Privacy Policy

1. Data We Collect

We collect the following categories of information when you use wreckin.parts:

Account Information

• Name, email address, and phone number
• Business name, address, and contact details
• Account credentials (passwords are hashed and never stored in plain text)

Inventory Data

• Vehicle and part information (make, model, year, condition, pricing)
• Photographs of vehicles and parts
• VIN numbers and title information

Location Data

• Yard address and GPS coordinates (used for mapping and proximity search)
• GPS mapping data within your yard for vehicle location tracking

Usage Data

• Pages visited and features used
• Browser type, device information, and IP address
• Referral sources and session duration

2. How We Use Your Data

We use your information to:

• Provide the Service: Operate the platform, process transactions, display your inventory listings, and enable communication between buyers and yards.
• Improve the Platform: Analyze usage patterns to improve features, performance, and user experience.
• Analytics: Generate aggregate, anonymized analytics to understand how the platform is used and identify areas for improvement.
• Communication: Send service-related notifications, billing reminders, and platform updates. We do not sell your information or send unsolicited marketing emails.
• Security: Detect and prevent fraud, abuse, and unauthorized access.

3. AI Processing

wreckin.parts uses artificial intelligence to assist with features such as parts identification, VIN decoding, and inventory categorization. All AI processing runs locally on our infrastructure. Your data is never sent to external AI services or third-party machine learning providers. Your inventory data, photographs, and business information remain within our network at all times during AI processing.

4. Cookies and Tracking

We use cookies and similar technologies to operate the Service. For full details, see our Cookie Policy.

• Session Cookies: Required for authentication and maintaining your logged-in session (powered by NextAuth).
• Preference Storage:Theme preferences and UI settings are stored in your browser's localStorage.
• Analytics: We use Google Analytics (measurement ID: G-3Y4EK5NJTL) to collect anonymized usage data. Google Analytics uses cookies to track sessions and page views.

5. Third-Party Services

We share data with the following third-party services as necessary to operate the platform:

• Stripe:Payment processing. Stripe receives your billing information (name, email, payment method) to process subscription payments. Stripe's privacy policy applies to data they process. We do not store your full credit card number on our servers.
• Google Analytics: Anonymized usage analytics. Google receives anonymized browsing data (pages visited, session duration, device type). No personally identifiable information is intentionally shared with Google Analytics.

We do not sell, rent, or trade your personal information to any third party.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Active Accounts: All data is retained while your subscription is active.
• After Cancellation: Your data is available for export for a minimum of 30 days after account cancellation. After this period, data may be permanently deleted.
• Billing Records: Transaction and billing records may be retained for up to 7 years as required by tax and accounting regulations.
• Analytics Data: Anonymized, aggregate analytics data may be retained indefinitely.

7. Your Rights

You have the following rights regarding your data:

• Access: You can request a copy of all personal data we hold about you.
• Correction: You can update or correct your information through your account settings or by contacting us.
• Deletion: You can request deletion of your account and associated data. We will process deletion requests within 30 days, subject to legal retention requirements.
• Export: You can export your inventory data, vehicle records, and other content at any time through the platform.
• Opt-Out: You can opt out of non-essential cookies and analytics tracking. See our Cookie Policy for instructions.

To exercise any of these rights, contact us at justin@reiners.io.

8. CCPA / GDPR

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• The right to access, rectify, or erase your personal data.
• The right to restrict or object to processing.
• The right to data portability.
• The right to lodge a complaint with a supervisory authority.

Our legal basis for processing your data is the performance of our contract with you (providing the Service) and our legitimate business interests (improving the platform and ensuring security).

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encrypted storage, secure authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: