Privacy Policy

Last updated July 11, 2026

1. Who We Are and Who Controls Your Data

AutoCurb LLC (d/b/a AutoFilm; "we," "us," or "our") operates this website and the AutoFilm dealership video, multi-point inspection, and customer-messaging platform (the "Services"). This policy applies to all information collected through our platform.

The Services are provided to and through motor-vehicle dealerships ("Dealers"). When a Dealer's staff records a personal video, sends an inspection, or texts you a link, that Dealer is the business and data controller — it determines why your information is collected and how it is used, and your customer relationship is with that Dealer. AutoCurb LLC acts as the Dealer's technology service provider (processor) to operate these tools and host the data on the Dealer's behalf: we process your information solely on the Dealer's instructions to deliver the Services described here, do not sell your information, and do not use it for our own purposes. Your information belongs to the Dealer, not to AutoCurb.

2. Information We Collect

We may collect the following categories of personal information when you use the Services:

Contact & identity data: name, mobile phone number, email address, and the vehicle you own or are considering.
Video & inspection content: personal videos recorded by Dealer staff, multi-point inspection findings, recommended services, photographs, and pricing shared with you.
Engagement & device data generated when you open a link or watch a video: watch percentage and seconds watched, taps and interactions (including approving or declining recommended work), replies, approximate location derived from IP address, IP address, browser and device type, and referring page.
Account & push data for Dealer staff: login credentials managed through our authentication provider, role, and (if enabled) browser push-notification subscriptions.
Billing data for Dealers, handled by our payment processor — we do not store full card numbers.

3. How We Use Your Information

We use the information we collect for the following purposes:

To deliver personal videos, inspection results, and text messages to the intended recipient. To notify Dealer staff when a customer opens a video, watches a milestone, replies, or approves or declines recommended work. To build the vehicle's history record (the "Vehicle Passport") so the Dealer can maintain a complete first-party record of interactions and service. To operate, secure, support, and improve the Services. To comply with legal obligations.

We do not sell your personal information, use it for targeted (cross-context behavioral) advertising, or use it to train any third party's large language models. Our AI vendors process your data only to deliver this service and are contractually barred from training their models on it.

4. Text Message (SMS/MMS) Consent & Communication

By providing your phone number to a participating Dealer — including through any AutoFilm-powered form or intake — you expressly consent to receive autodialed and/or pre-recorded text messages (SMS and MMS) and phone calls from the Dealer, sent through AutoFilm, at the phone number you provided. These communications may include:

Personal videos and a link to view or reply to them.
Multi-point inspection results and requests to approve or decline recommended work.
Appointment confirmations, reminders, and follow-ups.
Service and vehicle-status updates.
Requests for additional information or documentation.

Important details

Consent is not a condition of purchase. You are not required to consent to receive text messages as a condition of purchasing any goods or services.
Message frequency varies. You may receive up to 10 messages per month depending on your interaction with the Services.
Message and data rates may apply. Standard messaging rates from your wireless carrier apply.
Opt out at any time. Reply STOP to any text message to unsubscribe. You will receive a one-time confirmation message. You may also contact us at (203) 872-7588 to opt out.
Help. Reply HELP for assistance or contact us at (203) 872-7588.
Supported carriers: AT&T, Verizon, T-Mobile, and most major U.S. carriers. Carriers are not liable for delayed or undelivered messages.

Your consent to receive text messages is documented at the time of collection and retained in our records. We do not sell, rent, or share your mobile phone number or opt-in consent with third parties or affiliates for their marketing or promotional purposes. Your phone number will only be used by the Dealer and its authorized service providers for the purposes described above.

5. We Do Not Collect Biometric Identifiers

AutoFilm does not use facial recognition or voiceprints, and does not create or store biometric identifiers from the videos recorded or watched through the Services. Video is used only to deliver a message to the intended recipient.

6. How We Share Your Information

The participating Dealer. When you interact with the Services, your information is provided to the Dealer so that its authorized staff can contact you, deliver a video or inspection, and complete the service or sale you have requested. Your information is made available only to that Dealer — it is never shared with other dealerships or sold to lead aggregators. The AutoFilm platform keeps each Dealer's customer data fully separated; no other dealership can access it.

We do not sell your personal information. We may share your information with:

Service providers (sub-processors) — each contractually limited to delivering the service on our behalf:

Supabase, Inc. (AWS us-east-1) — database, authentication, file storage — all categories.
Mux, Inc. — video ingest, storage, and playback — video content, thumbnails, playback analytics.
Twilio, Inc. — SMS / MMS delivery — phone number, message content.
Cloudflare, Inc. — short-link resolution, CDN, edge caching — IP address, request metadata.
Anthropic PBC — AI-assisted script and reply drafting — text prompts / transcripts (text only).
OpenAI, L.L.C. — Whisper speech-to-text on video/inspection audio — audio clips.
Stripe, Inc. — payment processing (Dealer subscriptions) — no customer-of-Dealer data; Dealer account billing only.
Resend, Inc. / SendGrid (Twilio) — transactional email delivery — email address, message content.

