PRIVACY POLICY

Account information — when you sign in with Google we receive your name, email, profile photo, and Google account ID. We do not receive your Google password.

Listing content — vehicle details, VIN, photos, price, description, location, and any information you enter when creating or editing a listing.

Transaction information — offers you make or receive, escrow payments processed through Stripe, subscription payments, invoices, and payout details for sellers. Stripe collects card information directly; we never see your full card number.

Communications — messages between buyers and sellers, inspection requests and reports, and support correspondence.

Device and usage data — IP address, browser type, device model, operating system, referring URL, pages viewed, session timestamps, and general location derived from IP address.

Cookies and local storage — we use a first-party session token stored in your browser's local storage or in a secure cookie to keep you signed in. See §8.

• Create and secure your account, and prevent fraud, abuse, and unauthorized access.
• Display listings, offers, messages, seller profiles, and inspection reports.
• Process payments, escrow, subscriptions, featured-listing boosts, and inspector payouts through Stripe.
• Verify vehicles against the U.S. 25-year import rule and other compliance requirements.
• Send you transactional emails and push notifications about your listings, offers, messages, and account.
• Improve the Service, debug errors, and analyze aggregate usage.
• Comply with legal obligations and respond to lawful requests.

We share personal information only with:

• Other users, when it is inherent to how the marketplace works — sellers see the buyer name attached to an offer; buyers see the seller name and public profile on a listing.
• Service providers acting on our behalf — Stripe (payments, Connect, escrow), Google (OAuth), our cloud hosting provider, our transactional email provider, and analytics tooling.
• Law enforcement, courts, and regulators when we have a good-faith belief that disclosure is required by law or necessary to protect the rights, property, or safety of ImportHub, our users, or the public.
• Successors — if ImportHub is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction.

We do not sell your personal information.

All payments and payouts on ImportHub are processed by Stripe. When you make a purchase, place an escrow deposit, subscribe to a dealer plan, or receive a payout as a seller, Stripe collects and processes your payment information subject to its own Privacy Policy and Terms. We retain only the transaction metadata (amount, status, timestamps, last-four of the card, Stripe IDs) needed to run the marketplace and keep our books.

We keep your information for as long as your account is active or as needed to provide the Service. After account deletion we retain limited data for legitimate business purposes (fraud prevention, financial records, tax and legal compliance) — typically no longer than seven (7) years for financial records and shorter for other data.

Depending on where you live, you may have the following rights over your personal information:

• Access — request a copy of what we hold about you.
• Correction — ask us to fix inaccurate or incomplete information.
• Deletion — ask us to delete your account and personal data (subject to §5 retention).
• Portability — receive your data in a portable format.
• Opt-out of marketing communications — every marketing email has an unsubscribe link.
• For California residents (CCPA/CPRA) — the right to know, delete, correct, and opt out of the sale or sharing of personal information (we do not sell).
• For EU/UK residents (GDPR/UK GDPR) — the rights above plus the right to restrict or object to processing and to lodge a complaint with your local supervisory authority.

To exercise these rights, email us at importhub352@gmail.com. We may need to verify your identity before we can act on your request.

We use industry-standard measures to protect your information — HTTPS everywhere, hashed session tokens, principle-of-least-privilege access controls, and encrypted databases. No system is 100% secure, and we cannot guarantee absolute security. If we discover a data breach affecting your information we will notify you as required by law.

ImportHub uses first-party local storage on the web and secure keychain storage on mobile to keep you signed in. We do not use third-party advertising cookies. Analytics cookies, if any, are used only in an aggregated, non-identifying form. You can clear this storage from your browser or reinstall the mobile app to reset it, though doing so will sign you out.

ImportHub is not directed at children under 18 and we do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

ImportHub is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may be different from those in your country. By using the Service you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be announced in the app and by email at least 14 days before they take effect. The "last updated" date above will always reflect the current version.

ImportHub LLC
Email: importhub352@gmail.com

Mailing address: 6191 Hemlock Rd, Ocala, FL 34472