Privacy Policy

Welcome to GoodCar.com, provided by InfoPay ("we," "us," or "InfoPay"). InfoPay, together with its affiliates and subsidiaries, has created this Policy to apply to all users and clients of our website (https://goodcar.com/) and the associated products, services, data, information, and materials offered therein (collectively, the "Services").

This Privacy Policy ("Policy") applies to your use of the Services and is part of and supplements the GoodCar Terms of Service (the "Terms"), available here: https://goodcar.com/terms-of-service.

PLEASE CAREFULLY READ THIS POLICY. YOUR USE OF THE SERVICES CONSTITUTES YOUR CONSENT TO THIS POLICY. DO NOT USE THE SERVICES IF YOU ARE UNWILLING OR UNABLE TO CONSENT TO THIS POLICY.

We may revise this Policy at any time and such revision shall be posted here and accessible via this link: https://goodcar.com/privacy-policy. Any revision and/or addition to this Policy shall become effective and binding on you when you continue to use the Services on or after the effective date of such revision and/or addition.

Depending on where you live, you may be entitled to certain individual rights with respect to some or all of your personal information. Please see the Notice of Privacy Rights for Residents of Certain U.S. States section of our Privacy Policy for more information related to privacy rights that may be applicable to you.

1. Information We Collect

When you use the Services, we may collect the following categories of personal information about you, which are described in more detail below. All of the information listed below is hereinafter referred to as "Information."

2. Usage of Cookies and Other Network Technologies

We collect the above Information directly and through the use of third parties. We collect this Information by using certain technologies, such as cookies, web beacons, and other technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

1. Cookies. Cookies are small digital files that are transferred to your computer or smartphone's hard drive when you visit a website or click on a URL. Most web browsers automatically accept cookies. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.
2. Flash Cookies. We may use local shared objects, also known as Flash cookies, to store your preferences such as volume control or display content based upon what you view on our site to personalize your visit. Third parties, with whom we partner to provide certain features or to display advertising based upon your browsing activity, use Flash cookies to collect and store information. Flash cookies are different from browser cookies because of the amount of, type of, and how data is stored. Cookie management tools provided by your browser will not remove Flash cookies.
3. Web Beacons. Website pages may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). We also use these technical methods to analyze the traffic patterns, such as the frequency with which our users visit various parts of the Services. These technical methods may involve the transmission of Information either directly to us or to a third party authorized by us to collect Information on our behalf. Our Services may use retargeting pixels from Google, Facebook, and other ad networks. We may also use web beacons in HTML emails that we send to determine whether the recipients have opened those emails and/or clicked on links in those emails.
4. Analytics. Analytics are tools we use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. Learn more about Google's Privacy Policy here: https://policies.google.com/privacy?hl=en-US. You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.
5. Mobile Application Technologies. If you access our website and Services through a mobile device, we may automatically collect Information about your device, your phone number, and your physical location.

Our use of online tracking technologies may be considered a "sale" or "sharing" under certain laws. To the extent that these online tracking technologies are deemed to be a "sale" or "sharing" under certain laws, you can opt out of these online tracking technologies by submitting a request here.

3. Do Not Track Notice

Many modern web browsers give you the option to send a "Do Not Track" signal to the websites you visit, indicating that you do not wish to be tracked. At this time, the Services do not specifically respond to "Do Not Track" signals.

We encourage you to review the privacy policies of our third-party advertisers and analytics service providers to learn about your choices about Information they collect from you. In addition, the Network Advertising Initiative offers information about some of the Internet advertising companies we may use, including how to opt out of interest-based advertising they deliver. For all the details, including how to turn on Do Not Track, visit www.donottrack.us.

4. Information Sharing or Disclosure

We may share and/or disclose your personal Information as set forth in this Policy in the following circumstances:

• With Your Consent. We may share personal Information with your consent.
• For Legal and Administrative Reasons. We may disclose your personal Information without notice: (i) as may be required by law (e.g., in response to a court order or subpoena, or in response to a law enforcement agency request); (ii) to protect our organization or others from injury (e.g., when we believe that someone is causing, or is about to cause, injury to or interference with the rights or property of another); (iii) as necessary to comply with applicable law; (iv) to enforce or apply our Terms.
• Third-Party Service Providers. We may share your personal Information with persons or organizations with whom we contract to carry out internal and external site operations or as necessary to render the Services. Additionally, we may also exchange personal Information with third parties for fraud protection and credit risk reduction.
• Aggregate Sharing. We may share anonymous, deidentified aggregate Information with third parties, including affiliated and non-affiliated organizations such as advertisers.
• Business Transfers. Finally, we may transfer your personal Information to our successor-in-interest in the event of an acquisition, sale, merger, or bankruptcy. In the event we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, any personal Information we have on record will likely be among the assets transferred. The transferred personal Information will remain subject to the provisions of this Policy as it is updated from time to time.
• Information Shared with our Subsidiaries and Affiliates. We may share your personal Information with our subsidiaries and affiliates. If you do not want us to share your personal Information with our subsidiaries and affiliates, please email us at privacy@goodcar.com.

