Privacy Policy

Vroomly is committed to protecting your privacy and securing your data. This policy explains how we collect, protect, and use your information.

Information We Collect

We collect only the information necessary to connect you with automotive service providers:

• Account information: email address and password (encrypted)
• Contact details: name and phone number
• Vehicle information: make, model, and year
• Service requests and communication history
• Technical data: IP address, browser type, and device information for security purposes

We do not store payment card details. All payment processing is handled by secure third-party payment processors.

How We Protect Data

Security is our top priority. We implement multiple layers of protection:

• Passwords are encrypted using industry-standard hashing algorithms
• All data transmissions are secured with HTTPS encryption
• Account access requires email verification
• Weak and compromised passwords are automatically blocked
• Database access is restricted and monitored
• Regular security audits and updates are performed
• Sensitive data is stored with row-level security policies

Your account information is accessible only to you and authorized Vroomly administrators. Service providers receive only the information necessary to fulfill your request.

Fraud, Abuse, and Bot Protection

We actively monitor and protect against fraudulent activity:

• Rate limiting prevents brute force attacks and spam submissions
• Automated bot detection protects forms and account creation
• Suspicious activity is logged and flagged for review
• Failed login attempts are tracked and may trigger temporary account lockouts
• All sensitive actions are audited and monitored

These protections help ensure a safe experience for all users and prevent misuse of the platform.

Data Retention and Deletion

We retain your data only as long as necessary to provide our services. You can request deletion of your account and associated data at any time through your account settings.

Upon deletion, your personal information is permanently removed within 30 days. Some anonymized data may be retained for security audit purposes.

Third-Party Sharing

We do not sell your personal information. Your data is shared only when necessary:

• With service providers you choose to contact through our platform
• With secure infrastructure providers who help us operate the platform
• When required by law or to protect against fraud and abuse

All third-party partners are required to maintain strict confidentiality and security standards.

Children's Privacy

Vroomly is not intended for users under 18 years of age. We do not knowingly collect information from children.