Privacy Policy

The short version

We collect what we need to estimate your refund and write your letters, and nothing else. We do not sell your information, we do not share it for advertising, and you can have it deleted by sending one email.

What we collect

When you use the refund check, we collect:

• Your answers about the vehicle, the loan, and the protection products you bought
• Your name and email address, and your phone number if you give us one
• Any purchase documents you choose to upload — these are contracts, so they often contain your address, your vehicle identification number, a contract number, and details of your loan
• Basic usage data through Google Analytics, such as the pages you visited and roughly where you are

Why we collect it

We use your answers to produce your estimate and to fill in your cancellation letters. We use your email to send you those letters and to ask, later, whether your refund actually arrived. We use uploaded documents to identify the administrator and the contract terms. We use usage data to understand which pages help people and which do not.

We do not use any of it to build an advertising profile, and we do not sell it or share it for cross-context behavioral advertising.

Who else sees it

Only the services we need to run this, and only for that purpose:

• Supabase, which hosts our database and stores uploaded documents
• Vercel, which hosts the website
• Resend, which sends our email
• Google Analytics, for anonymous usage statistics
• Slack, where a notification tells us a new request has come in

How uploaded documents are handled

Documents go into a private storage bucket that is not publicly readable. Nothing is served from a public link — access happens through short-lived signed URLs generated on our server. Transfers are encrypted.

Please do not upload anything we do not need. A cancellation almost never requires your Social Security number or full bank account details, and if a document shows them you are welcome to cover them before uploading.

How long we keep it

We keep your request and your documents for as long as we are helping you and for up to two years afterwards, so that we can answer questions about a refund that is still in progress. After that we delete uploaded documents. We may keep a basic record of the request itself for longer, for our own accounting.

Your choices

Email us at support@refundauto.com and we will tell you what we hold about you, correct it, or delete it. You do not need to give a reason, and we will not charge you for it.

Every email we send has a one-click unsubscribe. Unsubscribing stops the follow-up emails; it does not delete your data, so ask separately if that is what you want.

Depending on where you live you may have additional rights under your state's privacy law, including the right to know, correct, delete, and to not be discriminated against for exercising them. The same email address handles all of it.

Children

This service is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from them.

Security, honestly stated

We take sensible precautions — private storage, signed URLs, encryption in transit, and access limited to the people running the service. No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your information we will tell you, and we will do it promptly rather than waiting to be forced.

Changes

If we change this policy we will update the date at the top. If the change is significant and we have your email, we will tell you.