Legal
Privacy policy
Plain-language summary below. The full lawyer-reviewed document replaces this page before launch — this stub pins what it must cover.
Legal
Plain-language summary below. The full lawyer-reviewed document replaces this page before launch — this stub pins what it must cover.
Your name, email, ZIP code and state, and a password hash — never the password itself.
The IP address and the device or browser you use each time you sign in.
How you found us: the UTM tags on the link you followed, the page you landed on, and the site that sent you. Our site remembers those details from your first visit in your browser’s storage and uses them for 30 days, so they can travel with your signup. We also count visits to our site, and clicks on our sign-up buttons, by the link tags they carry, as daily totals that aren’t tied to you. No ad click IDs.
When you visit our website: the Meta Pixel, a script from Meta, tells Meta which of our pages you viewed and when you click a link to sign up, along with your IP address, your browser and device, and Meta’s own cookies. On our web app’s sign-up and billing pages, the same pixel tells Meta that you created an account or started a free trial, with that page’s address and the same browser details — never your name or email. Our server also sends Meta a copy of your sign-up with the same details, so it is still counted if your browser blocks the pixel; Meta matches the two and counts it once. Your trial gets a server copy only if you’ve told the app Yes to our ads, and that copy includes a scrambled (hashed) copy of your email. Nothing else is sent as you use the app, and if you’ve told the app No to our ads, your trial isn’t reported at all. None of this runs if your browser sends a Global Privacy Control signal.
When you visit our website: anonymous page-view stats through Umami — the page you viewed, the site that sent you, your browser, operating system and device type, and your country. Umami sets no cookies and does not identify you.
When you visit our website: Google Analytics, loaded through Google’s tag and Google Tag Manager, records the pages you view, the site and link tags that brought you, when you click to start a trial, your browser and device, and your approximate location. Google receives your IP address with it and sets its own cookies to recognise a return visit. When you create an account in our web app, our server also tells Google Analytics that you signed up and the campaign that brought you, using the same Google Analytics ID from your visit to our site. No Google script runs in our app, and nothing else about how you use it goes to Google. It does not run if your browser sends a Global Privacy Control signal.
How you use the product: your alert areas (center point + radius) and where alerts go, the vehicles you save, the alerts we send you, your lookups and scans, and a push token if you turn on push alerts.
How much you use the features with a daily limit on your plan, such as opening cars, valuations, AI verdicts, seller-message drafts and plain-English searches: a count per day, kept 35 days, along with the daily picks and digests we sent you. On the Free plan, also which cars you opened, kept 90 days so opening one again doesn’t use up your allowance.
When you sign up: a normalized copy of your email address (lowercased, and for Gmail, Outlook, iCloud and a few other providers, without the dots or +tags they ignore), so one inbox can hold only one account. And a scrambled (hashed) version of your network address, never the address itself, kept 7 days so we can limit how many accounts one network can create in a day.
Your billing status. Card numbers never touch our servers — Stripe holds them.
If you join the waitlist: your name, your email, any message you add, and how you found us.
If the app asks whether we may show you our ads on other apps: your answer, when you gave it, and whether it was on iPhone, Android or the web — on iPhone, also what Apple’s tracking permission said.
To run the service — find deals in your alert areas, send your alerts, and bill your plan.
To understand how people find and use MarketScanner.
To email you about the product. Every marketing email carries an unsubscribe link. Using it stops marketing email only — your deal alerts and account email keep coming.
Only if you allow it in the app: to show you our ads on Facebook and Instagram.
On our website, and on our app’s sign-up and billing pages, through the Meta Pixel: to measure our Facebook and Instagram ads, and to show them to people who have visited the site.
On our website, and when you sign up in our web app, through Google Analytics: to see which pages and campaigns bring people to the site and to sign up.
Our team, our marketing agency, and the service providers who run parts of the product for us — such as our hosting provider, Stripe (payments), SendGrid (product email), Google Workspace, Expo (push alerts), and Anthropic and Amazon Web Services (the AI that reads listings and runs your lookups and scans). They use it only on our instructions and under contract.
Maps. When you set or edit a search area, the map is drawn with tiles from OpenFreeMap, a free map service run by Hyperknot Software Kft. (Hungary) and delivered through Cloudflare. Loading the map sends them your IP address and the part of the map you are looking at. We do not send them your name, email or account details.
Umami — the anonymous page-view stats described above, which it records for us.
Google — what Google Analytics collects on our website and when you sign up in our web app, described above.
Meta — what the Meta Pixel collects on our website and our app’s sign-up and billing pages, the copy of your sign-up our server sends (and of your trial, only if you allow it in the app), and, only if you allow it in the app, a scrambled (hashed) copy of your email, as described below.
We don’t sell your personal data or share it with ad networks other than Meta. Meta gets what the Meta Pixel collects on our website and our app’s sign-up and billing pages, and — only if you choose to allow it in the app — a scrambled (hashed) copy of your email so we can show you our ads on Facebook and Instagram. Nothing else about you goes with that email, and nobody is on that list unless they said yes.
To keep the Meta Pixel off our website and app, use a browser that sends a Global Privacy Control signal (or turn it on in your browser’s privacy settings) — the pixel then never loads, and our server sends Meta no copy either. Blocking third-party scripts or cookies stops it too, and Meta’s own ad settings let you control how it uses what it receives.
To keep Google Analytics off our website and app, use a browser that sends a Global Privacy Control signal — it then never loads, and our server tells Google nothing when you sign up. Blocking third-party scripts or cookies stops it too.
You can turn it off any time in Account. We replace the list Meta holds every week, so once you turn it off or delete your account, you drop off it within about a week. On iPhone the choice is Apple’s tracking permission: a yes counts only if you also allow tracking in Apple’s own prompt, and turning tracking off for MarketScanner in Settings → Privacy & Security → Tracking turns it off here too the next time you open the app. On the web, if your browser sends a Global Privacy Control signal, we record your answer as no.
Delete your account from the account page; deleting purges your personal data, including any waitlist entry under the same email. Two things we keep: if you unsubscribed from our marketing email, a scrambled (hashed) copy of your email address, used only so we never email you again; and the scrambled network address from your signup, which isn’t linked to your account and is deleted after 7 days. For a copy of your data, or any state-privacy request, email support@vigilai.io.
Questions · support@vigilai.io