Privacy Policy

Drive (idriveus.com, "we," "us," or "our") is a marketplace that connects car shoppers with dealers and brokers listing lease and finance deals. This policy explains what information we collect from customers and dealers/brokers who use the site, how we use it, and the choices you have.

This policy isn't a substitute for legal advice, and we're not a law firm — if you have specific legal questions about your own rights, talk to an attorney.

Account information.If you create a customer account, we collect your first and last name, zip code, email address, and phone number (required), and optionally your address, current vehicle, and photos of your driver's license and insurance or AAA card. If you create a dealer/broker account, we collect your business name, contact name, phone number, city/state, and email address.

Signing in with Google.If you choose "Continue with Google," Google shares your name, email address, and profile picture with us (the basic "openid," "email," and "profile" permissions). We use your name and email only to create and sign you in to your Driveaccount and to email you about it; we don't use the profile picture. We don't get access to your Gmail, contacts, files, or anything else in your Google account, we don't sell or share this information for advertising, and we don't use it to train AI models. You can remove Drive's access at any time from your Google Account's security settings (Third-party apps & services).

Activity on the site.If you have an account, we keep the deals you save, the searches you save for alerts, and any reviews you write about a dealer or broker. Reviews are public: they appear on that dealer or broker's profile with your first name.

Location.If you use "Closest to my location," your browser asks permission to share your approximate location. It's used only in your browser to sort deals by state — we don't store it or send it to our servers.

Listing content. Dealers and brokers submit vehicle listing details — pricing, terms, photos, and descriptions — either directly or by uploading a spreadsheet, pasting text, or uploading a screenshot of their inventory.

Messages. Shoppers and dealers/brokers talk to each other through Drive's messaging. We store every message (who sent it, when, and what it says) so there's a record of each conversation, and we may review conversations to resolve disputes, prevent fraud or abuse, and keep the marketplace working well. Only the two people in a conversation and Drive can read it (at Drive, that means a small number of team members with admin access). If you turn on message emails, we also email you new messages. If you email us or use our contact form, we receive whatever you send.

Text messages.If you turn on "Text me new messages," we use the mobile number you confirm only to text you when you get a new message on Drive and to receive your replies, which we add to the conversation. We send texts through our provider, Twilio. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes; text messaging opt-in data and consent are never shared with anyone. Reply STOP to stop texts at any time. More about Drivetext alerts: idriveus.com/text-alerts.

Automatically collected information.Like most websites, our hosting provider logs standard technical information (IP address, browser type, pages visited) for security and reliability. We use a small number of essential cookies to keep you signed in — we don't use advertising or cross-site tracking cookies, and we don't run third-party analytics on the site today. If we ever add advertising or measurement tools (for example, an ad platform's tracking pixel), we'll update this policy first and give you a way to opt out of any "sale" or "sharing" of your information before they're used.

• To create and manage your account and show you your saved information
• To display dealer/broker listings to shoppers and connect the two directly
• To read and structure spreadsheets, pasted text, and screenshots that dealers/ brokers submit, using an AI service, so their inventory can be turned into listings for their review
• To look up a stock photo of a vehicle by year/make/model when a dealer/broker hasn't uploaded their own photo
• To communicate with you about your account or a listing, and to send emails you ask for — deals similar to one you're viewing, or alerts for new deals that match a search you saved (every alert email has a link to stop them)
• To keep the site secure and prevent fraud or abuse
• To improve and maintain the site

Driver's license and insurance/AAA card photos, if you choose to upload them, are "sensitive personal information" under California law. We use them only to help verify who you are; they're stored privately, aren't shared with dealers/brokers or shown publicly, and aren't used to infer anything about you. Your account password is handled by our authentication provider and we never see it.

We don't sell your personal information. We share it only:

• With service providerswho host our infrastructure and help the site function — currently Supabase (database, authentication, and file storage), Vercel (hosting), Resend (sending the site's emails), Twilio (text message alerts and sign-up codes, only if you turn texts on), Google (the optional "Continue with Google" sign-in), Anthropic (AI processing of submitted spreadsheets/text/screenshots into listing data), and CarsXE (vehicle stock photo lookups by year/make/model — no personal information is sent to CarsXE)
• With the other person in a conversation— when you message about a listing, the other side sees your messages and your display name (a shopper's first name and last initial, or a dealer/broker's business name). Phone numbers and email addresses aren't shown to them unless you share them in a message. A dealer/broker's business name and city/state are shown publicly on their listings and profile.
• If required by law — to comply with legal process, or to protect the rights, property, or safety of Drive, our users, or others
• In a business transfer — if Drive is ever involved in a merger, acquisition, or sale of assets, your information may transfer as part of that

California law asks us to describe what we collect in its terms. In the last 12 months we have collected: identifiers (name, email, phone, account ID); customer records (zip code, address, current vehicle, if you give them); commercial information (deals you save or ask about, and your messages); internet activity (basic server logs); sensitive personal information(driver's license and insurance/AAA card photos if you upload them, and your account login); and, for dealers/brokers, professional information(business name, role, dealership). We get this information from you, from Google if you sign in with it, and from dealers/brokers' own listings. We use it only for the purposes above and share it only as described above. We have not sold or shared personal information for cross-context behavioral advertising, and we don't knowingly collect information from anyone under 18.

We keep account information for as long as your account is active. Messages are kept as long as either person in the conversation still has an account, so the record stays complete for both sides, and we may keep information longer when needed to resolve a dispute, prevent fraud, or meet a legal obligation. Server logs are kept for a short time by our hosting provider. You can ask us to delete your account and associated data at any time by emailing us (see below); messages you sent may remain visible to the other person in that conversation.

We rely on our infrastructure providers' security practices (encryption in transit, access controls limiting data to your own account) to protect your information, but no system is perfectly secure, and we can't guarantee absolute security.

If you're a California resident, state privacy law (the CCPA/CPRA) gives you the right to know what personal information we've collected about you, request a copy of it, ask us to correct or delete it, and opt out of the sale or sharing of it for cross-context advertising. We don't sell personal information or share it for cross-context behavioral advertising, so there's nothing to opt out of on that front today. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any future sale or sharing. California residents may also ask what personal information we've disclosed to others for their direct marketing purposes (we don't do this).

To exercise any of these rights, or if you're in another state with similar privacy protections, email rob@idriveus.com or use our contact form. We'll confirm your identity (usually by replying to the email on your account) before acting on a request, respond within 45 days, and won't discriminate against you for exercising these rights. You can use an authorized agent to make a request for you.

Driveis intended for adults 18 and older. We don't knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we'll delete it.

We may update this policy as the site changes. If we make material changes, we'll update the date at the top of this page.

Questions about this policy or your information? Email rob@idriveus.com.