5. Links To Third-Party Sites

Occasionally, at our discretion, we may link to third-party sites or content on third-party sites not owned or controlled by us. We may do this for the convenience of you and other users of the Services, but we do not have control over the operation of these third-party websites. This Policy applies only to personal Information collected by our Services. Third-party sites have their own privacy practices and may or may not publish separate and independent Policies. We have no responsibility or liability for the privacy and security practices and activities of these third-party sites. Links to any of these third-party sites do not constitute or imply an endorsement or recommendation by us of the third-party site and/or content.

If you visit a third-party site that is linked to our Services, you should review the privacy policies posted on these third-party sites before providing any personal information.

6. Information Security and Storage

We use commercially reasonable measures to provide the Services. However, you acknowledge that no security safeguards or method of transmission over the Internet are completely secure, and although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we cannot guarantee the security of your personal Information transmitted to or from our Services. Any transmission of personal Information is at your own risk. We do not guarantee that your personal Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features. You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your personal Information.

The safety and security of your personal Information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

If you believe that your personal Information has been accessed or acquired by an unauthorized person, you must promptly Contact Us so that we can quickly take necessary measures.

7. Data Retention

We store personal information for as long as reasonably required for its purpose or for any additional period required or allowed by applicable law (if any). The length of time for which we retain personal information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. In accordance with our routine record keeping, we may delete certain records that contain Information you have submitted to us. We are under no obligation to store such Information indefinitely and disclaim any liability arising out of, or related to, the destruction of such Information.

8. Your Choices

A. Notifications and Alerts

If you choose to make purchases on the Services or provide your email address to us, you agree that we may contact you by email as set forth herein, including by sending a welcome email including information about your purchase and account. We will also periodically send you alerts regarding updated results for searches you have previously conducted, and updated information about the subject of your search.

1. Notification Opt In

We may offer you the ability to opt in to receive marketing communications from us about new or upcoming products or services, and promotional materials and offers from us as well as from our subsidiaries, marketing partners, advertisers, and other third parties we may partner with. We may offer these notifications via email, via browser notifications, or both. You may opt out of receiving these notifications as described below.

2. Email Notification Opt Out

If you no longer wish to receive marketing or promotional communications from us, you may opt out of receiving them as instructed in each email. Be advised that you may not opt out of receiving administrative email notifications from us related to technical support or customer services requests, billing and subscription issues, search alerts, or changes to the Terms or Policy.

3. Browser Push Notification Opt Out

By using our Services, you agree that we may provide browser push notifications. We may use a third party to provide these push notifications, which the third party will receive certain information related to you, including your IP address, your device identifier, and your geolocation. As part of these push notifications, the third party may provide advertisements and/or information related to our Services to you on other related websites.

If you no longer wish to receive browser push notifications, you may opt out of receiving them by using the instructions at the following links:

• Google Chrome/Android Phone users: https://support.google.com/chrome/answer/3220216?co=GENIE.Platform%3DDesktop&hl=en.
• Microsoft Edge users: https://www.windowscentral.com/how-manage-web-notifications-edge-windows-10.
• Firefox users: https://sendpulse.com/knowledge-base/push-notifications/general/enable-disable-push-notifications-mozilla-firefox.
• Opera users: https://davescomputertips.com/how-to-manage-desktop-notifications-in-opera/.
• Safari users: https://support.apple.com/guide/safari/manage-website-notifications-sfri40734/mac.
• Additional information: https://www.makeuseof.com/tag/disable-notifications-chrome-firefox-safari/.

B. Opting Out of Direct Marketing

To exercise choices regarding the marketing information you receive, you may also review the following links:

• You may opt out of tracking and receiving tailored advertisements on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at https://youradchoices.com/appchoices.
• You may opt out of receiving permissible targeted advertisements by using the NAI Opt-out tool available at http://optout.networkadvertising.org/?c=1 or visiting About Ads at http://optout.aboutads.info.
• You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

9. Accessing, Correcting, or Deleting Your Information

To the extent state laws provide users with certain data subject rights, those rights may be honored by GoodCar following proper authentication and verification. Please see the Contact Us section for more information.

