Privacy policy

This Privacy Policy describes how Dealjacket, LLC ("Dealjacket," "we," "us," or "our") collects, uses, and shares personal information when you use our digital checkout product, our marketing website, and any related services (collectively, the "Services").

Dealjacket is designed to handle sensitive transactional data — identity documents, signed contracts, and bank account information. We treat that responsibility seriously and have built our product around the principle of collecting only what we need to close a deal.

We collect the following categories of information:

• Account information. When a dealership creates a Dealjacket account, we collect business contact information, billing details, and the names and email addresses of authorized users.
• Buyer information. When a buyer completes a checkout, we collect government-issued identification, a selfie for liveness verification, billing and shipping addresses, bank account or routing numbers, and any other information needed to complete the transaction.
• Transaction information. Signed contracts, disclosures, deal amounts, vehicle identification numbers, and the full audit trail of who took what action when.
• Usage information. Pages viewed, features used, IP address, device type, browser, and approximate location derived from IP.
• Communications. Messages you send us through support channels, sales inquiries, or demo requests.

We use the information we collect to:

• Provide, operate, and improve the Services.
• Verify buyer identity and screen against required watchlists.
• Process payments and settle funds.
• Maintain audit trails and meet our legal recordkeeping obligations.
• Communicate with dealership users about their account, support requests, and product updates.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with applicable laws and respond to lawful requests.

We do not sell personal information. We share information only in the following circumstances:

• With the dealership. Buyer information collected during a checkout is shared with the dealership running that deal. The dealership is the data controller for that transaction; Dealjacket acts as the data processor.
• With service providers. Identity verification, payment, and infrastructure vendors that process data on our behalf under written contracts requiring confidentiality and appropriate security.
• For legal reasons. When required by law, court order, or to protect the rights, property, or safety of Dealjacket, our customers, or others.
• In a business transfer. If Dealjacket is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction.

We use bank-level encryption in transit and at rest. Sensitive fields such as Social Security numbers are tokenized and never stored in plain text on our servers. Access to production systems is restricted to authorized personnel and logged. We perform regular third-party security assessments.

No system is perfectly secure. If you believe your account or any data we hold has been compromised, contact us immediately at the address below.

We retain transactional records — signed contracts, identity verification logs, and the full deal jacket — for the period required by applicable law and the agreements we have with our dealership customers. In most cases this is seven years from the close of the deal.

Marketing-site contact information (for example, demo requests) is retained until you ask us to delete it or for as long as we have a legitimate business need.

Depending on where you live, you may have rights under applicable privacy laws (including the GDPR and U.S. state privacy laws like the CCPA) to access, correct, delete, or port your personal information, and to object to or restrict certain processing.

If you are a buyer, please direct rights requests to the dealership that ran your deal in the first instance. We will help them respond. If you are a dealership user or marketing-site visitor, contact us at the address below and we will respond within the timeframes required by applicable law.

Our marketing website uses cookies and similar technologies to run the site, remember your preferences, and measure how the site is performing. The Dealjacket product uses strictly necessary cookies only — required to keep you signed in, prevent fraud, and pass buyer state between steps of a deal.

You can manage your marketing-site cookie preferences on our Manage Cookies page.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of the page. If the changes are material, we will notify you by email or through the Services.

If you have questions about this policy or want to exercise any of your rights, contact us at info@dealjacket.io.