Privacy Policy

This Privacy Policy explains what data OS Auction ("the Service", operated by OS Auction, Inc.) collects, why, and who it is shared with. The Service is a B2B tool for licensed vehicle dealerships; it is not directed at, and we do not knowingly collect data from, individual consumers or children under 18.

1. Data We Collect

• Account & Organization data — name, work email, and dealership Organization membership, handled by our authentication provider, Clerk.
• Billing data— subscription status and seat count. Payment card details are entered directly into Stripe's hosted Checkout/Portal — we never receive or store raw card numbers.
• Vehicle & listing data — VINs, mileage, condition/wholesale value figures, and photos you enter or upload, plus any Carfax/AutoCheck report you upload for AI-assisted analysis.
• Usage & session data — pages visited and feature usage, plus product-analytics data via PostHog: click/navigation autocapture and session replay (a visual recording of on-screen activity, including values typed into form fields such as VIN/mileage searches). This is used exclusively to improve usability, troubleshoot issues, and operate the Service.
• Support requests — name, email, and messages submitted via support channels.

2. How We Use This Data

• To operate and maintain the Service (VIN lookups, comps, history audits, billing).
• To respond to support requests and assist dealerships with onboarding and active usage.
• To detect misuse, prevent fraud, and keep each dealership's data logically isolated from every other organization.

3. Who We Share Data With

We share data only with trusted service providers necessary to run OS Auction, each operating under strict privacy and security terms:

• Clerk — authentication and Organization management.
• Stripe — subscription billing and payment processing.
• Neon — Postgres database hosting (secure storage for Organization data).
• Vercel — application hosting and edge infrastructure.
• Google (Gemini) / OpenAI — processes uploaded vehicle history report text and images solely to generate AI audit summaries.
• MarketCheck — queried with VIN/market parameters to return active-listing comps; dealer identity is never shared with MarketCheck.
• NHTSA — public U.S. government vPIC/recalls API, queried by VIN.
• PostHog — product analytics and session replay to understand platform usage and improve user experience.

We do not sell your data to third parties, and we do not share one dealership's vehicle or inventory data with any other dealership.

4. Cookies & Analytics

We use session cookies set by Clerk to maintain authentication state, and cookies/local storage set by PostHog for product analytics and session replay. Because the Service is a closed B2B platform utilized by licensed dealership employees in a professional capacity, cookie-consent banners are not deployed.

5. Data Retention

We retain Organization data for as long as the account remains active, plus 90 days following subscription cancellation to allow for potential reactivation, after which all associated data is permanently deleted. To request immediate data deletion, contact our support team.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data held by the Service. Contact us directly via Support to submit a data request.

7. Security

Data is encrypted in transit via HTTPS and stored securely using Neon (Postgres) with strict role-based access control managed via Clerk, ensuring data is accessible only to authorized members of your specific Organization.

8. Data Sources & Manual Entry

The Service is a web application. Vehicle data reaches our servers only when you enter it (VIN, mileage, ZIP code, and any figures you obtain yourself), upload a document, or run a lookup. To answer a lookup we query MarketCheck and public U.S. government sources (NHTSA) using the VIN and location you provide. We do not collect background browsing data from other websites.

9. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date above indicates the most recent revision. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Information

Questions or concerns regarding this Privacy Policy should be directed to:

OS Auction, Inc.
Email: truenestauto@gmail.com
Address: 33 E Camino Real, Apt 215, Boca Raton, FL 33432

See also our Terms of Service. For account or platform questions, visit Support.