Privacy Policy

Information you give us

• Account details. Your name, email address, phone number and password when you create an account or accept an invitation. We store your password only as a one-way hash, never in readable form.
• Buying preferences. The vehicles you are looking for, your budget, timing, trade-in plans and other answers you give on our intake form, plus the auction vehicles you save and the vehicle reports you ask for.
• Vehicle inquiries. When you ask about a car for sale, book a test drive or ask about financing, we collect your name, phone, email and your message.
• Purchase and deal paperwork. When you buy a vehicle we collect what Utah law and the sale require: your full name and address, driver license or ID number and state, co-buyer details, trade-in details, lienholder name and address, odometer statements, and the price, taxes and fees of the sale. For a test drive we record your driver license state, the last 4 digits of the license number and its expiration date, plus your insurance carrier.
• Payment details. When you pay our $100 concierge fee or a deposit, our payment processors collect your card or bank details. We never see or store your full card number. We keep the amount, date, status and a payment reference. For a wire or ACH transfer, we keep the transfer details your bank provides.
• Financing applications. If you ask us to arrange financing, we collect what the lender needs, such as your income, employment, housing and Social Security number, and pass it to the lender. See section 6.
• Referral program. If you join as a partner or affiliate, we keep your referral code, the referrals credited to you, the rewards you earn and the information needed to pay you, including tax information when the law requires it.
• Messages and signatures. The texts, emails and notes you send us, photos you share, and the records created when you sign a document electronically (see section 8).

Information collected automatically

• Device and usage data. Your IP address, browser type, pages you visit and the time of your visit, as recorded by our hosting provider and our own servers. For security, our sign-in, rate-limit and activity records store a scrambled (salted hash) form of your IP address rather than the address itself.
• Referral link activity. When you open a partner's referral link, we record that the link was used and which code it carried so the partner can be credited.
• Cookies and browser storage. See section 9.

Information from others

• Partners who refer you, through the referral code or link you used.
• Lenders, such as the credit decision and terms on a financing application you asked us to submit.
• Auctions and vehicle data sources, such as auction listings, condition reports, and vehicle history and valuation data about the vehicles you look at or trade in.
• Government lists, such as the U.S. Treasury sanctions (OFAC) list we must check buyers against.

• To create and run your account and keep it secure.
• To provide our concierge service: search auctions for vehicles that fit you, prepare vehicle reports, bid on the vehicles you approve, and arrange inspection, transport and pickup.
• To answer your questions about vehicles for sale and to schedule test drives.
• To complete a sale: contracts, title, registration, temporary permits, odometer statements and taxes.
• To arrange financing with a lender when you ask us to.
• To take payments, issue refunds and keep our books.
• To run the referral program, credit referrals and pay rewards.
• To prepare vehicle reports with help from artificial intelligence (AI). We send listing data and your stated preferences to our AI provider to draft a summary. AI output can contain mistakes, so reports are estimates. We do not use AI to make credit decisions.
• To contact you by phone, text or email about your request, your account and your purchase.
• To send you marketing emails or texts, only where the law allows and, for texts, only with your consent. You can opt out at any time.
• To prevent fraud, enforce our terms, protect our customers and staff, and fix problems.
• To meet our legal duties, such as dealer records, tax reporting, sanctions screening and court orders.
• To improve our website and services, using information about how they are used.

We are a U.S. business and mainly serve people in Utah and nearby states. Where a law asks us to name a legal basis for using your information, we rely on these:

• Contract: to provide the account, service or vehicle you asked for.
• Legal obligation: to keep dealer, title, tax and financing records and to screen against sanctions lists.
• Legitimate interests: to keep our systems secure, prevent fraud and improve our service, in ways you would reasonably expect.
• Consent: for marketing texts and anything else where we ask for your permission. You can withdraw consent at any time.

We do not sell your personal information. We do not share it with other companies for their own marketing, and we do not use it for targeted advertising across other websites. We share it only as described below.

Service providers

These companies work for us under contract. They may use your information only to provide their service to us.

• Website hosting, database and file storage: Cloudflare (our website, database and photo and document storage).
• Email: Resend (emails our website sends) and Google Workspace (our business email).
• Text messages: Twilio.
• Payments: Stripe and Square (card and payment links), and the banks that process wires and ACH transfers.
• AI vehicle reports: Anthropic (Claude), which processes vehicle listing data and your stated preferences to draft reports.
• Accounting: QuickBooks (Intuit).
• Browser notifications for our staff: the push services built into staff members' browsers (for example Google, Apple or Mozilla). Customers do not receive these.

Partners in your purchase

• Lenders, when you ask us to arrange financing. Today this includes Credit Acceptance Corporation and may include other lenders. Each lender has its own privacy policy, which governs what it does with your information.
• Auctions, inspectors and transport companies, to the extent needed to buy, inspect and deliver a vehicle for you.
• Warranty and service contract providers, if you choose to buy one.
• The partner who referred you sees counts, such as clicks and sign-ups credited to their code. They do not see your contact details, financing information or deal documents.

Government and legal

• The Utah Division of Motor Vehicles, the Utah State Tax Commission and other states' agencies, for title, registration, permits and sales tax.
• The IRS, for example a Form 8300 report when we receive more than $10,000 in cash.
• Courts, law enforcement and regulators, when the law requires it or to protect the rights and safety of our customers, our staff or the public.

Business transfers

If we sell, merge or transfer all or part of our business, customer information may be transferred to the new owner, who must keep honoring this policy for the information it receives.

With your consent

We share information in other ways only when you ask us to or agree to it.

When we arrange financing for you, the federal Gramm-Leach-Bliley Act (GLBA) treats us as a financial institution. For that information, we follow the GLBA and its rules, including the FTC Privacy Rule and the FTC Safeguards Rule. Our GLBA notice explains what we do with your nonpublic personal information and is available at lifetimedealeraccess.com/privacy-notice. We give it to you when you become a financing customer.

In short: we share financing information only for everyday business purposes, such as processing your application and your purchase, and as the law requires. We do not share it with other companies for their marketing.

If you give us your mobile number and agree to be contacted, we may text you about your request, your account, a vehicle, an appointment or your purchase. We send marketing texts only if you have agreed to receive them.

• Message frequency varies with your request.
• Message and data rates may apply.
• Reply STOP to any text to opt out. We will send one message confirming you are unsubscribed.
• Reply HELP for help, or call us at (801) 885-1668.
• Consent to texts is not a condition of buying anything from us.
• Carriers are not responsible for delayed or undelivered messages.

We do not share mobile numbers or SMS consent with any third parties for their marketing purposes. Text messaging opt-in data and consent are excluded from every other kind of sharing in this policy. The only companies that handle them are the service providers that deliver our texts for us.

We keep a record of your consent and of any opt-out.

When you sign a document with us electronically, we record what is needed to show that you signed it and that it has not changed: your name as you typed it, your email address, the time you opened, agreed to sign and signed the document, your IP address, your browser and device type, and a digital fingerprint (a hash) of the document. We keep these records with the signed document for as long as we keep the deal file.

You can always ask us for a paper copy of anything you signed electronically.

We use a small number of cookies and browser storage items, all set by us:

• Sign-in cookie (la_session): keeps you signed in. It is required for accounts to work.
• Language cookie (las_lang): remembers whether you chose English or Spanish.
• Staff view cookie (las_team): used only for our team members.
• Browser storage: remembers which page to return you to after you sign in, and keeps a referral visit from being counted twice.

We do not use advertising cookies or third-party tracking pixels. Our hosting provider, Cloudflare, may set cookies needed for security and to block abusive traffic. If you follow a link to another service, such as our scheduling calendar, that service's own cookies and privacy policy apply. You can block or delete cookies in your browser settings, but you will not be able to stay signed in without the sign-in cookie.

• Deal records and odometer statements: at least 5 years from the sale, as dealer and federal odometer rules require.
• Tax and accounting records: as long as tax law requires.
• Financing information: as long as the lender, the GLBA and record-keeping rules require.
• Accounts, leads and messages: while your account is active or we are working with you, and then generally up to 2 years after our last contact, unless the law requires longer.
• Text consent and opt-out records: as long as we may need to show we honored them.

When we no longer need information, we delete it or anonymize it so it no longer identifies you.

We keep a written information security program under the FTC Safeguards Rule, led by a named qualified individual. It includes:

• Encryption in transit. Our website is served only over HTTPS.
• Passwords stored only as salted, one-way hashes.
• Sign-in limits that lock out repeated wrong passwords and slow down automated attempts.
• Access controls, so each staff member sees only the customer information their job needs.
• A log of staff actions on customer records.
• Collecting only what we need, such as only the last 4 digits of a license for a test drive.
• Secret keys kept only in our hosting provider's protected settings, never in our code.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you and the authorities as the law requires.

• Access and correction. Ask us for a copy of the personal information we hold about you, or ask us to fix anything that is wrong. You can update much of your account information yourself.
• Deletion. Ask us to delete your information. We will delete what we are not required to keep. For example, we must keep deal records, odometer statements and tax records for the periods in section 10.
• Marketing email. Use the unsubscribe link in any marketing email, or contact us.
• Texts. Reply STOP to any text.
• Do Not Track. Our website does not track you across other websites, so browser Do Not Track and Global Privacy Control signals do not change how it works. We already do not sell or share your information for targeted advertising.

To make a request, email or call us using the details in section 16. We will confirm your identity before we act on a request, and we will answer within 45 days. We will not treat you differently for using these rights.

State privacy laws

The Utah Consumer Privacy Act applies only to businesses that meet its size thresholds: at least $25 million in annual revenue, plus processing the data of at least 100,000 Utah consumers a year, or 25,000 consumers while earning more than half of revenue from selling data. Like similar laws in other states, it also does not cover financial information that the GLBA governs. Whether or not a state law applies to us, we honor the requests above for everyone. California residents and residents of other states with privacy laws can contact us with any request or question about their rights.

Our website and services are for adults. They are not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We operate in the United States and our services are meant for people in the United States. Your information is stored and processed in the United States, and some of our service providers may process it in other countries under their own safeguards.

We may update this policy. When we do, we will change the "Last updated" date at the top. If a change materially affects how we use information we already have, we will tell you by email or on our website before it takes effect.

Questions, requests or complaints about privacy go to:

You can also write to us at kevin.lifetimeauto@gmail.com with the subject "Privacy request".