Legal

Privacy policy

Last updated October 19, 2026. This policy is posted to satisfy the California Online Privacy Protection Act (CalOPPA) and because you should know what we keep.

What we collect

• Email address, to log you in (we email a one-time code; no passwords), to relay inquiries, to send audit verdicts and receipts, and, if you opt in, the newsletter.
• Listing details you enter: vehicle, VIN, lease figures, region, description and photos (including a photo of your odometer and, optionally, contract pages). Live listings are public except your email and contract photos.
• Audit details you enter: the figures from your dealer quote and your ZIP code for tax.
• Inquiry messages between takers and sellers, so we can relay them and handle abuse.
• Payment records: order amount, status and Stripe's reference IDs. Card numbers never touch our servers.
• Technical data: IP address and request logs kept briefly by Cloudflare for security and rate limiting. We do not run third-party advertising or tracking pixels.

Who processes it

• Cloudflare hosts the site, database and photos (United States).
• Stripe processes payments and holds card data under its own policy.
• Resend sends our email (login codes, relays, verdicts, newsletter).
• Google Fonts serves the typefaces; your browser requests them from Google.

We don't sell personal information and don't share it with anyone else except when the law requires.

How long we keep it

Listings and photos: until 12 months after the listing expires or completes, then deleted. Audits: 12 months after the verdict. Orders: 7 years for tax records. Newsletter: until you unsubscribe. Log data: about 30 days.

Your choices

Email us to see, correct or delete what we hold about you; we'll respond within 30 days. Every newsletter has an unsubscribe link. We honor browser Do Not Track by not tracking anyone in the first place.

Children

The site is for adults who can sign a lease. We don't knowingly collect information from anyone under 18.

Contact

Hashim Jacobs, LottyBotty, Inc. · privacy@takeoverboard.hashimjacobs.workers.dev