Maroleo LLC [ATTORNEY: confirm exact legal entity name]
Effective date: [DATE]
This Privacy Policy explains how Maroleo LLC (“Maroleo,” “we,” “us”) collects, uses, shares, and protects information when you use maroleo.com and our vehicle-search and negotiation services (the “Services”). It applies to visitors, account holders, and customers. By using the Services, you agree to this Policy.
The short version: we collect what we need to find and negotiate your car, we share it only with the service providers that run our platform and with dealerships as needed to work your deal, we never sell your personal information, and you can ask us to delete your data at any time.
Account information. Email address and a password (stored in hashed form by our authentication provider — we never see or store your plaintext password). Optionally, your name and mobile phone number if you add them.
Vehicle preferences and survey answers. What you tell us in the Ideal Ride survey, Ideal Ride Pro intake, listing submissions, and messages — for example: location/ZIP code, budget, payment type, timeline, body styles, must-have features, brands, specific vehicle listings, trade-in details (vehicle, mileage, condition, loan payoff), a self-reported credit range if you choose to share one, monthly payment and down-payment targets, and registration state. Financial fields are optional unless needed for the package you purchased.
Deal and communication records. Deals we open for you, status updates we post, messages exchanged between you and Maroleo, and email/SMS delivery records.
Payment information. Payments are processed by Stripe. We receive and store transaction records (amount, package tier, the email used at checkout, and Stripe’s transaction identifiers). We never receive or store your full card number. Stripe’s handling of your payment details is governed by Stripe’s own privacy policy.
Usage and device information. Standard web logs and analytics collected by our hosting provider (such as IP address, browser type, pages visited, and timestamps) used for security and to operate the site. [ATTORNEY: confirm the analytics/cookie disclosure below matches the final analytics configuration.]
We use information to: provide the Services you request (including generating vehicle recommendations, opening and working your deals, and negotiating with dealerships); create and secure your account; process payments and determine which features (such as Ideal Ride Pro) your purchase unlocks; send you service communications (deal updates, message notifications, receipts, and account notices); respond to your questions; maintain records of our engagements; improve the Services; and comply with legal obligations. We do not use your information for third-party advertising.
To generate vehicle recommendations, we send your survey answers (such as location, budget, and preferences) to Anthropic, our artificial-intelligence provider, which processes them to produce your shortlist. We send only what is needed to generate recommendations. AI outputs are informational and are reviewed in the course of our human-led service. [ATTORNEY: confirm the description of Anthropic’s data handling matches the applicable Anthropic commercial terms, including training and retention commitments.]
Service providers. We share information with vendors that operate our platform, strictly to provide the Services: Supabase (database and authentication), Stripe (payments), Resend (email delivery), Twilio (text messaging, if you opt in), Anthropic (AI recommendations), and Vercel (website hosting and logs). Each provider processes data under its own contractual and security commitments.
Dealerships. To negotiate your deal, we share what a dealership reasonably needs — typically the vehicle you want, your general location, timing, and trade-in details. We do not share your credit range, financial ceilings, or negotiation limits with dealerships; those exist so we can negotiate for you, not against you.
Legal and safety. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Maroleo, our customers, or others.
Business transfers. If Maroleo is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. [ATTORNEY: confirm this statement supports a “we do not sell/share” posture under CCPA/CPRA and comparable state laws, and whether a “Do Not Sell or Share” link is nonetheless required.]
Text notifications are optional. If you add a mobile number and enable texting on your dashboard, we will text you about your deals. Message frequency varies and message/data rates may apply. Opt out anytime by turning the setting off on your dashboard or replying STOP; reply HELP for help. Consent to texting is not a condition of purchase. Mobile numbers and opt-in status are not shared with third parties for their marketing.
We use strictly necessary cookies and similar technologies to keep you logged in and to secure the Services, and privacy-respecting analytics to understand aggregate site usage. We do not use third-party advertising cookies. Your browser can be set to refuse cookies, but login will not function without the essential ones. We do not currently respond to “Do Not Track” signals. [ATTORNEY: confirm against final analytics setup and whether a cookie banner is required for the intended audience.]
We retain account and deal records while your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Deal and payment records are generally retained for [ATTORNEY: recommend period, e.g., 7 years] after the engagement ends. When retention is no longer required, we delete or de-identify the information.
We use commercially reasonable safeguards to protect your information, including encryption in transit (HTTPS), hashed passwords, row-level database access controls that restrict each customer’s records to their own account, and restriction of administrative access to designated Maroleo personnel. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by applicable law.
You can access and update your account information and notification settings from your account and dashboard. You may request a copy of your personal information, ask us to correct it, or ask us to delete your account and associated personal information by emailing support@maroleo.com; we will respond within the time required by applicable law and verify your identity before acting. Deleting your account does not delete records we are legally required to keep (such as payment records), which we retain only as required. Depending on your state of residence, you may have additional rights (such as access, correction, deletion, portability, and non-discrimination). [ATTORNEY: add the state-specific rights disclosures applicable to the customer base — e.g., California, Virginia, Colorado, Connecticut, New Jersey — and an appeals process where required.]
The Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Policy from time to time. Material changes will be posted here with a new effective date and, for account holders, notified by email. Your continued use of the Services after changes take effect constitutes acceptance.
Maroleo LLC · [MAILING ADDRESS] · support@maroleo.com