Privacy Policy

UsedTruth is operated by Perkins Technology. We accept user-uploaded vehicle history PDFs (such as Carfax or AutoCheck exports) for analysis. We do not access those providers' databases or APIs directly.

Uploads and inputs. Depending on the product you use, you may submit vehicle history PDFs, shop quotes (PDF or image), symptom descriptions, VINs, or year/make/model details. We process this content to deliver the feature you requested. Processing may involve cloud AI providers under our instructions. We do not use your uploads to train public AI models.

Payments. When you pay for a feature, Stripe processes payment details. We receive payment status, Checkout Session identifiers, and metadata needed to fulfill your purchase. We do not receive your full card number.

Operational and entitlement data. We may store short-lived technical data such as rate-limit counters, a shared complimentary-run counter used across TruthAudit and QuoteGuard, promo-slot reservations, paid-run entitlements tied to a session or checkout, and server logs. When configured, this data is stored in Redis/KV (Upstash) so paid features work reliably across serverless deployments.

Referral codes. If you arrive via a referral link, the referral code may be stored in your browser (localStorage) until checkout or until you clear it. Referral metadata may be attached to Stripe transactions for operator tracking.

Share links. If you generate a share link for a TruthAudit report or QuoteGuard audit, we store that content server-side under a short link ID (typically 30 days). Anyone with the link may view the shared content. Do not share links that contain information you want to keep private.

Some features store data locally on your device. For example, analysis results in sessionStorage, uploaded PDFs temporarily in IndexedDB during an active session, analytics consent in localStorage, and referral codes as described above. Clearing your browser data may remove these items and require you to upload again.

When you use our free recall lookup (by VIN or year/make/model), we send the identifiers you provide to official or third-party recall pipelines (such as NHTSA-related APIs) to retrieve campaign information. We use that data to display results to you; we do not sell VIN lookups.

If you choose Accept analytics on our cookie banner, we load Vercel Web Analytics to understand how the site is used. That may include page views, approximate scroll depth on the home page, tab visibility, and clicks on product entry points (such as TruthAudit, TruthGuide, or QuoteGuard). These events are aggregated; we do not use them for advertising profiles.

If you choose Essential only, we do not load Vercel Analytics and we do not send those engagement events. Your choice is stored in your browser (localStorage) and you can change it anytime via Privacy & cookie settings in the site footer.

Learn more at vercel.com/legal/privacy-policy.

• OpenAI: AI processing for analysis features. openai.com/privacy
• Google Gemini / Google AI: Optional live web research and parts grounding for QuoteGuard and TruthGuide when those features are enabled. policies.google.com/privacy
• Stripe: Payment processing. stripe.com/privacy
• Vercel: Hosting and (if enabled) analytics. vercel.com/legal/privacy-policy
• Upstash (Redis / KV): Short-lived keys for rate limiting, promo counters, and paid-feature entitlements where configured.
• Resend: Optional email delivery (for example, feedback on the get-started flow). resend.com/legal/privacy-policy
• Google / YouTube: TruthGuide may surface video results via Google APIs when you use that product. Google's terms and privacy policies apply to those services.

Uploads are processed to complete your request and are not kept as a permanent archive on our servers unless required for abuse prevention, billing reconciliation, or legal compliance. Share-link payloads typically expire after about 30 days. Entitlement and rate-limit keys in KV typically expire automatically. Server logs may be retained for a limited period for security and debugging.

Data may be processed on servers located outside your country (for example, when using cloud AI, hosting, or payment providers). Those providers publish their own safeguards and terms.

UsedTruth is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. Contact us at the email below and we will respond in line with applicable law.

Questions about this policy? Email perkinstech.biz@gmail.com.

We may update this policy from time to time. Changes will be posted here with an updated "Last updated" date. Continued use after changes means you accept the updated policy. See also our Terms of Service and Disclaimer.