Privacy Policy

Welcome to GoodCar.com, provided by InfoPay ("we," "us," or "InfoPay"). InfoPay, together with its affiliates and subsidiaries, has created this Policy to apply to all users and clients of our website (https://goodcar.com/) and the associated products, services, data, information, and materials offered therein (collectively, the "Services").

This Privacy Policy ("Policy") applies to your use of the Services and is part of and supplements the GoodCar Terms of Service (the "Terms"), available here: https://goodcar.com/terms-of-service.

We may revise this Policy at any time and such revision shall be posted here and accessible via this link: https://goodcar.com/privacy-policy. Any revision and/or addition to this Policy shall become effective and binding on you when you continue to use the Services on or after the effective date of such revision and/or addition.

Depending on where you live, you may be entitled to certain individual rights with respect to some or all of your personal information. Please see the Notice of Privacy Rights for Residents of Certain U.S. States section of our Privacy Policy for more information related to privacy rights that may be applicable to you.

1. Information We Collect

When you use the Services, we may collect the following categories of personal information about you, which are described in more detail below. All of the information listed below is hereinafter referred to as "Information."

Categories of Information We Collect

2. Usage of Cookies and Other Network Technologies

We collect the above Information directly and through the use of third parties. We collect this Information by using certain technologies, such as cookies, web beacons, and other technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

• 2.1. Cookies

  Cookies are small digital files that are transferred to your computer or smartphone's hard drive when you visit a website or click on a URL. Most web browsers automatically accept cookies. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.

• 2.2. Flash Cookies

  We may use local shared objects, also known as Flash cookies, to store your preferences such as volume control or display content based upon what you view on our site to personalize your visit. Third parties, with whom we partner to provide certain features or to display advertising based upon your browsing activity, use Flash cookies to collect and store information. Flash cookies are different from browser cookies because of the amount of, type of, and how data is stored. Cookie management tools provided by your browser will not remove Flash cookies.

• 2.3. Web Beacons

  Website pages may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). We also use these technical methods to analyze the traffic patterns, such as the frequency with which our users visit various parts of the Services. These technical methods may involve the transmission of Information either directly to us or to a third party authorized by us to collect Information on our behalf. Our Services may use retargeting pixels from Google, Facebook, and other ad networks. We may also use web beacons in HTML emails that we send to determine whether the recipients have opened those emails and/or clicked on links in those emails.

• 2.4. Analytics

  Analytics are tools we use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. Learn more about Google's Privacy Policy here: https://policies.google.com/privacy?hl=en-US. You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

• 2.5. Mobile Application Technologies

  If you access our website and Services through a mobile device, we may automatically collect Information about your device, your phone number, and your physical location.

Our use of online tracking technologies may be considered a "sale" or "sharing" under certain laws. To the extent that these online tracking technologies are deemed to be a "sale" or "sharing" under certain laws, you can opt out of these online tracking technologies by submitting a request here.

3. Do Not Track Notice

Many modern web browsers give you the option to send a "Do Not Track" signal to the websites you visit, indicating that you do not wish to be tracked. At this time, the Services do not specifically respond to "Do Not Track" signals.

We encourage you to review the privacy policies of our third-party advertisers and analytics service providers to learn about your choices about Information they collect from you. In addition, the Network Advertising Initiative offers information about some of the Internet advertising companies we may use, including how to opt out of interest-based advertising they deliver. For all the details, including how to turn on Do Not Track, visit www.donottrack.us.

4. Publicly Available Information

In addition to the Information collected by our Services that is detailed above, we also collect Publicly Available Information or Public Data from various databases, including government entities, commercial data providers, and websites to provide our products and services, including reports, via our website. Publicly Available Information includes information that is lawfully made available from federal, state, or local government records and information that we reasonably believe is made available to the general public, for example, by widely distributed media.

We acquire and aggregate this information about individuals, which will include users and non-users. We do not, however, combine any Information, including automatically collected usage and traffic information and transactional data, that we collect directly from users of the Website within our reports, products, and services that we provide.

To learn more about available options with respect to your Publicly Available Information, please visit the Your Privacy Choices form.

5. Information Sharing or Disclosure

We may share and/or disclose your personal Information as set forth in this Policy in the following circumstances:

• With Your Consent. We may share personal Information with your consent.
• For Legal and Administrative Reasons. We may disclose your personal Information without notice: (i) as may be required by law (e.g., in response to a court order or subpoena, or in response to a law enforcement agency request); (ii) to protect our organization or others from injury (e.g., when we believe that someone is causing, or is about to cause, injury to or interference with the rights or property of another); (iii) as necessary to comply with applicable law; (iv) to enforce or apply our Terms.
• Third-Party Service Providers. We may share your personal Information with persons or organizations with whom we contract to carry out internal and external site operations or as necessary to render the Services. Additionally, we may also exchange personal Information with third parties for fraud protection and credit risk reduction.
• Aggregate Sharing. We may share anonymous, deidentified aggregate Information with third parties, including affiliated and non-affiliated organizations such as advertisers.
• Business Transfers. Finally, we may transfer your personal Information to our successor-in-interest in the event of an acquisition, sale, merger, or bankruptcy. In the event we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, any personal Information we have on record will likely be among the assets transferred. The transferred personal Information will remain subject to the provisions of this Policy as it is updated from time to time.
• Information Shared with our Subsidiaries and Affiliates. We may share your personal Information with our subsidiaries and affiliates. If you do not want us to share your personal Information with our subsidiaries and affiliates, please email us at privacy@goodcar.com.

6. Links To Third-Party Sites

Occasionally, at our discretion, we may link to third-party sites or content on third-party sites not owned or controlled by us. We may do this for the convenience of you and other users of the Services, but we do not have control over the operation of these third-party websites. This Policy applies only to personal Information collected by our Services. Third-party sites have their own privacy practices and may or may not publish separate and independent Policies. We have no responsibility or liability for the privacy and security practices and activities of these third-party sites. Links to any of these third-party sites do not constitute or imply an endorsement or recommendation by us of the third-party site and/or content.

If you visit a third-party site that is linked to our Services, you should review the privacy policies posted on these third-party sites before providing any personal information.

7. Information Security and Storage

We use commercially reasonable measures to provide the Services. However, you acknowledge that no security safeguards or method of transmission over the Internet are completely secure, and although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we cannot guarantee the security of your personal Information transmitted to or from our Services. Any transmission of personal Information is at your own risk. We do not guarantee that your personal Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features. You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your personal Information.

The safety and security of your personal Information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

8. Data Retention

We store personal information for as long as reasonably required for its purpose or for any additional period required or allowed by applicable law (if any). The length of time for which we retain personal information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. In accordance with our routine record keeping, we may delete certain records that contain Information you have submitted to us. We are under no obligation to store such Information indefinitely and disclaim any liability arising out of, or related to, the destruction of such Information.

9. Your Choices

10. Accessing, Correcting, or Deleting Your Information

To the extent state laws provide users with certain data subject rights, those rights may be honored by GoodCar following proper authentication and verification. Please see the Contact Us section for more information.

11. Geographic Location of Data Storage and Processing

The Services collect personal Information and processes and stores that personal Information in databases located in the United States. If you are visiting the Services from a country outside the United States, you should be aware that you may transfer personal Information about yourself to the United States, and that the data protection laws of the United States may not be as comprehensive as those in your own country. By visiting the Services and submitting any personal Information you consent to the transfer of such personal Information to the United States.

12. Notice of Privacy Rights for Residents of Certain U.S. States

Residents of certain U.S. states may have rights and choices regarding their personal information. These rights may apply in the following states: California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia. To the extent any data protection law applies to our collection of your personal information, this supplemental section of our Privacy Policy outlines the individual rights you may be entitled to and how to exercise those rights.

