Privacy Policy

• Account and contact data. Name, email address, password (stored hashed), optional profile image, and Google sign-in details if you choose Google to sign in. Guest sessions use an anonymous account record.
• Conversation content. The questions you ask, vehicle details you provide (such as VIN, year, make, model, listing information, and deal terms), our responses, Decision Files, saved cases, and feedback you submit.
• Uploads. Images (JPEG or PNG) and PDF documents you attach, up to 4 MB each. Before an image leaves your device, our app strips embedded metadata , including EXIF data and photo location (GPS) information, from both JPEG and PNG files. Uploads are stored in private, access-controlled storage under opaque file names scoped to your account; they are not publicly shared.
• Transaction data. Purchases are processed by Stripe. Your full payment-card number is entered on Stripe's systems and never touches our servers. We receive transaction status, the product purchased, checkout identifiers, and billing contact details from Stripe.
• Device and log data. IP address, browser user agent, session tokens, security and rate-limit events, error reports, and performance measurements.
• Membership and product-use data. Subscription status, renewal periods, allowance use, model token and estimated cost totals, policy acceptance, and first-party funnel events such as viewing an offer or starting checkout. Funnel events do not contain your chat text or uploaded documents.
• Marketing preferences. Whether and when you separately asked to receive product news and offers, plus delivery and unsubscribe status.

• Authenticate you and maintain guest or registered sessions.
• Answer your automotive questions, analyze the vehicles and documents you share, and build your Decision File.
• Process payments, deliver purchased passes and requested email, enforce usage limits, and provide customer support.
• Measure our own signup and purchase funnel, and send product news or offers only when you have separately opted in. You can unsubscribe at any time.
• Detect and prevent fraud and abuse, and diagnose reliability and security problems.
• Comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use your content to build advertising profiles.

Ask Bobby J is an AI product. Your conversation content and permitted context are sent to our AI model providers to generate responses, and to our voice provider to generate spoken audio of responses. Under our agreements, our AI service providers do not use your conversations to train their models, under each provider's published API terms.

We share personal information only with service providers that process it on our behalf, and only what each needs to perform its function. We do not sell personal information and do not share it for targeted advertising. Categories of providers:

• Hosting, file storage, and content delivery (application traffic, uploads, logs).
• Managed database and cache providers (account, conversation, and usage records).
• AI inference and voice-generation providers (conversation content, response text).
• Payment processing (Stripe, checkout and transaction data).
• Transactional email delivery (email address, name, message content).
• Marketing email delivery when you have opted in (email address, preference status, and message content).
• Bot- and abuse-prevention services (browser, device, and network signals).
• Error monitoring (scrubbed error reports, see Section 7).
• Licensed market data providers and public government sources such as NHTSA (vehicle identifiers you provide, to retrieve vehicle and market information).

The categories of providers, and the data each touches, are described on our Service Providers and Data Sources page. We may also disclose information when required by law, to protect our rights or users' safety, or in connection with a business transfer.

• Abandoned uploads. Files that are uploaded but never attached to a saved case are automatically deleted by a scheduled job after 48 hours.
• Account data. We keep account information, saved cases, and Decision Files while your account is active. When you delete your account or covered data, we delete or de-identify it across our database, file storage, cache, and sessions, subject to narrow legal exceptions (for example, payment records we must keep for tax and accounting).
• Security logs. Kept for a limited period for fraud prevention and diagnostics.

We use essential cookies for authentication and a small number of preference settings. We also record limited first-party funnel events to understand whether our own pages and checkout work. These events exclude chat text and uploaded documents. We do not use advertising or cross-site tracking cookies. See the Cookie Notice for the full inventory.

Information is encrypted in transit. Uploads live in private, authenticated storage with opaque object names and content validation. Payments are confirmed server-side using Stripe webhook signature verification. Error reports sent to our monitoring service pass through a scrubber that redacts email addresses, phone numbers, ZIP codes, and credentials before anything leaves our systems. See our Security page for more detail. No system can promise absolute security.

Ask Bobby J is intended for users in the United States who are 18 or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact support@askbobbyj.com and we will delete it.

Depending on where you live, you may have rights to know, access, correct, delete, and receive a portable copy of your personal information, and to opt out of sale, sharing for targeted advertising, or certain profiling. We do not sell personal information or share it for targeted advertising. California residents have additional rights under the CCPA/CPRA, including the right to non-discrimination and to use an authorized agent. Full details, including how to exercise rights and appeal a decision, are on our United States Privacy Rights page. To exercise any right, contact support@askbobbyj.com.

We will post any material change to this policy before it takes effect and update the version date above. Changes that require your consent will not be applied retroactively without it. Questions or requests:support@askbobbyj.com.