Privacy

Your data is your data.

We do not sell it. We do not rent it. We do not use it to train models. The plain version is below. The full policy follows.

Last updated: 2026-05-06

01 · The short version

What we do and do not do.

→We collect what we need to run the platform. Email, vehicle data, service records.
→We never sell your data to advertisers, brokers, or insurance companies.
→We never sell leads. The introduction is the product.
→You can export your data, delete your account, and walk away anytime.
→Public records (services, scores) attach to the VIN, not to you. Your name is private unless you opt in.

02 · What we collect

Three buckets.

Account data

Your email, optional display name, and a Supabase auth ID. We never store passwords because we use magic links and OAuth.

Vehicle data

VIN, NHTSA-decoded specs (year, make, model, engine), claim status, and any photos you upload to verify ownership. Your VIN is yours. We attach a public record to it, but we do not publish your name without your permission.

Service data

Repair entries logged by verified shops or by you directly. This includes service date, mileage, parts, labor, total cost, and shop identity. Service data is the public record.

03 · How we use it

To run the platform. Nothing else.

→Display public VIN records and the Totaled Score.
→Route buyer offers and shop quotes through anonymous email relays.
→Verify vehicle ownership via photo OCR and registration matching.
→Send you account emails (magic links, claim status, recall alerts you opted into).
→Improve the platform with aggregate, non-identifying analytics.

03b · SMS messaging

Text messages, only when you opt in.

→We send SMS only to phone numbers explicitly opted in via a checkbox at the point of collection.
→Messages are transactional. Quote request confirmations, shop replies, claim status, recall alerts. No marketing blasts.
→Frequency varies based on your activity. Typically zero to five messages per quote thread.
→Reply STOP to opt out at any time. Reply HELP for help. Standard message and data rates apply from your carrier.
→We log opt-in time, IP, and the exact disclosure shown. Required by US carriers for A2P 10DLC compliance.
→Phone numbers and consent records are never sold, rented, or shared with third parties for marketing.

04 · Third parties

Vendors that touch your data.

Supabase

Authentication and database. Stores your email, session, and vehicle records.

Stripe

Payment processing for shop verification and buyer reports. We do not store card numbers.

Vercel

Hosting. Logs request metadata for uptime and abuse prevention.

NHTSA

US, public

Public VIN decode and recall lookup. We send your VIN, we do not send your identity.

Google

Optional sign-in. If you use it, we receive your email and name from Google.

Resend

Transactional email delivery for offer notifications, quote confirmations, and account messages. Receives the recipient address and message body.

05 · Cookies

Just one. Auth.

We set a session cookie when you sign in. It identifies you to our server so you can see your garage and post offers. We do not use tracking cookies, advertising pixels, or third-party analytics that follow you across sites.

06 · Your rights

Access, export, delete. On request.

→Access. Email us and we send you a JSON dump of your data.
→Export. Same as above. Your data, downloadable, anytime.
→Delete. We honor account deletion within 30 days. Service records you logged remain attached to the VIN, anonymized.
→Correct. Edits trigger an audit entry, the original is never destroyed.

California (CCPA), Virginia (VCDPA), Colorado (CPA), and EU (GDPR) residents have the same rights, plus a few more specific to their jurisdiction. Email us, we honor them.

07 · Children

Not for kids.

Totaled is not designed for children under 16. We do not knowingly collect data from minors. If we learn we have, we delete it.

08 · Changes

If we change this policy.

We will email every account holder before any material change takes effect, with at least 30 days notice. Minor edits (typos, clarifications) post here without notice. The last-updated date at the top is the source of truth.

09 · Contact

Questions, requests, complaints.

Email nikrangwani@gmail.com. Replies within 72 hours.