Privacy policy

OwnerLot collects the data needed to run a private-party car marketplace in the United States and Canada. This policy explains what we store, who can see it, and how you delete your account.

What we collect

Account: name, email, phone, city, password hash, and verification status. Listings: VIN, specs, photos, price, and the city you pin. Messages you send to other owners, including chat photos. Reviews after a sale. Saved cars and saved searches on your account. Technical logs such as IP address and user-agent for rate limits and abuse prevention. A random device token (not an advertising ID) on the website and in the iOS app, so we can limit multi-account abuse. Camera and photo-library access only when you add listing or chat photos. We use Cloudflare Turnstile on sign-in forms to block bots.

What other people see

Anyone can see live listings, including VIN and photos. Phone numbers are shown only after a buyer signs in. Email addresses are not published on listings. Chat stays between you and the other owner.

Chat photos

Photos sent in chat are stored so the other person can open them. They are deleted after 60 days, and we cap size so they do not fill the server. Do not send documents you are not willing to share with that owner.

Payments

OwnerLot Pro and optional listing extras are paid services. On iOS, Apple bills the Pro subscription through the App Store. On the website, Stripe processes Pro, equipment listing fees, and promotions. We store purchase status and a processor reference (an Apple transaction identifier or Stripe ids) so we can unlock Pro and keep tax records. We do not store full payment card numbers.

Processors

Hosting and DDoS protection run on Cloudflare. Transactional email is sent through Resend. Card payments on the website go through Stripe. In-app OwnerLot Pro on iOS is billed by Apple; we receive a transaction identifier to unlock Pro and do not see your card number. We do not sell your contact list.

Cookies and device storage

We use an HttpOnly session cookie to keep you signed in. Compare, guest favorites, and which chats you have opened stay in your browser storage. Language and appearance preferences are stored on this device. The iOS app stores a random device token in on-device storage for abuse prevention. That token is not the advertising identifier and is not used to track you across other companies’ apps or websites.

Tracking

We do not use your data to track you across other companies’ apps and websites. We do not collect the iOS advertising identifier (IDFA). We do not run third-party advertising or analytics SDKs in the iOS app. Cloudflare Turnstile is used only to block bots on sign-in.

Your rights and account deletion

You can delete your account in the iOS app (Menu → Delete account) or on the website under Your account. You do not have to email us. Deletion removes your name, email, phone, and live listings, and signs you out. We may keep VIN and photo fingerprints so the same car cannot be listed again, and payment records required for tax or fraud prevention. Deleting the account does not cancel an App Store subscription — cancel that in iPhone Settings → [your name] → Subscriptions. You can also email hello@ownerlotcars.com for a copy of your account data. These rights apply in the United States and Canada.

Contact

Privacy requests: hello@ownerlotcars.com