We may also share your information when:

Legal requirements: when required by law, regulation, or legal process (subpoena, court order).
Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

We do not share your personal information with advertisers or marketing networks. We do not sell your personal information.

7. Data Security

We maintain a written information-security program with administrative, technical, and physical safeguards. These include:

Encryption of personal information in transit (TLS) and at rest.
Role-based, least-privilege access controls, and strict per-Dealer data isolation so one Dealer's data is never accessible to another.
Multi-factor authentication available for administrative access.
Logging and monitoring of access to customer data, and audit trails.
Written data-protection agreements with every service provider, and a documented incident-response process.
Data hosted in the United States.

No method of electronic transmission or storage is 100% secure, but we review and update our safeguards regularly.

8. Data Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Video, inspection, and associated communications are retained for up to 3 years after your last interaction with the Dealer. Operational data such as transcripts and playback logs is deleted on shorter internal schedules, and if a Dealer's account is closed, your information is deleted within 30 days except where the law requires us to keep a minimal, de-identified record.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal information.
Opt out of marketing communications at any time.
Request a copy of the data we hold about you.
Opt out of any "sale" or sharing of your information and of profiling.

Because we act on the Dealer's behalf, we will route consumer requests to the relevant Dealer and assist them in responding. Connecticut residents also have appeal rights — see the state-specific section below. You may also contact us at (203) 872-7588 or email ken@autocurb.io.

Automated processing. Some replies and message drafts are generated in part by AI. These tools do not make any final or legally significant decision about you; every recommended service or price shown to you is confirmed by the Dealer, and you may opt out of profiling as described above.

9a. California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the following rights, which we honor regardless of where you live:

Right to know. You can request a copy of every category of personal information we have collected about you, the sources we collected it from, the business or commercial purpose for collecting it, and the third parties we shared it with.
Right to delete. You can request that we delete personal information we have about you, subject to limited exceptions (legal hold, fraud prevention, completing a transaction you initiated).
Right to correct. You can request correction of inaccurate personal information.
Right to limit use of sensitive personal information. We do not use sensitive PI for any purpose beyond delivering the service you requested.
Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. We also honor opt-out preference signals, including the Global Privacy Control (GPC): if your browser transmits GPC, we treat it as a valid request to opt out of any sale or sharing.
Right to non-discrimination. We will not deny service, charge a different price, or provide a lower quality of service because you exercised any of these rights.

To exercise these rights, you (or an authorized agent) can call (203) 872-7588 or email ken@autocurb.io. We will verify your identity by sending a one-time code to the phone or email on file and respond within 45 days (extendable to 90 days with notice). The categories of personal information we have collected in the preceding 12 months are listed in §2 above. We retain personal information for the periods stated in §8.

9b. Connecticut residents (Connecticut Data Privacy Act)

If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA), as amended effective July 1, 2026, gives you the right to:

Confirm and access the personal data we process about you, including any inferences, and obtain a portable copy.
Correct inaccuracies in your personal data.
Delete personal data you provided or that we obtained about you.
Opt out of (i) the sale of your personal data, (ii) targeted advertising, and (iii) profiling with legal or similarly significant effects. AutoFilm does not sell your data, use it for targeted advertising, or use it to train large language models.

How to exercise these rights. Call (203) 872-7588 or email ken@autocurb.io. We respond within 45 days (extendable once by 45 days with notice).

Universal opt-out / Global Privacy Control. We honor opt-out preference signals, including the Global Privacy Control (GPC). If your browser transmits a recognized opt-out signal, we treat it as a valid request to opt out of any sale of your personal data and any targeted advertising.

Right to appeal. If we decline to act on your request, you may appeal by contacting us at (203) 872-7588. We respond to appeals in writing within 60 days. If we deny your appeal, you may submit a complaint to the Connecticut Attorney General at the Connecticut Attorney General's Office (165 Capitol Avenue, Hartford, CT 06106).

Residents of other states with comprehensive privacy laws (e.g., Virginia, Colorado, Utah, Texas) have substantially similar rights; the same request flow applies.

10. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

AutoCurb LLC (AutoFilm)
Phone: (203) 872-7588
Email: ken@autocurb.io

This Privacy Policy is published by AutoCurb LLC, which operates the AutoFilm platform on behalf of participating Dealers. When you use the Services in connection with a Dealer, that Dealer is the controller of your personal information and AutoCurb acts solely as its technology service provider (processor). AutoCurb does not sell or independently use your information.