Privacy Policy.

Effective November 2, 2026

The short version

We collect what we need to make you an offer, buy your car and pay you: your car's details, photos of the car, your contact details, your pickup address and, at pickup, your bank details.
The buyers who price your car never get your name, phone number, email, plate number, address or payoff amount.
We use AI to read your VIN photo, check your car photos and answer questions. A person on our team approves the photo check before your offer is locked.
We share limited data with Meta to measure our ads. You can turn that off at autoexit.us/privacy-choices. If your browser sends Global Privacy Control, it is off automatically.
We never share your mobile number or your consent to receive texts with anyone for their own marketing.
We don't record calls.
You can ask to see, correct or delete your information by emailing admin@autoexit.us.

Who we are

Auto Exit LLC ("Auto Exit", "we", "us") buys cars from people across the United States. We are based in Los Angeles, California.

This policy explains how we handle personal information when you visit autoexit.us, ask for an offer, use our question box or call-back form, message with us, or sell us your car. It does not cover other companies' websites, even when we link to them.

You can reach us at admin@autoexit.us, through the call-back form at autoexit.us/contact, or through the question box on every page of our website.

What we collect

When you ask for an offer

Your car: the plate number and state, or the VIN (typed in, or read from a photo you take of the VIN sticker), the year, make, model, trim and options, the miles, your answers about its condition, and your ZIP code.
Any loan or lease: whether there is one, the lender or leasing company, and the amount you owe if you choose to tell us.
You: your name, mobile number and email address.
How you found us, if you tell us.
Your choices: whether you agreed to texts, the exact wording you saw, the time and the page you were on.

Photos of your car

After your offer, we ask for 8 guided photos of the car. Your phone re-encodes each photo before it is uploaded, so the location and camera data stored inside photos (EXIF data) never leaves your device. We strip it again on our server. Photos can still show your plate, your odometer and the place where the car is parked, so please keep people out of the frame.

When you book a pickup

The pickup address (our address finder suggests matches as you type), the date and time window, and any notes you add.

When you sell

Payment details: the bank name, the name on the account, and the routing and account numbers for the account you want to be paid into. We collect these at pickup. The account must be in your own name.
Loan or lease details: your lender's or leasing company's name, your account number, and the payoff amount and instructions, which we get from your lender with your permission.
If you owe more than our offer: the amount and how you pay it.
Sale documents: the title, the odometer statement, the bill of sale and any other form your state requires. These show the names, addresses and signatures of the owners.

When you use the question box or ask for a call back

Question box: your questions and our answers.
Call-back form: your name, mobile number, email address if you give one, the best time to reach you, what you want to talk about, and your consent wording.

When we message each other

Texts and emails between you and us, notes our team makes about calls, and any request to stop messages.

Collected automatically when you use our website

Device and visit data: IP address, browser and device type, the pages you view, the page that sent you to us, and campaign tags or ad click IDs in the link you followed (for example, a "utm" tag or "fbclid").
Small files stored on your device: see "Cookies and similar technology" below.
Bot check signals: a hidden form field and how quickly a form is filled in, to tell people from automated programs.

We don't collect precise location from your device. We know your general area only from the ZIP code you give us.

From other sources

Lenders and leasing companies: your payoff amount and whether they allow an outside buyer to pay off a lease.
Wholesale buyers: the price they would pay for your car. This is about the car, not about you.
Transport carriers: pickup status and the condition notes the driver makes at pickup.
Motor vehicle agencies: title and registration records we need to transfer the car.
The US government's vehicle database: when you enter a VIN, your browser asks the National Highway Traffic Safety Administration's free VIN decoder (vPIC) for the car's year, make and model. It receives the VIN only, never your name. We don't look up plates today; if we start, we will update this policy first.
Meta: reports on how our ads perform. These reports do not identify you to us.

What we don't collect

Social Security numbers. Our website and question box never ask for one.
Driver's license or other government ID numbers. We don't check ID today. If we start, we will update this policy first.
Precise location from your device, or the location data inside your photos.
Credit or debit card numbers.
Call recordings. We don't record calls.
Google Analytics or Google Ads data. We don't use their tags.
Information from anyone we know to be under 18.

How we use it

To make your offer. We send your car's details, without your personal details, to wholesale buyers. Their price, less our margin and costs, becomes your offer.
To check your photos and lock your offer.
To arrange pickup with you and the transport carrier.
To confirm and pay off your loan or lease.
To pay you.
To prepare and keep sale records and meet legal duties, such as federal odometer rules, title transfers and tax records.
To contact you about your offer and sale by text, call and email, with your consent where the law requires it.
To answer your questions, including through the question box.
To prevent fraud and abuse, for example by checking ownership and title, making sure a payment goes only to an account in the seller's own name, and blocking bots.
To measure our ads and improve our website, unless you opt out (see "Ads").
To keep records, enforce our Terms and handle legal claims.

We don't use your information to make credit decisions, and we don't sell lists of sellers.

How we use AI

We use AI for three jobs:

Reading your VIN photo. If you snap the VIN sticker instead of typing the VIN, AI reads the number from the photo.
Checking your car photos. AI looks for blur, reads the odometer, and looks for warning lights and visible damage. A person on our team reviews the result and approves the photos before your offer is locked.
Answering questions in the question box. AI answers from our own policies and guides. It never names a price, and it can hand you over to a person.

Our AI provider is Anthropic. It processes this information for us under its commercial terms. Anthropic says it does not use data sent through its commercial services to train its models by default, and that it deletes that data within 30 days, unless a message is flagged by its safety systems for a possible policy violation.

AI does not make decisions about you that have legal or similarly significant effects, such as decisions about credit, housing, jobs or health care. If you think a photo check got something wrong, tell us and a person will look again.

Please don't type bank details, Social Security numbers or passwords into the question box.

Who	What they get	Why
Wholesale buyers in our network	The car's year, make, model, trim, options, color, VIN, miles, ZIP code and condition answers, whether there is a loan or lease and with which company, and written notes from the photo check. Never your name, phone number, email, plate number, address, payoff amount or the photos themselves.	So they can price the car.
Our service providers (listed below)	What each needs to do its job	To run our service for us, under contracts that limit how they may use it
Your lender or leasing company	Your name, the VIN, your account number, your permission and the payoff payment	To confirm the payoff and pay it
Transport carriers	Your name, mobile number, pickup address, date and time, and the car's details	To pick up the car
Banks	Your payment details	To send your payment
Motor vehicle agencies and other government offices	Sale and title documents and odometer statements	To transfer title, and as the law requires
Whoever buys the car from us later	The title and odometer paperwork that legally travels with the car. It shows your name and address as a previous owner, as it does in any car sale. Never your phone number or email.	The law requires the chain of ownership to stay with the car
Meta	See "Ads" below	To measure and target our ads, unless you opt out
Our lawyers, accountants and insurers	What they need to advise or cover us	Professional advice and insurance
Courts, police and regulators	What the law requires	To follow the law, protect rights and safety, and prevent fraud
A buyer of our business	Our records, under this policy	If Auto Exit is sold or merged
Anyone you ask us to share with	What you ask us to share	At your direction

Our service providers:

Cloudflare: hosts our offer server and database, and stores your photos.
Framer: hosts our website pages.
Anthropic: provides the AI described above.
HighLevel (LeadConnector): our customer records system, which also sends our texts and emails.
Meta: measures our ads (see "Ads").

Public lookup services: our server asks Photon (an OpenStreetMap address service run by komoot) for address suggestions, sending only the address text you type. It asks Zippopotam.us to turn a ZIP code into a city and state, sending only the ZIP code. Both requests come from our server, so these services don't see your IP address or know who you are.

What we use. Meta's pixel runs on our website, and our server also sends events to Meta through its Conversions API. We don't use Google Analytics or Google Ads tags.

What Meta gets.

Which pages of our website you visit.
A "Lead" event when you send the offer form, and a "Schedule" event when you book a pickup.
With those two events: your email, first and last name and ZIP code, each hashed (turned into a code) before it is sent, plus your country, an ID we assign, your IP address, your browser type, Meta's cookie IDs and any ad click ID in the link you used. Meta can match hashed details to its own accounts.

What Meta never gets: your mobile number, your offer, the car's value, anything about money, your loan or lease, your bank details or your photos.

Why this counts as "sharing". We use this to see which ads work and to show our ads to people likely to be interested. Meta may also use the data under its own terms. California law calls this "sharing" for cross-context behavioral advertising, and other state laws may call it a "sale" or "targeted advertising". We don't sell personal information for money.

How to opt out.

On our website: go to autoexit.us/privacy-choices ("Your Privacy Choices") and choose "Don't share". This stops Meta's pixel on that browser and device, and we don't send server events for offers you start there afterward.
Global Privacy Control: if your browser sends this signal, we treat it as an opt-out automatically, both in the browser and for any offer you send from it. The Your Privacy Choices page shows when we have detected it.
By email: to opt out on every device, or for an offer you have already sent, email admin@autoexit.us and we will stop sending events about you.

Opting out never changes your offer.

We don't sell or share the personal information of anyone we know to be under 16.

Texts, calls and email

Your consent. We text you only if you agree. The offer form has a tick box that says:

"Text me about my offer and sale. Auto Exit may text this number, including by automated means. Consent is not a condition of sale. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help."

The call-back form shows this line next to its button:

"By sending, you agree that Auto Exit may call or text you about selling your car, including by automated means. Consent is not a condition of sale. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help."

You can get an offer without agreeing to texts. We keep a record of your consent: the wording you saw, the time and the page.

What we text about: your offer, photo requests and results, pickup scheduling and reminders, payoff and payment updates, and answers to your questions. We send texts between 9 a.m. and 8 p.m. in your time zone.

Stopping texts. Reply STOP, or QUIT, END, REVOKE, OPT OUT, CANCEL or UNSUBSCRIBE, to any text. We send one message confirming you are opted out, then stop. You can also tell us by email at admin@autoexit.us or in a call. Reply HELP for help.

Your mobile number stays with us. No mobile information will be shared with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. Only the service provider that sends our texts handles your number, and only to send them for us. Your mobile number is never sent to Meta or any other ad platform.

Calls. We don't record calls.

Email. We email you about your offer and sale. If we ever send marketing emails, each will have an unsubscribe link.

Cookies and similar technology

What	What it does	Can you turn it off?
Meta pixel cookies	Measure our ads on Facebook and Instagram	Yes: "Don't share" on autoexit.us/privacy-choices, or Global Privacy Control
Your offer link, saved in your browser	Lets you come back to your offer later	You can clear it in your browser
Form progress, saved for the open tab	Keeps your answers if the page reloads; cleared when you close the tab	You can clear it in your browser
Ad source, saved in your browser	Remembers the campaign tags and click IDs in the link you arrived on, so we know which ad or page brought you	You can clear it in your browser
Your privacy choice, saved in your browser	Remembers that you chose "Don't share"	Clearing it resets your choice

If you clear your browser storage, your "Don't share" choice is cleared too. Global Privacy Control doesn't have this problem, because your browser sends it every time.

Do Not Track. Our website doesn't respond to Do Not Track browser signals, because there is no common standard for them. We do honor Global Privacy Control.

Tracking by others. Unless you opt out, Meta may collect information about your activity on our website and connect it with your activity on other websites and apps over time.

How long we keep it

We keep information only as long as we need it for the reasons in this policy. If information is needed for a legal claim or an investigation, we keep it until that is resolved.

Information	How long	Why
Completed sales: the offer and any itemized changes, bill of sale, title and odometer papers, payoff and payment records, photos and messages about the sale	7 years after the end of the year of the sale	Federal law requires dealers to keep odometer statements for 5 years. Tax and accounting records, and questions about title, tolls or tickets, can come up years later.
Full bank account and routing numbers	Until the payment has cleared, and no more than 90 days after pickup. After that we keep only the bank name, the last 4 digits and the transfer confirmation, with the sale record.	Long enough to resend a payment that bounces, and no longer.
Loan or lease account numbers	Until your lender confirms the payoff. After that we keep only the last 4 digits and the payoff confirmation, with the sale record.	Needed only to complete the payoff.
Offers that didn't become a sale: car details, your answers, the offer and your contact details	24 months after our last contact with you	So you can come back to your offer, and so we can answer any question or complaint about it.
Photos for offers that didn't become a sale	12 months after you sent them	Useful if you come back soon. After a year they no longer show the car as it is.
Call-back requests	24 months after our last contact with you, or as long as the offer if one follows	Same reason as offers.
Question box chats	90 days	To check our answers and fix wrong ones.
Text and call consent records, and requests to stop	5 years after our last contact with you	Claims under the federal telephone consumer law can be brought for up to 4 years, so we need to show consent and that we honored every opt-out.
Ad source data we hold (campaign tags, click IDs, Meta cookie IDs)	24 months after your offer	To measure which ads work.
Bot check and rate-limit records, with your IP address scrambled	1 day	To stop abuse.
Records of privacy requests	24 months	California rules require it.

Information we delete can remain in our database backups for up to 30 days before it is overwritten. Meta keeps what it receives under its own policies.

How we protect it

Information travels to and from our website encrypted (HTTPS).
Our database and photo storage are hosted by Cloudflare, which encrypts stored data.
Only our team can open seller records, using a password or a one-time sign-in link.
Buyers see the car only, through a private link, never your personal details.
Location and camera data are stripped from photos, on your phone and again on our server.
Bot checks and rate limits protect our forms.
We pay only into a bank account in the seller's own name.
We will never ask for your online banking password.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Watch for scams. We ask you to send us money in only one case: when you owe more than our offer and pay the difference. If that applies to you, the amount and how to pay come in writing from our team before pickup. If anything looks off, check with us at admin@autoexit.us before you pay anyone.

Children

Our service is for adults. You must be 18 or older to ask for an offer or sell us a car. We don't knowingly collect information from anyone under 18. If we learn we have, we will delete it.

Your privacy rights

Rights for everyone in the US

Wherever you live in the US, you can ask us to:

Tell you what personal information we have about you, where it came from, why we use it and who we share it with.
Give you a copy of it in a format you can reuse.
Correct it if it is wrong.
Delete it.
Stop selling or sharing it for ads, and stop using it for targeted advertising.
List the specific third parties we have shared it with.

Some information we must keep even if you ask us to delete it: for example, records of a completed sale and odometer statements the law requires, consent and opt-out records, information needed to finish a sale in progress, and information needed to prevent fraud or handle a legal claim. If we can't delete something, we will tell you why.

We won't charge you, treat you differently or change your offer because you used these rights.

How to make a request

Email admin@autoexit.us with "Privacy request" in the subject line, or
Use the call-back form at autoexit.us/contact and say in the topic that it is a privacy request.

Tell us your name, the email or mobile number you used with us, what you want us to do and, if you have them, the VIN or plate of your car. We don't have a phone line for privacy requests. If you'd rather talk, ask for a call back and we will call you.

Checking it's you. Before we give you information or delete or correct it, we match the details you give us with what we hold. For copies of specific information or deletion, we may also send a code to the email or mobile number on file. You don't need to prove who you are to opt out of selling or sharing.

Someone acting for you. You can have someone else make a request for you. We will ask for your signed permission, or a power of attorney, and we may ask you to confirm your identity with us directly.

How fast we answer. We confirm we received your request within 10 business days, and answer within 45 calendar days. If we need more time, we will tell you why, and we may take up to 45 more days. We act on requests to opt out within 15 business days, and usually right away.

California

California residents have the rights above under the California Consumer Privacy Act: the right to know, to delete, to correct, to opt out of the sale or sharing of personal information, and to equal treatment. You can ask about information we collected on or after January 1, 2022.

Sensitive personal information. We don't collect sensitive personal information as California law defines it. A bank account number counts as sensitive only with a password or access code, which we never ask for. We use bank and loan account numbers only to pay you and your lender.

No financial incentives. We don't offer discounts or payments in exchange for personal information.

Shine the Light. We don't share personal information with third parties for their own direct marketing.

What we collect, and have collected in the last 12 months:

Category (California law)	Examples	Sources	Why we use it	Disclosed for business purposes to	Sold or shared?
Identifiers	Name, mobile number, email, pickup address, plate number, VIN, IP address, cookie IDs, an ID we assign	You, your device	Offer, contact, pickup, payment, fraud prevention, ads	Service providers, transport carriers, your lender, motor vehicle agencies, advisers	Shared with Meta for ads: hashed email and name, IP address, cookie IDs and our ID, unless you opt out. Never your mobile number
Customer records (Cal. Civ. Code 1798.80)	Name, address, phone, signature, bank account number, loan or lease account number	You, your lender	Payoff, payment, sale documents	Your lender, banks, motor vehicle agencies, service providers	No
Commercial information	Car details, condition answers, offers, payoff amount, sale records, whether you sent the offer form or booked a pickup	You, buyers, your lender, carriers	Offer, sale, records	Wholesale buyers (car details only), service providers, motor vehicle agencies, later buyers of the car (title and odometer papers)	Shared with Meta: only that you sent the offer form or booked a pickup
Internet or other electronic network activity	Pages viewed, the page that sent you, campaign tags, click IDs, use of the offer form and question box	Your device	Website operation, ads measurement, fraud prevention	Service providers	Shared with Meta: pages viewed and the two events above, unless you opt out
Geolocation data	No precise location. Your ZIP code only.	You	Offer and pickup	Wholesale buyers, service providers	Shared with Meta: ZIP code, hashed, unless you opt out
Audio, electronic or visual information	Photos of your car	You	Checking the car and locking the offer	Service providers (Cloudflare, Anthropic)	No
Protected classifications, biometric information, professional or employment information, education information, inferences, sensitive personal information	Not collected				No

Other states

These states also give their residents privacy rights: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. More states have passed laws that start later. We honor the rights listed above for residents of every state.

These laws also give a right to opt out of profiling that leads to decisions with legal or similarly significant effects. We don't do that kind of profiling. We don't process "sensitive data" as these laws define it, such as health, precise location, race or religion.

Appeals. If we turn down your request, you can appeal. Reply to our answer, or email admin@autoexit.us with "Privacy appeal" in the subject line. We will answer within 45 days and explain what we decided and why. If you disagree with the outcome, you can contact your state attorney general.

Nevada

Nevada law lets you tell us not to sell certain personal information. We don't sell personal information for money, which is how Nevada law defines a sale. You can still send a request to admin@autoexit.us, and we will record it and answer within 60 days.

How to contact us

Auto Exit LLC, Los Angeles, California

Email: admin@autoexit.us
Call-back form: autoexit.us/contact
The question box on every page of autoexit.us

Changes to this policy

When we change this policy, we post the new version here with a new effective date. If a change matters, for example a new kind of information or a new use of it, we will tell you by email or with a clear notice on our website before the change applies to information we already have, and we will ask for your consent first where the law requires it.