DrivrShield AI Privacy Policy

1. Scope and who we are

This Privacy Policy explains how DrivrShield, LLC (“DrivrShield,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when an adult in the United States uses:

• the DrivrShield AI application (the “App”);
• www.drivrshieldai.com and app-connected webpages (the “Website”);
• customer support and account communications;
• an optional request to be contacted by an in-house DrivrShield administrator; or
• a separately ordered Human Deal Analysis, when information is submitted through that service’s form or you expressly choose App content to include.

The App is a monthly automotive education and information subscription. It can explain your dealership documents, vehicle-history information, vehicle specifications, maintenance topics, and general repair-price ranges. The App is designed for United States users age 18 or older.

The App is separate from DrivrShield’s human services. The App does not grade a specific deal, negotiate, arrange financing, tell you to sign, determine whether a vehicle is safe to drive, or include the $500 Potential Savings Guarantee. Only a separately purchased and expressly eligible Human Deal Analysis or higher human-service package may qualify under separate written terms. This service distinction does not change the privacy protections in this Policy.

This Policy does not govern an unrelated third-party website, dealership, lender, repair facility, vehicle-history provider, app store, or other service that has its own privacy practices.

2. Privacy summary

• We collect account information, your questions, vehicle and deal details, the uploads you select, app usage and security data, and information needed to provide support and manage the subscription.
• Your questions, photographs, documents, and related information may be processed by approved hosting, storage, optical-character-recognition, and AI service providers to produce the answer you requested. Vehicle details, such as a full VIN, year, make, model, trim, and mileage, and your saved ZIP code and search radius may also be sent to independent vehicle-data and market-data services, such as MarketCheck, Visor, and NHTSA, as described in Section 9.10.
• Location is optional. The App accesses precise or approximate location only after you request a location-dependent feature and grant device permission. It does not collect location in the background. Exact coordinates are discarded after the requested response is produced; city and state may be retained when needed for the request or account record. The state you choose at sign-up, and any ZIP code, search radius, and city or address you enter in Settings, are kept with your account settings until you change them or delete your account. A saved ZIP code, radius, and city or address are sent with the first message of each new chat, and the ZIP code is used for listing searches and Garage valuations, as described in Sections 3.5, 9.2, and 9.10.
• App content is never automatically sent to a human Deal Specialist. You must separately submit a Human Deal Analysis and may choose which existing App items, if any, are added to that human review.
• We do not sell personal information, use advertising identifiers, or disclose personal information for cross-context behavioral advertising.
• We may send occasional marketing email, marketing text messages, or requested physical mail. We do not make marketing calls. Marketing texts require a separate optional consent and are never a condition of purchase.
• Service calls occur only when you request contact or have an active individual human review. A call is recorded only after notice and your affirmative consent. If you decline recording, the conversation continues by email instead.
• Ordinary chats, uploads, and support items generally follow a rolling 12-month retention period measured from each item’s creation. Garage records, including receipt photos and vehicle photos, are not on that schedule and are not deleted after a set period; they are kept until you delete them, remove the vehicle, or delete your account. Records of the valuations and recall emails already provided for your account stay until you delete your account (see Section 13). Call recordings are generally retained for 12 months from the call date. Essential active account, consent, transaction, security, and dispute records may follow the exceptions stated in Section 13.
• Every United States customer may ask to access, correct, delete, or obtain a copy of covered personal information, and may appeal a denied privacy request, subject to identity verification and lawful exceptions.

3. Personal information we collect

We collect only the categories reasonably needed for the functions described in this Policy. The exact information depends on which features you use.

3.1 Account and identity information

We may collect your first and last name; a chosen display name; email address; the state where you are buying a vehicle; telephone number; account identifier, authentication status, and account settings; encrypted or hashed authentication credentials managed through our backend provider; information received when you use Sign in with Apple or Google Sign-In, such as the provider identifier, name, or email that you and the provider authorize; and your confirmation that you are at least 18.

DrivrShield never receives your Apple or Google account password. If you create an email-and-password account, use a unique password.

3.2 Subscription and transaction information

If you subscribe through our website, our payment processor handles your payment credentials, and we receive the product purchased, subscription status, purchase and renewal dates, transaction identifiers, and refund status. If you subscribe in our iPhone app, Apple processes the purchase under its own terms, and we receive purchase and subscription status through our subscription-management provider, RevenueCat (see Section 9.4). When you set up website billing, we give Stripe, our payment processor, your email address and DrivrShield account identifier, and Stripe collects your card details directly. DrivrShield never receives or stores your complete payment-card number. When you check out on our website or tap Subscribe in our iPhone app, we keep a purchase acceptance record: the version of the Terms you accepted, the time, the channel, the product, and the price shown to you.

