Service Providers and Data Sources

We use a small set of vetted service providers, each under contract terms that limit its use of your information to providing its service to us. The categories, and the data each one touches:

• Hosting, infrastructure, and site protection. Application traffic, private file uploads, service logs, and automated-abuse signals.
• Managed database and short-lived operational state. Accounts, sessions, conversations, cases, Decision Files, and purchase entitlements.
• AI processing and voice generation. Prompts, the permitted conversation context, and generated responses; response text for spoken audio.
• Payment processing. Checkout, transaction, and customer contact details, with fraud signals. Card numbers never touch our servers.
• Transactional and requested email delivery. Email address, name, and message content.
• Error monitoring and diagnostics. Error reports with personal information redacted before send.
• Optional account sign-in. Name, email, and profile image, only if you choose an optional third-party sign-in.
• Operator reporting spreadsheet. Name, email, and intake fields used to operate the buying desk.
• Vehicle and market data sources. VIN and query parameters; licensed vehicle and listing responses, plus public government vehicle-safety data.

Our licensed market data source receives live, user-driven queries only. Raw responses remain server-side and transient unless the signed account agreement expressly permits a defined saved projection. Licensed data is not used for generalized model training, embeddings, evaluation corpora, data resale, bulk export, or reconstruction of an independent dataset.

A new provider does not enter production until its purpose, data categories, contract, security review, retention, and deletion path are approved. We will update this page before a material change in how providers process customer information.