, files or anything else in your Google account. They’re kept with your account’s sign-in record at our database host, Supabase, until you delete your account, which deletes them. You can also disconnect AutoRadian under your Google Account’s security settings (“Third-party apps & services”); that stops Google sign-in but doesn’t delete your AutoRadian account. You still confirm a phone number once. AutoRadian’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Your ZIP code, if you message a seller. It’s a light check that you’re a real, local-ish buyer rather than a bot, and it lets a seller see roughly how far away you are, rounded to the nearest 5 or 10 miles. The seller never sees the ZIP itself. The ZIP you type into the search box is used only for that search and isn’t saved to your account.
• Your listing. The VIN, photos, price, mileage, description and ZIP you enter, and whether you have marked it “Sale Pending”. All of it is public while the listing is live, except the title document, which only our reviewers see. If you attach an inspection report, anyone viewing your live listing can open it, so cover your name, address and plate first.
• Your messages. Enquiries and replies are stored so both sides can read the thread. Neither side sees the other’s name, phone number or ZIP. We scan messages for known scam patterns, including a phone number or email address being shared, and warn the person receiving them. If a message trips that check, a moderator may read it.
• Reports. Anyone can report a listing, and either side of a conversation can report that the other didn’t show up. A person reads reports. Three no-show reports within 90 days stop an account from messaging or listing.
• Saved cars. The cars you save and their price when you saved them, so we can text you if the price drops. Sellers aren’t told who saved their car. Remove one and it stops.
• Saved searches. The filters you saved, so we can text you when a matching car is listed. Delete one and it stops.
• Payment. The $12 listing fee and any $5 extension fees are the only payments the site takes, and they are handled entirely by Stripe. Card numbers never reach our servers. We keep Stripe’s reference for each payment and refund, and Stripe keeps ours for your account and listing.
• If you list as an inspector. Your business name, your name, the shop address, business phone, email and website are shown publicly in the inspector directory. We text a code through Twilio to confirm the business phone, and we record when codes are sent.

Phone photos usually carry GPS coordinates. Our uploader re-encodes every photo in your browser before it is uploaded, which removes that data before the file leaves your device, so a listing doesn’t quietly publish your driveway. When you add a front, rear or corner photo, your browser also looks for the number plate and suggests a cover for you to check; that happens on your device, and the photo isn’t sent anywhere to do it. Inspection report PDFs are uploaded as they are.

Number plates are not removed automatically. Each photo has a “Cover the plate” tool if you want to scrub yours; what it covers is destroyed in the uploaded file, not hidden behind a box.

Sellers can see how many people viewed their listing, and inspectors their profile. Other visitors can’t. To count each person once a day we record a code made from your account (if you’re signed in) or your IP address (if you’re not), the date and a secret key. We never store the account id or the IP address itself, and because the date is part of the code it can’t link your visits across days. We delete these records after 2 days for listings and 45 days for inspector pages.

• Other users: your listing, and your messages to the person you sent them to.
• Our moderators: flagged messages, reports and title documents.
• Twilio: your phone number, to send you a code or a text about a message, a saved search or your listing.
• Google: if you sign in with Google, Google tells us your name, email address, profile picture and Google account ID (see above).
• Stripe: your payment details, which you give them directly, plus our reference numbers for your account and listing.
• NHTSA: the VIN, to decode the vehicle. Nothing about you.
• VinAudit / NMVTIS: the VIN, to buy a title-history report. Nothing about you.
• CarAPI: a make, model and year, to list trims. Nothing about you.
• Supabase and Vercel: they host the database and the site, and see the technical details of each request, such as your IP address.

We do not sell your data, share it with advertisers, or run advertising or analytics trackers.

We use a sign-in cookie to keep you signed in. It isn’t used for tracking.

A listing stops being public at the end of its listing period (60 days, plus any 30-day extensions you buy), or as soon as you mark it sold, but the record stays so the caps on how many cars you can list still work and so a past sale can be looked up if there’s a dispute. The photos, any title scan and any inspection report are deleted 90 days after a listing ends (a sold car’s photos after 7 days), and a draft that is never published is deleted entirely after the same period. If a moderator takes a listing down, its photos and inspection report are deleted straight away.

We also keep a record of each car that has gone live (its VIN and which account listed it) so we can count free listings and recognise a car being listed again, and we keep title-history reports by VIN. Messages are kept until one of the two people in the conversation deletes their account.

• Delete a saved search from your alerts page, or pause it.
• Replace any photo on a live listing, or cover a plate you missed, from the listing’s edit page.
• Remove an inspection report from your listing at any time; the file is deleted when you do.
• Delete your account yourself from your account page. It happens straight away: your listings and their files, every conversation you’re part of, your messages, reports, inspector listing, saved searches, phone number and sign-in. What stays isn’t about you: Stripe’s own payment records, title-history reports kept by VIN, and a numbered place in the free-listing count with no account attached. One exception: if an account is banned, or has three no-show reports against it, when it’s deleted, we keep a scrambled copy (a SHA-256 hash) of its phone number and email address, so the same person can’t sign straight back up with them. A hash of a phone number can be worked back out with enough effort, so treat it as us keeping the number. Nothing else from that account is kept, and the entry is removed if the ban is lifted.
• Ask us for a copy of what we hold about you by emailing hello@autoradian.com.

hello@autoradian.com. See also the terms of use.