3.3 Vehicle, deal, financing-figure, and ownership information

Depending on your question, we may collect the vehicle identification number (VIN), year, make, model, trim, mileage, equipment, condition description, and vehicle location; dealership, seller, repair-facility, or vehicle-listing information; advertised price, proposed selling price, fees, taxes, incentives, rebates, add-ons, optional products, deposit, down payment, and trade-in information; APR, term, payment, amount financed, finance charge, total of payments, payoff, negative equity, and general credit range you choose to provide; maintenance history, stated symptoms, dashboard warnings, requested service, quoted parts, labor, and repair-price information; and questions, preferences, comparisons, and notes you choose to provide.

If you use the Garage, we store the vehicles you save, including year, make, model, trim, specifications, and whether you own the vehicle or are shopping for it; the VIN you save, which we store encrypted and of which the App shows only the last four characters unless you choose the full VIN for an ownership record or download your data (the full VIN is still sent to NHTSA to decode it and to MarketCheck for valuations, as described in Section 9.10); odometer readings with their dates, and the monthly mileage estimated from them; the purchase or saved date and any notes saved with the vehicle; an optional loan payoff amount and the equity estimate calculated from it; your maintenance schedule and when each item was last done; service-log entries, including date, mileage, work performed, shop, and cost; market-value estimates, each with the mileage and ZIP code used to produce it; monthly vehicle reports; your recall-email and service-reminder email choices; and records of the valuations and recall emails already provided for your account.

Tools. The Packed Payment Detector and the out-the-door calculator run in your browser: nothing you type in them is sent to us or stored. Fee Check, Recall Check, the Dealer Fee Map and the pre-visit briefing require an account and the plan that includes them (DrivrShield AI Lite or DrivrShield AI Pro; the briefing is Pro’s). The state, fee or VIN you look up in them is used to answer that request and is not stored beyond it; our logs keep at most the last four characters of a VIN. A briefing you choose to make is saved to your account as described above.

DrivrShield does not pull a credit report, obtain a credit score from a reporting agency, take a credit application, or arrange financing. Information about a credit range or financing proposal is collected only when you choose to enter or upload it for explanation.

3.4 Your content and uploaded documents

We may collect content you type, paste, photograph, scan, or upload, including AI chat questions and conversation history; dealer worksheets, proposals, buyer orders, advertisements, quotes, and screenshots; vehicle-history reports, including an authorized CARFAX, AutoCheck, or similar report; repair estimates, maintenance records, photographs, and related files; support messages and attachments; feedback, survey responses, and voluntarily submitted reviews; and content you specifically select for an optional Human Deal Analysis.

Upload only material you own or are authorized to use and disclose.

In the Garage, you may attach receipt photos to service-log entries and add a photo of your vehicle. We re-encode each photo when it is uploaded and remove its embedded metadata, including GPS location data, before storing it. What is visible in the photo is kept: a receipt can show a name, address, or full VIN, so redact what you do not want stored. An ownership-record PDF is created only when you request it, and DrivrShield does not keep a copy. It masks the VIN to its last four characters unless you choose the full VIN, and includes receipt images only if you choose to include them; a receipt image can show the full VIN even when the VIN is masked.

3.5 Optional location information

You may share precise or approximate location to obtain locally relevant automotive answers, searches, prices, or requested human-review assistance. You control this through the device permission and the in-app choice.

The App does not collect location in the background. Location is requested only when you actively invoke a location-dependent feature. Exact latitude and longitude are used transiently to produce the requested response and then discarded. We may retain city and state when needed to explain local information, document the request, or connect you with a requested human service.

Separately from device location, you may enter a ZIP code, search radius, and optional city or address in Settings. We store them with your account settings and in your browser until you change or clear them; deleting your account removes them from your account and from the browser you use to delete it. Once you save a ZIP code, it is sent, together with your search radius and any city or address you entered, to our AI service providers with the first message of every new chat, whether or not your question is about a local search, and is stored with that chat except in a temporary chat. Dash may use the ZIP code and radius to center market-listing searches, and the ZIP code is sent with Garage valuations, as described in Sections 9.2 and 9.10.

