Legal

Privacy Policy

Effective Date: June 17, 2026  ·  Version 1.0

Plain English summary: We collect only what's needed to deliver your deal summary. We never sell personal information. Dealerships are responsible for obtaining customer consent before we send any messages. You have the right to access, correct, or delete your data.

Contents
  1. Who We Are
  2. Information We Collect
  3. How We Use Information
  4. How We Share Information
  5. GLBA — Financial Institution Notice
  6. California Privacy Rights (CCPA)
  7. Virginia Consumer Data Protection Act
  8. Data Retention
  9. Security
  10. Children's Privacy
  11. Changes to This Policy
  12. Contact Us

1. Who We Are

MyDealRecap LLC ("MyDealRecap," "we," "us," or "our") is a Virginia limited liability company operating the MyDealRecap platform. Our platform enables automotive dealerships to deliver post-sale deal summaries to vehicle purchasers. Our website is located at mydealrecap.com.

For privacy questions, contact us at privacy@mydealrecap.com.

2. Information We Collect

From Dealership Clients (Platform Users)

From Vehicle Purchasers (Consumers)

Automatically Collected

3. How We Use Information

We use information we collect to:

We do not sell consumer personal information. We do not use consumer personal information for advertising or cross-dealership marketing. Each dealership's customer data is isolated and inaccessible to other dealerships.

4. How We Share Information

We share information only in the following circumstances:

We do not share personal information with third parties for their own marketing purposes.

5. GLBA — Financial Institution Notice

Automotive dealerships that arrange consumer financing are "financial institutions" under the Gramm-Leach-Bliley Act (GLBA), 15 U.S.C. § 6801. As a service provider to such institutions, MyDealRecap is subject to the FTC Safeguards Rule (16 CFR Part 314) and processes Nonpublic Personal Information (NPI) on behalf of dealership clients as a "service provider" under GLBA.

MyDealRecap maintains a Written Information Security Program (WISP) governing data security practices, available to dealership clients upon request. Dealerships retain their own GLBA obligations including providing annual privacy notices to their customers.

6. California Privacy Rights (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to KnowRequest what personal information we have collected, used, disclosed, or sold about you in the past 12 months.
Right to DeleteRequest deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
Right to CorrectRequest correction of inaccurate personal information we maintain about you.
Right to Opt OutOpt out of the sale or sharing of your personal information. Note: we do not sell or share personal information for cross-context behavioral advertising.
Right to PortabilityReceive your personal information in a portable, machine-readable format.
Non-DiscriminationWe will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, email privacy@mydealrecap.com. We will respond within 45 days. Deletion requests will be fulfilled within 30 days, subject to legal retention requirements. We may require verification of your identity before processing your request.

7. Virginia Consumer Data Protection Act (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of its processing for targeted advertising or sale. To submit a request, email privacy@mydealrecap.com. We will respond within 45 days, with the option to extend by an additional 45 days with notice. If we deny your request, you may appeal by replying to our denial notice.

8. Data Retention

We retain consumer deal data for the duration of the applicable dealership's active subscription and for two (2) years following account termination, for audit, dispute resolution, and legal compliance purposes. Dealerships may request earlier deletion as provided in their Data Processing Agreement. Audit logs are retained for a minimum of two years and are not subject to deletion requests.

You may request deletion of your personal information at any time by emailing privacy@mydealrecap.com. We will fulfill deletion requests within 30 days, subject to any legal retention obligations.

9. Security

We implement industry-standard security measures to protect your information, including:

No system is completely secure. If you believe your information has been compromised or wish to report a security issue, contact us immediately at security@mydealrecap.com.

10. Children's Privacy

The MyDealRecap platform is not directed to children under the age of 13 and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, contact us at privacy@mydealrecap.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify dealership clients of material changes by email at least 30 days before the changes take effect. The updated Policy will be posted at this URL with a revised effective date. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

For privacy questions, data requests, or security concerns: