1. Scope
This Privacy Policy explains how DMAP Labs, Inc. ("Vibecar," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, web application, AI-agent deal room, and related services (the "Service"). This Privacy Policy is a notice of our privacy practices. Your use of the Service is also subject to our Terms of Use.
2. Personal Information We Collect
Depending on how you use the Service, we may collect the following categories of personal information:
- Identifiers, such as your name, email address, and mobile phone number. Your phone number is verified by text message and used for sign-in, account security, and Service-related communications.
- Vehicle shopping information, such as the vehicles you are interested in, including make, model, model year or range, trim, new or used status, specific cars you add by VIN or listing link, your ZIP code, and free-text preferences you choose to share.
- Shopping preferences, such as your buying timeline, whether you are open to dealer financing, and, only if you choose to provide it, an optional self-reported credit range. If you have a trade-in, we may collect its year, make, model, mileage, condition, and related details you provide.
- Communications and deal-room activity, such as messages your AI agent exchanges with dealers on your behalf, instructions you give the AI agent, offer details, status updates, and your activity in your deal room.
- Dealer and business-contact information, if you communicate with us as a dealer representative or other business contact, such as your name, business email address, business phone number, dealership or company, role, and communications with us or the AI agent.
- Technical information, such as IP address, device and browser information, pages or features used, log data, cookies necessary to keep you signed in, and analytics or advertising identifiers where permitted.
- Inferences and preferences, such as vehicle, timing, financing, and trade-in preferences inferred from your activity or communications so the AI agent can operate the Service and seek relevant offers.
We do not request Social Security numbers, driver license numbers, financial-account numbers, employment information, or precise geolocation. The optional credit range is a coarse, self-reported band and is not a credit check or credit application. Please do not include sensitive information, such as health information, government identifiers, financial account numbers, passwords, or precise location information, in free-text preferences or messages unless we specifically ask for it.
If you provide sensitive information that we did not request, we may delete it or avoid using it except as needed to provide the Service, protect the Service, comply with law, or respond to your request.
3. How We Obtain Personal Information
- Directly from you, including when you create an account, complete onboarding, add vehicles, provide preferences, communicate with the AI agent, or use the Service.
- From your AI-agent activity and dealer communications, including dealer responses, offer details, availability information, and messages generated or received through the Service.
- From affiliated companies, referral partners, and marketing partners, including contact information such as email addresses, where they represent that they have the right to provide the information to us and permit us to use it for the purposes described in this Policy.
- Automatically, through cookies, log files, analytics tools, and similar technologies when you use the Service.
- From service providers that help us operate, secure, analyze, or improve the Service.
4. How We Use Personal Information
- Provide the Service, including operating the AI agent that searches for vehicles, contacts dealers on your behalf, seeks pricing, availability, and offers, and factors your preferences, timeline, financing openness, and trade-in information into the negotiation process.
- Create, manage, authenticate, and secure your account.
- Communicate with you about your activity, requests, offers, dealer responses, deal status, security, and Service updates.
- Provide customer support, troubleshoot issues, maintain records, and improve Service quality.
- Use analytics to understand how the Service is used, measure performance, debug issues, and improve features.
- Advertise and market Vibecar services, including by creating advertising audiences and measuring advertising performance, subject to your privacy choices and applicable law.
- Maintain the security, integrity, availability, and proper functioning of the Service; prevent fraud, abuse, and unauthorized access; and enforce our terms.
- Comply with law, legal process, and regulatory obligations; establish, exercise, or defend legal claims; and protect rights, safety, and property.
5. AI-Agent and Model-Provider Processing
The Service uses AI-agent functionality to interpret your preferences, communicate with dealers, summarize responses, and support vehicle-shopping workflows. To operate these features, we may process your prompts, preferences, deal-room activity, and dealer communications through AI infrastructure and model providers that act as service providers or processors for us under contractual restrictions.
We do not permit AI infrastructure or model providers to use personal information from the Service to train their general-purpose models.