3.6 Device, network, usage, and diagnostic information

We may collect your Internet Protocol address; device type, operating system, language, time zone, app version, and browser type for Website use; application events, feature interactions, session timestamps, page or screen activity, and referral or campaign source; crash, error, performance, and diagnostic logs; security events, authentication attempts, abuse signals, and audit logs; push-notification token and notification preferences; and a DrivrShield account or installation identifier needed to operate the App.

DrivrShield does not use a mobile advertising identifier and does not use this information to follow you across unrelated companies’ apps or websites.

3.7 Communications, support, and contact requests

We collect messages sent to our support or privacy addresses, contact-form entries, your preferred contact method, appointment or availability information, and records of our response. If you ask to be contacted, an in-house DrivrShield administrator may contact you by the method you select, normally email or telephone.

Telephone contact is limited to support you requested or an active individual Human Deal Analysis. We do not make marketing telephone calls.

3.8 Recorded service calls and transcripts

When you agree to a recorded support or active-review call, we collect the audio, date, time, participants, call metadata, and any resulting transcript or notes. We do not record unless the required notice has been given and each participant has affirmatively agreed. If you do not agree, the conversation moves to email.

3.9 Marketing and physical-mail information

We may collect marketing preferences and consent records. We collect a postal name and address only when you voluntarily request or agree to receive physical mail or when another disclosed service genuinely needs it. We do not obtain a postal address merely because you use the App.

3.10 Information we ask you not to submit

Do not submit a complete Social Security number; a complete bank-account or payment-card number; a banking, lender, dealership-system, email, Apple, Google, or device password; a one-time authentication code or security answer; a complete credit application; a driver’s-license or government-identification image unless a specific, separately disclosed verification process requires it; a signature image; medical, genetic, or biometric information; highly sensitive information unrelated to your automotive question; or another person’s personal information unless you are authorized to provide it and it is necessary for the requested service.

Redact unnecessary information before uploading. If prohibited or unnecessary sensitive information is submitted, we may restrict access to it, redact it, quarantine it, or delete it.

4. Sources of personal information

We collect personal information from you, including through account creation, chat, forms, uploads, permissions, support, and consent choices; from your device, browser, and interactions with the App or Website; from Apple or Google when you use federated sign-in or purchase through an app store; from service providers operating on our behalf, such as our backend, AI, OCR, communications, and diagnostic providers; from public automotive, safety, recall, specification, and market-information sources used to answer your request; and from an in-house administrator or Deal Specialist who records notes during requested support or a separately purchased human service.

We do not buy consumer profiles from data brokers.

5. How we use personal information

We use personal information to:

• create, authenticate, secure, and maintain accounts;
• confirm subscription status and provide paid features;
• receive, store, extract, read, and analyze the text, photographs, and documents you select;
• generate AI explanations, comparisons, questions, scripts, estimates, and other requested automotive information;
• keep your Garage vehicles and records; look up recalls, crash ratings, and stock photos for them; estimate market value and equity when you request a valuation; track maintenance; and send the recall and service-reminder emails you turn on;
• use optional location for a requested local answer and then discard exact coordinates;
• provide customer support, respond to contact requests, and communicate about an active Human Deal Analysis;
• transfer only the App materials you selected into a separately submitted Human Deal Analysis;
• send receipts, security notices, policy notices, subscription notices, requested reminders, and other transactional communications;
• send optional marketing communications in the channels you permit;
• publish an authorized review using only your approved first name or display name and approved review text;
• monitor performance, correct errors, prevent fraud and abuse, enforce service terms, and protect customers, DrivrShield, and others;
• investigate security events, preserve evidence, manage disputes, and comply with valid obligations;
• maintain consent, opt-out, access, and deletion records;
• perform internal quality evaluation and improve the service under the controls in Section 6; and
• create and share deidentified or aggregate research statistics under the controls in Section 10.

We do not use the App to make a decision about a person’s eligibility for credit, insurance, employment, housing, education, health care, or another similarly significant service.

6. How AI and OCR process your content

6.1 Processing needed to answer a request

The App uses automated systems. Your question, image, document, and related context may be sent to one or more approved AI, model-hosting, or OCR providers to extract text, interpret the submission, and generate the requested answer. This processing is necessary to provide the feature you invoke.