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights.

• Right to Know and Access. You may have the right to request that we confirm whether we process your personal information, and to request information about our collection and use of your personal information, including whether we sell or share your personal information. You also have the right to request access to personal information we may process about you.
• Right to Data Portability. Where the processing is carried out by automated means, and subject to certain exceptions, you may have the right to request and obtain a copy of your personal information that you previously provided to us in a portable format. In addition, to the extent technically feasible, you may have the right to obtain your personal information in a readily usable format that allows you to transmit the personal information to another data controller without hindrance.
• Right to Request Correction of Inaccurate Personal Information. To the extent that we may maintain inaccurate personal information, you may have the right to request that we correct such inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
• Right to Request Deletion. You may have the right to request that we delete certain personal information or records provided by or obtained about you, with certain exceptions and limitations as allowed under law.
• Right to Opt Out of the Sale and Sharing of Personal Information. You may have the right to opt out of the processing of your personal information for the purpose of selling or sharing your personal information to third parties. We do not sell or share your personal information.
• Right to Opt-Out of the Use of Personal Information for Targeted Advertising and Profiling. You may have the right to opt out of the processing of your personal information for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not use your Information for targeted advertising or profiling purposes.
• Right to Limit Use and Disclosure of Sensitive Personal Information. You may have the right to request that we limit the ways we use and disclose your sensitive personal information to uses which are necessary for us to perform the Services, or deliver the goods reasonably expected by you, or as authorized by law.
• Right to Non-Discrimination. You may have a right to not be discriminated against in the Services or quality of Services you receive from us for exercising your rights. We will not discriminate against you for exercising any of your rights in this section including denying goods or Services, charging different prices or rates for goods or Services, or providing a different level of quality of goods and Services. However, we may offer a different price, rate, level, quality, or selection of goods or Services, including offering goods or Services for no fee, if you have exercised your right to opt-out.
• Right to Disclosure of Third-Parties. You may have a right to know the categories and names/addresses of third parties that we have disclosed your personal information to under this Policy.
• Right to Disclosure of Direct Marketers. You may have a right to know the categories and names/addresses of third parties that have received personal information for their direct marketing purposes upon simple request, and free of charge.
• Right to Appeal. You may have the right to appeal our denial of any request you make under this section. To exercise your right to appeal, please submit an appeal request via the information in the How to Contact Us section below or using the Your Privacy Choices form. Within the certain timeframe of receipt of your appeal, as proscribed by the applicable law we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, you may contact the Attorney General or another authority which we will help you identify.

To learn more about whether you are guaranteed certain rights, or to submit a request to exercise your rights, please contact us using any of the methods in the How to Contact Us section or using the Your Privacy Choices form.

Click here to see InfoPay, Inc's annual California Privacy Rights Request Metrics https://www.infopay.com/privacy#privacyMetrics.

13. Exercising Your Data Subject Rights

To the extent a state privacy law applies to your Information, you may exercise applicable rights by submitting request to us via the methods described below. For certain requests, may require that a consumer verify the request by:

• Providing sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or an authorized representative; and
• Describing your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• Visit: Your Privacy Choices

To help protect your privacy and maintain security, we may require you to provide certain information to verify your identity before granting you access to your personal information or complying with your request. Only you or your authorized agent may make a request related to your personal information. In addition, if you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us (as described above). You may only make certain consumer requests once or twice within a twelve (12) month period under applicable law. You may also make a verifiable consumer request on behalf of your minor child.

14. Children's Information

Contact us if you believe that we have mistakenly or unintentionally collected Information from a child under the age of thirteen (13).

15. Difficulty Accessing Our Privacy Policy

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

16. Contact Us

If you have any questions or concerns about this Policy or any GoodCar product or service offered by InfoPay, please click here to contact us, email us at privacy@goodcar.com, call us at (800) 764-0104, or write: