Privacy Policy

Overview

CarBOS Pro (“we,” “us,” or “our”) is a mobile and web application that generates legally binding bills of sale for private vehicle transactions. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

Information We Collect

Account Information: When you register, we collect your full name, email address, phone number, and mailing address. This information appears on your generated bills of sale as the seller of record.

Transaction Data: We store vehicle information (VIN, year, make, model, mileage), sale price, odometer units, keys transferred, and transaction status.

Buyer Information: Buyer name, email, phone number, and driver’s license number are collected during sale creation. This data is encrypted using AES-256-GCM and stored only within the encrypted PDF document — it is never stored in plaintext in our database.

Electronic Signatures: Signature image data captured on-screen is encrypted and stored exclusively within the encrypted PDF document. Signature images are never stored as standalone database records.

Payment Information: We do not store your payment card details. Payments are processed by Apple (App Store), Google (Play Store), or Stripe, each of which maintains their own privacy and security standards. We store only a transaction reference ID and platform identifier to confirm payment.

Usage Data: We may collect anonymized usage analytics to improve the app. This does not include document content or personally identifiable information.

How We Use Your Information

We use the information we collect to:

• Generate and store your bill of sale documents
• Verify your identity as the seller of record
• Process and confirm in-app purchases
• Provide customer support
• Comply with applicable law

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Encryption & Security

CarBOS Pro uses AES-256-GCM encryption to protect sensitive document data at rest. Your generated PDF documents — including buyer information and signature images — are encrypted before storage and decrypted only when accessed by you. All data is transmitted over HTTPS/TLS.

For information about our use of encryption and U.S. export compliance, see our Encryption & Export Compliance notice.

Third-Party Services

CarBOS Pro integrates with the following third-party services:

• Supabase — database and authentication hosting
• NHTSA (National Highway Traffic Safety Administration) — VIN vehicle lookup (no personal data transmitted)
• Apple App Store / StoreKit — iOS in-app purchases
• Google Play Billing — Android in-app purchases
• Stripe — web payment processing

Each service operates under its own privacy policy. We encourage you to review them.

Data Retention

Your account data and transaction records are retained as long as your account is active. You may request deletion of your account and associated data by contacting us. Note that completed bills of sale may need to be retained for legal compliance purposes related to vehicle title transfers.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at the address below.

Children’s Privacy

CarBOS Pro is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or requests, contact us at: carbillofsalepro@gmail.com