The short version:AutoBear is operated by Data Fabrica SA LLC, a Virginia limited liability company (“AutoBear,” “we,” “us”). We collect the minimum needed to run the service — your email when you buy a report or create an account, the vehicles you research, and payment confirmation from Stripe. We never see your card number, and we do not sell your personal information.
1. Information We Collect
- Account information: email address, used to send you one-time sign-in codes, and a password only if you choose to set one (managed by our authentication provider, Supabase; passwords are hashed — we never see them in plain text).
- Research activity: VINs and listing URLs you search, and the optional inputs you add to a report (ZIP code or city/state, asking price, mileage, trade-in value). Saved reports are linked to your account.
- Feedback you choose to send: a rating, an optional comment, and the VIN and page it relates to. Not linked to your account.
- Payment information: handled entirely by Stripe. We receive a payment confirmation and the last four digits of your card — never the full card number.
- Purchase records: the email address you enter at checkout, which we use to send your receipt and to contact you about that purchase, and a record that you accepted our Terms of Service (the version and the time you accepted). These are stored with your payment record at Stripe.
- Chat messages: messages you send to Mama Bear, processed by our AI provider (Anthropic) to generate responses.
- Usage analytics:which pages you visit and which steps you take (for example: searching a VIN, opening checkout, viewing a report, downloading a PDF), the referring link that brought you here, and your browser and device type — tied to an anonymous visitor identifier, or to your account if you are signed in. Processed by PostHog. Never includes card details or chat messages.
- Error reports: when something breaks, the error, the page it happened on, your browser type, and IP address, so we can fix it. Processed by Sentry.
- Technical data: IP address, browser type, and request logs, used for security, rate limiting, and debugging.
2. How We Use Information
- To generate and deliver reports, and save them to your history if you have an account.
- To process payments and verify report entitlement.
- To operate, secure, and improve the Service (including abuse prevention and rate limiting).
- To respond to support requests.
- To send transactional emails (e.g., purchase receipts and account confirmation). We will not send marketing email without your consent.
3. How We Share Information
We share data only with the service providers required to operate AutoBear:
- Stripe — payment processing.
- Supabase — account authentication and session management.
- Anthropic — AI chat processing (your chat messages and, if a report is open, its vehicle data are sent to generate responses).
- Vehicle data providers — we send only the vehicle search parameters (VIN, make/model, ZIP) needed to fetch listings and government data; never your name or contact information.
- PostHog — product analytics (page views, usage events, an anonymous visitor identifier, and your account identifier if signed in). No card details, no chat messages.
- Sentry — error monitoring (error details, the page URL, browser type, IP address).
- Resend — delivery of transactional email (your email address and the message content: sign-in codes, purchase receipts, password resets, refund confirmations).
- Hosting and infrastructure providers (Vercel, Railway) — to run the website and API; they see request logs, including IP addresses, as any host does.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of AutoBear or others. We do not sell or rent personal information to anyone.
4. Cookies
We use essential cookies to keep you signed in (authentication session cookies), and first-party analytics cookies and browser storage set by PostHog to recognise a return visit and measure how the site is used. We do not use third-party advertising cookies and do not share cookie data with advertisers. You can block analytics cookies in your browser settings without affecting sign-in.
5. Data Retention and Deletion
Saved reports are retained while your account is active. Vehicle lookups are cached (without any personal identifiers) to speed up repeat searches. You can request deletion of your account and associated personal data at any time by emailing support@getautobear.com — we will complete verified requests within 30 days, except where retention is required by law (e.g., payment records).
6. Your Rights
Depending on where you live (including California and the EU/UK), you may have the right to access, correct, delete, or export your personal information, and to object to certain processing. Exercise any of these rights by emailing support@getautobear.com. We will not discriminate against you for exercising them.
7. Security
We use industry-standard measures — encrypted connections (HTTPS), hashed passwords, and access controls — to protect your information. No system is perfectly secure; notify us immediately if you suspect unauthorized access to your account.
8. Children
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to This Policy
We will post any changes on this page with an updated date. Material changes will be highlighted on the site or sent to account holders by email.
10. Contact
Privacy questions or requests: support@getautobear.com