Privacy Policy

• Identity: name, email, phone
• Vehicle information: year/make/model, VIN, mileage, ownership status
• Referral information: referrer & referee contact details and timeline
• Appointment & service history with our concierge team
• Account activity: logins, devices, IP, and audit events for security
• Documents you upload to Vehicle Vault (registration, insurance, etc.)

• Vehicle ownership tracking and recall / warranty monitoring
• Customer support and concierge follow-up
• Equity window monitoring and personalized upgrade conversations
• Referral processing and reward fulfillment
• Securing your account and preventing fraud or abuse

We rely on vetted infrastructure providers and only share what each one needs to operate:

• Supabase — encrypted database, authentication, and storage
• Lovable AI Gateway — AI-assisted email drafting (no PII sent unless you compose it)
• Email delivery — transactional and concierge messaging from notify.autopathchicago.com
• Google Analytics (only with your analytics consent) — anonymized usage telemetry

We do not sell personal information.

Account and vehicle data is retained while your AutoPath account is active. Audit and security logs are retained for up to 24 months. Vehicle Vault documents are retained until you delete them or close your account. Marketing data is retained only while you consent.

• Access — download a copy of your data from the Account Security center
• Correction — update your profile, vehicles, and contacts at any time
• Deletion — request full deletion from the Account Security center
• Portability — export your data as CSV/JSON

Illinois residents have rights under the Illinois Consumer Privacy laws; California residents have CCPA / CPRA rights including the right to know, delete, correct, and opt-out of sale (we do not sell).

Privacy: privacy@autopathchicago.com
Security: security@autopathchicago.com