We may use more than one major AI or model provider available in the United States to support quality, capability, reliability, or fallback routing. We identify those recipients by service category in this Policy, because public disclosure of the live security architecture could create misuse risk. As a verified customer, you may request the current list of specific recipients of your personal information by emailing help@drivrshieldai.com; we will provide the information required for you, subject to identity verification and lawful security limitations.

Providers may process information only to perform contracted services for DrivrShield. They are restricted from selling it, using it for their own advertising, reidentifying deidentified information, or using it for unrelated purposes. Our provider settings and contracts are configured to prevent general model training on identifiable customer content unless you have separately opted in as described below.

6.2 Separate, optional AI-improvement consent

Receiving an AI answer does not by itself authorize DrivrShield or an outside developer to use your identifiable chat history, uploads, or call content to train a general-purpose model.

We may invite you to give a separate, optional AI-improvement consent. Declining never affects your Subscription, customer support, or your ability to buy a Human Deal Analysis. If you opt in, we may select portions of eligible chats or human-service materials for controlled evaluation, testing, or improvement. Before content is provided to an outside AI developer, we remove direct identifiers such as name, email, telephone number, VIN, exact location, financial account data, and other details reasonably capable of identifying you.

Raw call audio remains internal and is never provided to an outside AI developer. Only a deidentified transcript excerpt may be provided, and only under written restrictions that prohibit reidentification, advertising, sale, unrelated model training, and retention beyond the assigned work.

You may withdraw AI-improvement consent at any time in App settings or by emailing help@drivrshieldai.com. Withdrawal stops new collection and future use under that consent after the request is processed; it does not invalidate processing already completed. We will delete your linked source material from active improvement datasets unless a stated retention exception applies.

6.3 Human access

Authorized DrivrShield personnel may access content only when reasonably needed for support, security, abuse prevention, quality control under your choices, privacy-request processing, a dispute, or a human service you separately requested. Access is role-based, logged where feasible, and subject to confidentiality and retention controls.

7. Human Deal Analysis and administrator contact

App chats and uploads are not automatically reviewed by a Deal Specialist and are not automatically added to a Human Deal Analysis.

To request human review, you must submit the separate Human Deal Analysis form and complete any required purchase. The form lets you choose whether to include particular existing App conversations or files. If you choose to include them, an authorized in-house administrator may review the selection and add it to your human-service record. Only the content you selected is transferred.

If you ask to be contacted, an in-house administrator may use the email address or telephone number you selected. Telephone contact is for the requested service or an active individual review, not marketing. The $500 Potential Savings Guarantee, when available, belongs only to an expressly eligible human-service purchase and does not change your data-sharing choices.

8. Device permissions

The App asks for the following permissions only when the related feature is used:

• Camera: to photograph a dealer worksheet, repair estimate, vehicle, or other material you select.
• Photos and files: to upload the images and documents you select.
• Location: to provide a requested local answer or human-service connection.
• Notifications: to provide requested account, service, security, or permitted marketing notifications.

Access is limited to the permission you grant. DrivrShield does not scan your entire photo library, continuously use the camera, access contacts, read call history, activate a microphone in the background, monitor Bluetooth, or track location in the background. You may revoke an optional permission in device settings, although the related feature may no longer work.

9. When we disclose personal information

We may disclose the categories described in Section 3 to the following types of recipients for the stated purposes.

9.1 Backend platform

Our backend platform provides account authentication, database, file-storage, and related services. It may store account details, chats, uploads, support records, app events, and other data required to operate DrivrShield AI.

9.2 AI, model, and OCR service providers

Approved providers may receive your prompt, image, document, extracted text, vehicle details, and related context to produce the requested output. Each request also includes the state saved in your account, so answers can reflect that state’s taxes and fees. If you open a chat from the Garage, the context sent with your next message may include the vehicle’s details and when you bought or saved it, the last four characters of its VIN, its odometer reading and estimated monthly mileage, the status of its maintenance schedule, loan payoff and estimated equity, recent service-log entries including shop and cost, its valuation, recall, and monthly-report information, and, for a vehicle you are shopping for, its crash ratings. If you saved a ZIP code, it is sent with the first message of each new chat, together with your search radius and any city or address you entered. A search query written from your question may be sent to a text-embedding provider to search DrivrShield’s reference library. Context sent with a message is stored with the chat, except in a temporary chat, and may be sent again with later messages in that chat. The contractual and consent restrictions in Section 6 apply.

9.3 Apple and Google

Apple or Google may process sign-in and app-store subscription information under their own terms. We exchange only the information needed to authenticate you, confirm entitlement, manage subscription status, address a refund or support issue, and prevent fraud.

9.4 Operational service providers

Vendors may process limited information for website hosting and request logs, payments, email, text messaging, push notifications, analytics, crash reporting, security monitoring, customer support, file conversion, and other business operations. RevenueCat, our subscription-management provider, receives your DrivrShield account identifier when you sign in to our iPhone app and, for purchases made in the app, your purchase and subscription status and store transaction identifiers, along with basic device and app information its software sends (such as operating system and app version). Each provider receives only the information reasonably needed for its assigned service and is bound by appropriate use, confidentiality, security, and deletion restrictions.

9.5 Requested physical-mail and marketing providers

If you request or authorize physical mail, a mailing provider may receive your name, postal address, and the material needed to send it. A DrivrShield marketing provider may receive only information necessary to carry out an authorized DrivrShield campaign and may not build its own customer profile, sell the information, or use it for another client.

9.6 Reviews and testimonials

With your separate permission, we may give our marketing team or a contracted marketing provider your approved review text and only your approved first name or display name. We do not attach your email, telephone number, location, device identifier, deal documents, or private chat history. Submitting a review does not by itself authorize publication. You may request future removal by emailing help@drivrshieldai.com; removal may not retrieve copies already lawfully printed or reposted by others.

9.7 Deidentified or aggregate research

We may disclose statistics such as user percentages, feature trends, broad vehicle categories, or other aggregate findings to universities, educational organizations, research firms, or other research entities. We do not include direct identifiers, and we apply reasonable technical and contractual measures to prevent the information from being associated with you. Recipients must not attempt to reidentify or combine the information to identify a customer.

Dealer Fee Index. After Dash reads your first worksheet, buyer’s order, quote or contract, we ask whether to add the dealer fees from every sheet Dash reads from then on to the Dealer Fee Index. If you say yes, then for each sheet read after that we record the dealer-fee, add-on and finance-office product lines: the amount, the label as printed, whether the sheet says the item was installed before the sale, the store (its name, city and state), the month, and a one-way code made from the sheet so the same sheet is not counted twice. We do not record your name, your account, the vehicle, its VIN, your price, or the day. These records carry no name or account. They are removed when you withdraw them or delete your account. Saying no, or “Not now”, changes nothing else about the service. The published index shows only stores with fees from three or more different sheets.

9.8 Protection, compliance, and valid process

We may disclose information when reasonably necessary to respond to valid legal process, protect the rights or safety of customers or others, investigate fraud or a security event, enforce agreements, or establish or defend a claim. We limit the disclosure to what is reasonably required and challenge an improper request when appropriate.

9.9 Business transaction

If DrivrShield is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of its business, information may be reviewed or transferred as part of that transaction, subject to confidentiality controls and applicable rights. A successor may use personal information only consistently with this Policy unless it gives required notice and obtains any required new consent.

9.10 Vehicle-data, market-data, and other third-party services

To answer vehicle questions and run Garage features, our servers send limited vehicle and location information to the following independent services, in addition to the providers described in Sections 9.1 through 9.4. We do not send them your name, email address, or DrivrShield account identifier, and because the requests come from our servers, they do not carry your IP address.

• MarketCheck (vehicle market data) receives the full VIN, the current odometer reading, and your saved ZIP code when you request a Garage valuation. When Dash looks up comparable listings or price statistics, MarketCheck may receive the year, make, model, and trim, a ZIP code and search radius, and a mileage limit.
• Visor (vehicle market data) may receive a full VIN that you type in chat or that Dash reads from a photo you upload, and the year, make, model, and trim, a ZIP code and search radius, and a mileage limit, when Dash looks up a listing, price history, comparable vehicles, or price statistics.
• The National Highway Traffic Safety Administration (NHTSA) receives the full VIN when you enter a VIN in the Garage or Dash decodes a VIN, and the year, make, and model, sometimes with a model name taken from the trim, to look up recalls, crash ratings, and model lists. For vehicles with recall emails turned on, this recall lookup runs daily.
• fueleconomy.gov, the U.S. government fuel-economy service, receives the year, make, and model to look up specifications and fuel economy.
• Wikimedia Commons receives the year, make, and model of a Garage vehicle that has no photo of your own, to find a stock photo of that model.

Website and App pages load fonts from Google Fonts, so your browser sends Google your IP address, browser information, and our site’s address when a page loads.

Each of these services handles the requests it receives under its own terms and privacy practices.

10. No sale, no behavioral-ad sharing, no consequential profiling

DrivrShield does not sell personal information for money or other valuable consideration. We do not disclose personal information for cross-context behavioral advertising or targeted advertising based on activity across unrelated companies. The App does not use advertising identifiers.

We do not use personal information to profile you in furtherance of a decision that produces a legal or similarly significant effect, such as a lending, insurance, employment, housing, education, or health-care eligibility decision.

Service-provider processing, customer-directed disclosure, an authorized review, and properly deidentified or aggregate research are not sales or behavioral-ad sharing. If our practices ever change, we will update this Policy, the app-store disclosures, and the consent controls before the new practice begins, and we will honor applicable opt-out rights.

We process recognized browser-based opt-out preference signals, including Global Privacy Control where applicable, for Website activity. Because we do not sell personal information or use it for behavioral-ad sharing, honoring the signal should not materially change the present service.

11. Communications and marketing choices

11.1 Transactional and service communications

We may send account-verification messages, password-reset messages, receipts, subscription notices, security alerts, support replies, privacy-request updates, Human Deal Analysis order emails, including the email telling you your report is ready, and other active human-review communications. These are not marketing. You may not be able to opt out of messages necessary to operate an active account, complete a requested service, or protect security.

If you turn on recall or service-reminder emails for a vehicle in the Garage, we send them to your account email address through our email-delivery provider. Each email includes the vehicle’s year, make, and model and either the NHTSA recall campaign details or the service item and when it is estimated to be due, by mileage or date, based on the mileage and service dates in your Garage. You can turn these emails off in the Garage.

11.2 Marketing email

We may occasionally send marketing email. Each commercial email will identify DrivrShield, include the required public postal address, and provide a clear unsubscribe method. We process unsubscribe requests promptly and within the period required by applicable rules. Unsubscribing from marketing does not cancel your Subscription or stop required service messages.

11.3 Marketing text messages

Marketing texts require a separate, optional consent that identifies DrivrShield, the telephone number, the type of messages, the expected frequency, and any use of automated technology. Consent is never a condition of purchase. Message and data rates may apply. Reply STOP to end marketing texts and HELP for help, or email help@drivrshieldai.com. If you opt out, you may still receive a one-time confirmation and nonmarketing messages you request.

11.4 No marketing calls

DrivrShield does not make marketing telephone calls. We call only in response to your request or in connection with an active individual Human Deal Analysis or support matter.

11.5 Physical mail

We may occasionally send physical marketing only to a postal address you voluntarily provided for that purpose or otherwise authorized for such use. To stop future physical marketing, email help@drivrshieldai.com with the name and mailing address to suppress. We may retain a minimal suppression record so the opt-out remains effective.

11.6 SMS / Text Dash

We process your mobile number, message content, optional MMS images, delivery metadata, and entitlement state (free-message count, Deal Pass access_until, app-link verification) to provide Text Dash, prevent abuse, complete payment, and meet legal duties. U.S. numbers only for this product.

• Payment. Deal Pass payments are processed by our payment provider (e.g., Stripe). We store entitlement and transaction references, not full card numbers.
• Retention. Ordinary SMS/MMS items follow the rolling retention schedule in this Privacy Policy unless a shorter period is stated for security. Do not use SMS content for optional AI-improvement training unless you give a separate opt-in we can record outside a pre-checked SMS reply.
• STOP. Stops SMS sends as described in the AI Terms. Does not delete your account by itself. Use in-app or privacy request paths for deletion.
• No sale of SMS content; no sharing with dealers/lenders for their marketing.
• Reassigned numbers. We may start a new ownership epoch when a number is reassigned so a prior user’s access and threads do not follow the phone.

The first SMS and any Text Dash explanation, when that channel is offered, link here. We do not publish a Text Dash number or an SMS marketing call-to-action until messaging brand and number registration (for example, 10DLC) is live.

12. Service-call recording

We record a support or active Human Deal Analysis call only after giving an audible notice and obtaining each participant’s affirmative consent. Remaining on the line without a clear affirmative response is not consent.

If a participant declines recording, we will not proceed by telephone; the conversation continues by email. This is an internal risk-management and quality-control procedure, not a statement that recording is required by law.

