Privacy Policy

Codonca Inc. (“Codonca,” “we,” “us,” or “our”) is a Florida-based licensed motor vehicle dealer operating a salvage vehicle analytics platform at codonca.com (the “Platform”). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.

This Privacy Policy explains our practices regarding the information we collect when you visit our Platform, create an account, purchase reports, or otherwise interact with our services. By using the Platform, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google.
• Payment Information: When you purchase reports or subscribe to a plan, payment details (such as credit card number, billing address, and transaction history) are collected and processed by our third-party payment processor, Stripe. We do not store your full credit card number on our servers.
• Search and Report Data: VIN numbers you search, vehicle reports you generate, and any saved vehicles or watchlist preferences.
• Communications: Information you provide when you contact us for support, submit feedback, or otherwise communicate with us.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, report views, timestamps, and interaction patterns.
• Device Information: Browser type and version, operating system, device type, screen resolution, and language preferences.
• Network and Log Information: IP address, referring URLs, access times, and server log data.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our salvage vehicle analytics services, including generating vehicle reports, ROI calculations, and market data insights.
• Process transactions and send you related information such as purchase confirmations and invoices.
• Create and manage your account, authenticate your identity, and provide customer support.
• Send you service-related communications including updates, security alerts, and administrative messages.
• Analyze usage trends to improve Platform functionality, user experience, and data accuracy.
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Comply with legal obligations and enforce our Terms of Service.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party providers who perform services on our behalf, such as payment processing, data hosting, and analytics (see Section 6 below).
• Legal Requirements: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: When you have given us explicit consent to share your information for a specific purpose.

4. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Secure authentication via Supabase Auth with support for multi-factor authentication.
• Row-level security policies on our database to ensure users can only access their own data.
• Regular security reviews and monitoring for suspicious activity.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach in accordance with applicable law.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Maintain your authenticated session, remember your preferences, and ensure the Platform functions correctly.
• Analytics Cookies: Understand how visitors interact with the Platform so we can improve performance and usability.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect Platform functionality.

6. Third-Party Services

We integrate with the following third-party services to operate the Platform:

• Stripe — Payment processing. Stripe collects and processes your payment information in accordance with its own Privacy Policy. We receive limited transaction data (such as the last four digits of your card, billing address, and transaction status) but never your full card number.
• Supabase — Authentication and database services. Supabase manages user authentication tokens and stores application data in accordance with its Privacy Policy.
• Google OAuth — Optional single sign-on. If you choose to sign in with Google, we receive your basic profile information (name, email, and profile photo) as authorized by your Google account settings.
• Vercel — Application hosting and content delivery. Vercel may process server-side request logs in accordance with its own privacy practices.

Each third-party provider operates under its own privacy policy, and we encourage you to review their policies. We only share the minimum information necessary for each service to function.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Account Closure: You may close your account at any time by contacting us. We will delete or anonymize your personal data within 30 days unless retention is required by law.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request the deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• No Sale of Personal Information: We do not sell personal information as defined under the CCPA.

To exercise any of these rights, please contact us at privacy@codonca.com. We will respond to verifiable requests within 45 days.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account Data: Retained while your account is active and for up to 30 days after account closure.
• Transaction and Report Data: Retained for up to 3 years for business records and dispute resolution purposes.
• Usage Logs: Retained for up to 12 months for analytics and security purposes, then aggregated or deleted.

We may retain certain information for longer periods when required by law, for legitimate business purposes (such as fraud prevention), or to resolve disputes.

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@codonca.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.
• Notify registered users by email or through an in-app notification for significant changes.

We encourage you to review this policy periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: