This Policy explains how Novalayer LLC (the “Company”, “ExactCarValue”, “we” or “us”), the controller responsible for personal data collected through the ExactCarValue vehicle history report service, handles your personal data. Registered address: 407 Lincoln Rd Ste 708, Miami Beach, FL 33139-3024, United States. Privacy contact: support@exactcarvalue.com.
Reports are about vehicles, not people. ExactCarValue is not a consumer reporting agency and reports are not “consumer reports” under the FCRA; they must not be used for credit, insurance, employment, housing or other FCRA-regulated purposes.
For visits located in the United States to our US service, we use measurement cookies by default without a consent banner. This default is not recorded as your acceptance. Google restricted data processing is enabled. Advertising measurement data is permitted by default, while personalised advertising remains disabled. Existing choices are respected. Use “Your privacy choices — Do Not Sell or Share” in the footer to disable optional cookies at any time; GPC blocks Google Ads. An opt-out remains effective while its record is available, including after the original six-month period. Elsewhere, or if location is unknown, optional cookies require acceptance. Google Consent Mode can still send limited cookieless signals when optional cookies are disabled; this is still data transmission. When advertising measurement is allowed, we use Google Ads enhanced conversions for confirmed VIN-report purchases. We normalize the purchase email and convert it to a SHA-256 hash on our server before sharing that hash with Google to match purchases to ads. We do not send the plain-text email, name, address or phone number through this feature. Hashing does not make the data anonymous. Rejecting advertising measurement or enabling GPC prevents this hash from being sent to Google. We do not use this feature for personalized advertising.
1. Data we process
- Account and contact: email, user identifiers, credentials managed by the authentication provider, language or market and communications.
- Searches and reports: the VIN(s) you enter, the vehicle data returned, the reports generated and your search history. A VIN identifies a vehicle, not a person.
- Purchase and subscription: customer, payment and subscription identifiers, amount, currency, status, dates, cancellation, receipts, tax data and anti-fraud signals. Payment is processed securely through Stripe.
- Usage and device: IP address, browser, device, pages, technical events, logs, errors, date and time, and cookies or similar technologies.
- Support: messages, verifications and the history needed to resolve requests.
2. How and why we use data
- to provide the Service, run VIN searches, generate and deliver reports, create and administer the account, manage the membership and handle requests (performance of the contract);
- to process payments, prevent fraud, protect accounts, diagnose errors, maintain security, defend claims and improve the Service (legitimate interests or legal obligations);
- to comply with accounting, tax, consumer and privacy obligations and valid requests (legal obligation);
- to send operational communications about the account, payment, security and Service changes; and
- to measure performance and advertising, or use non-essential technologies, where consent or another valid basis applies (see the Cookie Policy).
3. Providers and recipients
We share the minimum data necessary with providers that help us operate the Service: our vehicle-data provider (for example, oneautoapi) to obtain vehicle records for the VIN you search; hosting and infrastructure; authentication and databases (for example, Supabase); payments, subscriptions and fraud prevention (Stripe); analytics and advertising measurement (for example, Google) subject to your choices; and support and communications providers. Each provider receives only the data needed for its function and is bound by appropriate obligations. We do not sell your personal information. We may disclose information where reasonably necessary to comply with law, respond to competent authorities, protect rights and safety, investigate fraud or manage a corporate transaction.
4. U.S. state privacy rights and your choices
Depending on your state of residence, you may have the right to access, correct, delete or obtain a portable copy of your personal information, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We honor browser-based opt-out signals such as Global Privacy Control (GPC) where required, and we offer a “Your privacy choices — Do Not Sell or Share” control. To exercise rights, contact support@exactcarvalue.com; we may request information to verify your identity and will not discriminate against you for exercising your rights.
5. International processing
Novalayer LLC is established in the United States and some providers may process data in the United States or other countries. Where the GDPR, the UK GDPR or another law requires, we rely on adequacy decisions, standard contractual clauses or other recognized safeguards, with supplementary measures where appropriate. You may request information about the safeguards at support@exactcarvalue.com.
6. Retention and security
We keep data only as long as necessary for the purposes described and to meet legal obligations, after which it is deleted or anonymized. Account and search history are kept while the account is active and for the period afterward needed for closure, fraud prevention and claims; billing and transaction records are kept for the periods required by law. We apply reasonable technical and organizational measures (such as encryption in transit, access controls and specialized providers); no system is completely infallible, so protect your credentials.
7. Children
ExactCarValue is not directed to persons under 18, who must not create an account or purchase. If we learn that a minor’s data has been provided without valid authorization, we will take reasonable steps to delete it. Notify us at support@exactcarvalue.com.
8. Communications and changes
You may unsubscribe from marketing through the link in the message or by writing to support@exactcarvalue.com; you may still receive necessary communications about the account, security, payments, membership or legal changes. We may update this Policy to reflect legal, technical or Service changes, publishing the current version and, for material changes, providing the notice required by law.