6. How We Disclose Personal Information
We may disclose personal information as described below:
- Dealers. Your AI agent contacts dealers on your behalf. When it does, a dealer may receive the vehicle you are interested in, your ZIP code so the dealer can estimate taxes and registration, your general buying timeline, whether you have a trade-in, and trade-in details you ask us to use. Dealers do not receive your name, email address, or real phone number in the lead sent to the dealer. Dealers communicate with your AI agent through the agent's own email address.
- Financing-related preferences. If you tell us you are open to dealer financing, the AI agent may use that information to seek relevant offers. We do not share your self-reported credit range with dealers unless you expressly direct us to do so. The optional credit range is not a credit application, credit check, or request for credit approval.
- Proxy phone connection. If and when you reach a deal, we may share a proxy phone number, not your real phone number, with that dealer so you can connect directly.
- Service providers and processors. We disclose personal information to vendors that host, secure, support, analyze, and operate the Service; send email and text messages; provide analytics; support customer service; provide AI infrastructure and model processing; and perform other services for us. These providers are subject to contractual restrictions on how they may use personal information.
- Advertising platforms and measurement partners. As described in Section 7, we may disclose hashed email addresses, online identifiers, or similar information to third-party advertising platforms to advertise Vibecar services and measure advertising performance. These disclosures may be considered a "sale," "sharing," or targeted advertising under some U.S. state privacy laws.
- Affiliates and corporate transactions. We may disclose personal information to affiliates under common ownership or control, and in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction.
- Legal and safety purposes. We may disclose personal information when required by law or legal process, to enforce our terms, to protect the Service, or to protect rights, safety, and property.
- With your direction or consent. We may disclose personal information when you direct us to do so or otherwise consent.
We do not sell personal information for money in the way "sale" is traditionally understood.
7. Advertising, Sale/Share, Targeted Advertising, and Your Choices
We may use personal information, including hashed email addresses, online identifiers, cookies, pixels, or similar technologies, to build advertising audiences, reach you and others with relevant information about Vibecar services, and measure ads on third-party advertising platforms, such as social-media and search platforms. Under some U.S. state privacy laws, using personal information for cross-context behavioral advertising or targeted advertising may be considered a "sale," "share," or processing for targeted advertising, even though no money changes hands. To the extent it is, we treat it accordingly and honor applicable opt-out rights.
You may opt out of sale, sharing, and targeted advertising by using our "Your Privacy Choices" page. An email-based opt-out helps us suppress hashed-email advertising audiences and marketing communications associated with that email address.
8. Cookies and Similar Technologies
We use cookies and similar technologies as described below:
| Type | Purpose | Examples | Choices |
|---|---|---|---|
| Necessary | Operate the Service, keep you signed in, maintain security, and remember essential settings. | Session cookies, authentication tokens, security logs. | Necessary cookies are required for core Service functionality. You can control cookies through your browser, but blocking them may affect the Service. |
| Analytics | Understand how the Service is used, measure performance, debug issues, and improve features. | Page events, browser/device information, usage logs, analytics identifiers. | Use browser controls and, where available, our privacy choices or cookie controls. |
| Advertising and measurement, if used | Create advertising audiences, measure ads, and avoid showing irrelevant ads. | Hashed email addresses, ad pixels, cookies, online identifiers. | Use "Your Privacy Choices" and platform-level ad settings. |
9. Additional U.S. State Privacy Notice
The table below summarizes the categories of personal information we collect, sources, purposes, categories of recipients, and sale/share or targeted-advertising treatment. We use the term "sale/share" in this table to include disclosures that may be considered a sale, sharing, or targeted advertising under applicable U.S. state privacy laws.
| Category | Examples | Sources | Purposes | Recipients / Sale-Share |
|---|---|---|---|---|
| Identifiers | Name, email address, mobile phone number, account identifiers. | You; affiliates; referral and marketing partners; service providers. | Account creation, authentication, communications, service delivery, advertising, security, legal compliance. | Service providers; AI infrastructure providers; messaging vendors; advertising platforms for sale/share where applicable; affiliates. |
| Commercial or shopping information | Vehicles of interest, VINs or listing links, ZIP code, preferences, buying timeline, financing openness, trade-in details. | You; Service activity; dealer communications. | Operate AI agent, seek dealer offers, support deal room, improve Service, maintain records. | Dealers as described in Section 6; service providers; AI infrastructure providers. Not sold for money; may be used for targeted advertising only as described. |
| Communications and deal-room activity | Messages to/from AI agent and dealers, instructions, offer details, status updates. | You; AI agent; dealers. | Operate AI agent, communicate with dealers, provide support, improve and secure the Service, legal compliance. | Dealers where necessary for the requested workflow; service providers; AI infrastructure providers; legal/safety recipients. |
| Internet or electronic network activity | IP address, device/browser information, log data, pages or features used, cookies, analytics identifiers. | Automatically through the Service. | Security, authentication, analytics, debugging, Service improvement, advertising and measurement. | Service providers; analytics providers; advertising platforms for sale/share where applicable. |
| Approximate location | ZIP code you provide and general location inferred from IP address. | You; automatically from IP address. | Estimate taxes/registration, match relevant dealers, security, analytics. | Dealers receive ZIP code as described in Section 6; service providers. We do not collect precise geolocation. |
| Inferences and preferences | Preferences inferred from vehicles, timeline, financing openness, trade-in information, and deal-room activity. | You; Service activity. | Personalize the Service, guide the AI agent, seek relevant offers, improve workflows. | Service providers; AI infrastructure providers; dealers only as needed for the requested workflow. |
| Sensitive personal information | We do not request Social Security numbers, driver license numbers, financial-account numbers, precise geolocation, health information, or similar sensitive information. Optional self-reported credit range may be treated as sensitive in some jurisdictions. | You, only if you choose to provide it or provide unsolicited sensitive information. | Provide the requested Service, protect the Service, comply with law, or respond to your request. We do not use sensitive personal information to infer characteristics except as permitted by law. | Service providers as needed to provide the Service; dealers only if you expressly direct us to disclose a credit range or other sensitive information. |
10. Your Privacy Rights and Choices
Depending on where you live, you may have the right to:
- Know or access the personal information we hold about you;
- Receive a portable copy of personal information you provided or that is otherwise covered by applicable law;
- Delete personal information, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of sale, sharing, or targeted advertising;
- Limit certain uses or disclosures of sensitive personal information, where applicable;
- Appeal our decision if we deny your privacy request, where applicable; and
- Not be discriminated against for exercising privacy rights.
To opt out of sale, sharing, or targeted advertising, use our "Your Privacy Choices" page. To exercise access, deletion, correction, portability, appeal, or other rights, email privacy@dmaplabs.com. Please include the right you want to exercise and the email address or phone number associated with your account, if applicable.
We may need to verify your identity before fulfilling certain requests. We will not require you to create an account to opt out of sale, sharing, or targeted advertising. These rights are available regardless of your state of residence; we do not gate the opt-out on California residency.
Authorized agents may submit requests by emailing privacy@dmaplabs.com. We may require proof of authorization and may ask the consumer to verify their identity directly, where permitted by law.
If we deny your request and applicable law gives you a right to appeal, you may appeal by replying to our decision email or by emailing privacy@dmaplabs.com with "Privacy Appeal" in the subject line.
11. Marketing Communications, Email, and Text Messages
We may send you Service-related communications, such as account verification, security messages, deal-room updates, and responses to your requests. We may also send marketing communications where permitted by law.
You can unsubscribe from marketing emails by using the unsubscribe link in the email or by using our "Your Privacy Choices" page. Opting out of marketing emails does not stop Service-related, transactional, security, or account messages.
12. Retention
We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and honor your privacy choices. We determine retention periods based on the nature of the information, the purpose for which it is processed, legal requirements, operational needs, and risk.
13. Security
We take reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Children and Minors
The Service is not directed to children under 18, and we do not knowingly collect personal information from them. We do not knowingly sell or share personal information of consumers under 16, and we do not knowingly process personal information of minors for targeted advertising. If you believe a child or minor has provided personal information through the Service, please contact us at privacy@dmaplabs.com.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Where required by law, we will provide additional notice or seek consent.
16. Contact Us
DMAP Labs, Inc.
Email: privacy@dmaplabs.com