10. Geographic Location of Data Storage and Processing

The Services collect personal Information and processes and stores that personal Information in databases located in the United States. If you are visiting the Services from a country outside the United States, you should be aware that you may transfer personal Information about yourself to the United States, and that the data protection laws of the United States may not be as comprehensive as those in your own country. By visiting the Services and submitting any personal Information you consent to the transfer of such personal Information to the United States.

11. Notice of Privacy Rights for Residents of Certain U.S. States

Residents of certain U.S. states may have rights and choices regarding their personal information. To the extent any data protection law applies to our collection of your personal information, this supplemental section of our Privacy Policy outlines the individual rights you may be entitled to and how to exercise those rights.

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights.

• Right to Know and Access. You may have the right to request that we confirm whether we process your personal information, and to request information about our collection and use of your personal information, including whether we sell or share your personal information. You also have the right to request access to personal information we may process about you.
• Right to Data Portability. Where the processing is carried out by automated means, and subject to certain exceptions, you may have the right to request and obtain a copy of your personal information that you previously provided to us in a portable format. In addition, to the extent technically feasible, you may have the right to obtain your personal information in a readily usable format that allows you to transmit the personal information to another data controller without hindrance.
• Right to Request Correction of Inaccurate Personal Information. To the extent that we may maintain inaccurate personal information, you may have the right to request that we correct such inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
• Right to Request Deletion. You may have the right to request that we delete certain personal information or records provided by or obtained about you, with certain exceptions and limitations as allowed under law.
• Right to Opt Out of the Sale and Sharing of Personal Information. You may have the right to opt out of the processing of your personal information for the purpose of selling or sharing your personal information for cross-context behavioral advertising. We do not sell or share your personal information.
• Right to Opt-Out of the Use of Personal Information for Targeted Advertising and Profiling. You may have the right to opt out of the processing of your personal information for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not use your Information for targeted advertising or profiling purposes.
• Right to Limit Use and Disclosure of Sensitive Personal Information. You may have the right to request that we limit the ways we use and disclose your sensitive personal information to uses which are necessary for us to perform the Services, or deliver the goods reasonably expected by you, or as authorized by law.
• Right to Non-Discrimination. You may have a right to not be discriminated against in the Services or quality of Services you receive from us for exercising your rights. We will not discriminate against you for exercising any of your rights in this section including denying goods or Services, charging different prices or rates for goods or Services, or providing a different level of quality of goods and Services. However, we may offer a different price, rate, level, quality, or selection of goods or Services, including offering goods or Services for no fee, if you have exercised your right to opt-out.
• Right to Disclosure of Direct Marketers. You may have a right to know the categories and names/addresses of third parties that have received personal information for their direct marketing purposes upon simple request, and free of charge.
• Right to Appeal. You may have the right to appeal our denial of any request you make under this section. To exercise your right to appeal, please submit an appeal request via the information in the How to Contact Us section below or using the Your Privacy Choices form. Within the certain timeframe of receipt of your appeal, as proscribed by the applicable law we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, you may contact the Attorney General or another authority which we will help you identify.

To learn more about whether you are guaranteed certain rights, or to submit a request to exercise your rights, please contact us using any of the methods in the How to Contact Us section or using the Your Privacy Choices form.

12. Exercising Your Data Subject Rights

To exercise any of the rights described above, please submit a verifiable consumer request to us via the methods described below. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Information, or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

To help protect your privacy and maintain security, if you request access to or deletion of your Information, we will take steps and may require you to provide certain information to verify your identity before granting you access to your Information or complying with your request. In addition, if you ask us to provide you with specific pieces of Information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose Information is the subject of the request. Only you or your authorized agent may make a verifiable consumer request related to your Information. If you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us (as described above). You may also make a verifiable consumer request on behalf of your minor child.

13. Children's Information

This Services are not intended for use by persons under the age of eighteen (18). We do not knowingly collect any Information from anyone under thirteen (13) years old. In the event that we discover that a person under the age of thirteen (13) (or a higher threshold where applicable) has provided Information to us, we will take steps to comply with any applicable legal requirement to remove such personal Information.

Contact us if you believe that we have mistakenly or unintentionally collected Information from a child under the age of thirteen (13).

14. Difficulty Accessing Our Privacy Policy

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

15. Contact Us

If you have any questions or concerns about this Policy or any GoodCar product or service offered by InfoPay, please click here to contact us, email us at privacy@goodcar.com, call us at (800) 764-0104, or write: