The short version: We collect only what's needed to deliver your deal summary. We never sell personal information. Dealerships are responsible for obtaining customer consent before we send any messages. You have the right to access, correct, or delete your data.
1. Who We Are
MyDealRecap LLC ("MyDealRecap," "we," "us," or "our") is a Virginia limited liability company operating the MyDealRecap platform. Our platform enables automotive dealerships to deliver post-sale deal summaries to vehicle purchasers. Our website is located at mydealrecap.com.
For privacy questions, contact us at privacy@mydealrecap.com.
2. Information We Collect
From Dealership Clients (Platform Users)
- Business name, address, and contact information
- Names, email addresses, and login credentials of authorized employees (F&I managers, GMs)
- Payment information, processed securely through Stripe — we do not store full card numbers or banking details
- Usage data such as deals created, sent, and opened
From Vehicle Purchasers (Consumers)
- Name, phone number, and email address
- Vehicle information: VIN, year, make, model, trim, and mileage at purchase
- Deal structure: purchase date, sale price, financing terms, F&I products purchased
- F&I product details: product names, contract numbers, provider information, and coverage terms
- Any mileage updates you enter voluntarily on your deal summary page
Automatically Collected
- IP addresses and device/browser type when accessing the platform or deal summary pages
- Page interaction data: when a deal summary was first opened, how many times it was viewed
- Server and access logs retained for security monitoring and troubleshooting
3. How We Use Information
We use information we collect to:
- Generate and deliver personalized deal summary pages to vehicle purchasers
- Provide dealership clients with analytics on deal delivery and customer engagement
- Operate, maintain, monitor, and improve the platform
- Send transactional communications (deal summary delivery) as directed by dealership clients
- Respond to support requests and account inquiries
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations under the GLBA, FTC Safeguards Rule, TCPA, and applicable state law
We do not sell consumer personal information. We do not use consumer personal information for advertising or cross-dealership marketing. Each dealership's customer data is isolated and inaccessible to other dealerships.
4. How We Share Information
We share information only in the following circumstances:
- Service Providers (Subprocessors): We share data with vendors necessary to operate the platform. See our Subprocessor List for the current list. All subprocessors are contractually required to protect data and use it only to provide services to us.
- The Dealership That Submitted Your Data: Vehicle purchasers' information is visible to the dealership that created their deal summary.
- Legal Requirements: We may disclose information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of MyDealRecap, our clients, or the public.
- Business Transfers: If MyDealRecap is involved in a merger, acquisition, or asset sale, personal information may be transferred. We will provide notice before your information is subject to a different privacy policy.
We do not share personal information with third parties for their own marketing purposes.
5. GLBA — Financial Institution Notice
Automotive dealerships that arrange consumer financing are "financial institutions" under the Gramm-Leach-Bliley Act (GLBA), 15 U.S.C. § 6801. As a service provider to such institutions, MyDealRecap is subject to the FTC Safeguards Rule (16 CFR Part 314) and processes Nonpublic Personal Information (NPI) on behalf of dealership clients as a "service provider" under GLBA.
MyDealRecap maintains a Written Information Security Program (WISP) governing data security practices, available to dealership clients upon request. Dealerships retain their own GLBA obligations including providing annual privacy notices to their customers.
6. California Privacy Rights (CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:
Right to KnowRequest what personal information we have collected, used, disclosed, or sold about you in the past 12 months.
Right to DeleteRequest deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
Right to CorrectRequest correction of inaccurate personal information we maintain about you.
Right to Opt OutOpt out of the sale or sharing of your personal information. Note: we do not sell or share personal information for cross-context behavioral advertising.
Right to PortabilityReceive your personal information in a portable, machine-readable format.
Non-DiscriminationWe will not discriminate against you for exercising any of your privacy rights.
To exercise these rights, email privacy@mydealrecap.com. We will respond within 45 days. Deletion requests will be fulfilled within 30 days, subject to legal retention requirements. We may require verification of your identity before processing your request.
7. Virginia Consumer Data Protection Act (VCDPA)
Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of its processing for targeted advertising or sale. To submit a request, email privacy@mydealrecap.com. We will respond within 45 days, with the option to extend by an additional 45 days with notice. If we deny your request, you may appeal by replying to our denial notice.
8. Data Retention
We retain consumer deal data for the duration of the applicable dealership's active subscription and for two (2) years following account termination, for audit, dispute resolution, and legal compliance purposes. Dealerships may request earlier deletion as provided in their Data Processing Agreement. Audit logs are retained for a minimum of two years and are not subject to deletion requests.
You may request deletion of your personal information at any time by emailing privacy@mydealrecap.com. We will fulfill deletion requests within 30 days, subject to any legal retention obligations.
9. Security
We implement industry-standard security measures to protect your information, including:
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption for data at rest
- Row-level data isolation — one dealership cannot access another's customer data, enforced at the database layer
- Multi-factor authentication — required for management (General Manager and administrator) accounts and available to all platform users
- Automatic session timeouts after inactivity (30 minutes for F&I managers, 60 minutes for General Managers)
- Immutable, append-only audit logging of data modifications
- Regular internal security reviews
No system is completely secure. If you believe your information has been compromised or wish to report a security issue, contact us immediately at security@mydealrecap.com.
10. Children's Privacy
The MyDealRecap platform is not directed to children under the age of 13 and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, contact us at privacy@mydealrecap.com and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify dealership clients of material changes by email at least 30 days before the changes take effect. The updated Policy will be posted at this URL with a revised effective date. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.
For privacy questions, data requests, or security concerns:
13. Text Messaging (SMS) Terms
If you provide your mobile number and give consent at the time of your vehicle purchase, MyDealRecap sends you one text message on behalf of your dealership containing a private link to your deal summary. You can also request messages yourself: texting RECAP to our number returns your own deal-summary link, and requesting a code at mydealrecap.com/find sends a one-time verification code to the number on your deal. Those replies are sent only in response to your own request. Finally, if you turn on service reminders on your own recap page, we send you an occasional informational text when a routine service is coming due, with a link to book.
- Consent: The deal-summary message is sent only after your dealership obtains your express consent at the point of sale. Messages you request yourself (RECAP replies and one-time codes) are consented by the request itself. Service reminders are sent only if you opt in yourself, on your recap page, where the full disclosure is shown; you can turn them off there or by replying STOP. Consent to receive text messages is not a condition of any purchase. We do not send marketing or promotional text messages.
- Optional vehicle updates: On your recap page you can separately turn on informational updates about your own vehicle — service reminders, safety-recall notices (sent only when the U.S. NHTSA database lists a recall that may affect your vehicle, as a prompt to confirm with your dealer or nhtsa.gov — never an "all clear"), and warranty/coverage-expiry alerts. Each is its own toggle with its own consent, off by default; turn any back off anytime.
- Message frequency: One message per vehicle purchase, plus single replies to requests you initiate. Any vehicle updates you opt into are occasional — at most one of each type per ~25 days, and only when there's something to tell you. There are no marketing messages.
- Opt out: You can cancel at any time by replying STOP to any message. After you reply STOP, we will send a confirmation and you will receive no further text messages.
- Help: Reply HELP for help, or contact support@mydealrecap.com.
- Rates: Message and data rates may apply, depending on your mobile carrier and plan.
- Carriers: Mobile carriers are not liable for delayed or undelivered messages.
- Your mobile information: Mobile phone numbers and consent are used solely to deliver these messages. We do not sell your mobile number, and we do not share it with third parties for their own marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding the vendors that deliver messages on our behalf (see our Subprocessor List), solely to enable message delivery. See Sections 3 and 4 above for how we handle and share information.