Recordings and internal transcripts may be used for documenting the requested service and your instructions; quality review and training for the DrivrShield team; investigating complaints, errors, fraud, or security concerns; internal risk management; and AI improvement only when the separate optional consent in Section 6.2 applies.

Raw audio stays within DrivrShield and its contracted call-storage or transcription service and is never provided to an outside AI developer. Any outside AI-development use is limited to a deidentified transcript excerpt under the restrictions in Section 6.2.

13. Retention and deletion schedule

We retain personal information only for the period reasonably necessary for the purposes stated here, subject to the following default schedule:

The 12-month period is rolling: each ordinary chat, upload, support item, human-service item, recording, transcript, or note reaches its own deletion date based on when that item was created. A daily deletion job removes chats, Human Deal Analysis records, and in-app feedback reports once they pass 12 months. Garage records are not on the 12-month schedule; they are kept for the periods shown in the Garage rows above. If a photo file cannot be removed when you delete a logbook entry or replace or remove a photo, it may remain in storage until your account is deleted.

We may retain a limited record longer when reasonably necessary for an active account, subscription entitlement, tax or transaction documentation, a fraud or security investigation, a dispute, a preservation request, a valid legal obligation, or to honor an opt-out. When the exception ends, the information is deleted or deidentified. Backup copies may remain for a limited recovery cycle and are not restored to ordinary use after a valid deletion.

14. Account deletion and subscription cancellation are different

You may request deletion through the in-app account controls or by emailing help@drivrshieldai.com. Deleting your account removes or deidentifies associated personal information, subject to the exceptions in Section 13. This includes your Garage vehicles, records, receipt photos, and vehicle photos, and your deals with their sheets, photos, watch links and notes, and photo links in an earlier data download stop working. Dealer Fee Index records, which carry no name or account, are removed too (see Section 9.7). It does not remove an ownership-record PDF or data download already saved to your device, or settings saved in a browser other than the one you use to delete the account, and we cannot retrieve vehicle and location information already sent to the services described in Section 9.10, which handle it under their own terms.

Deleting an account does not necessarily cancel a subscription billed by an app store. Cancel the subscription separately through the channel that bills it. Likewise, canceling a subscription stops future renewal but does not automatically delete your DrivrShield account or content.

Before account deletion, we may ask you to confirm your identity and will warn you that chats, uploads, and access may be permanently lost. Deleting your account cancels an active website subscription. Our payment processor keeps its customer record, which includes your email address and DrivrShield account identifier, and its transaction records under its own terms and legal obligations, and we keep a record of the deletion request, including your email address and payment-processor customer identifier, as described for privacy-request records in Section 13.

15. Security and incident response

DrivrShield uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and the size and complexity of the service, including, as applicable: encryption in transit and at rest where supported; role-based access and least-privilege permissions; multifactor authentication for administrative access; credential, key, and secret management; access, change, and security-event logging; secure software-development and vulnerability-management practices; vendor review and written data-protection requirements; protected backups and tested deletion procedures; personnel confidentiality and security training; and an incident-response and customer-notification process.

No system, transmission, provider, or device can be guaranteed perfectly secure. Protect your account credentials, enable device security, avoid uploading unnecessary sensitive information, and contact help@drivrshieldai.com promptly if you suspect unauthorized access.

If a security incident affects personal information, we will investigate, contain, document, and provide notice to affected individuals and authorities as required. Service providers must promptly report relevant incidents to DrivrShield and cooperate with response and deletion duties.

16. Privacy rights for United States customers

DrivrShield extends the following core privacy choices to every United States customer, even when a particular state rule would not otherwise require every choice. Depending on the request and applicable law, you may:

• confirm whether DrivrShield processes your personal information;
• access the personal information we maintain about you;
• correct inaccurate personal information;
• delete covered personal information;
• obtain a portable copy of information you provided, or a broader copy where required;
• request the categories of recipients and, where applicable, the specific third parties to which your personal information was disclosed;
• withdraw optional consent for precise location, AI improvement, marketing texts, a published review, or another consent-based use;
• opt out of sale, targeted advertising, or significant-effect profiling if we ever begin such processing;
• use an authorized agent where applicable; and
• appeal a denied privacy request.

We will not discriminate against you for exercising a privacy right. A privacy choice does not require us to provide a feature that cannot function without the requested information. For example, denying location permission prevents a location-dependent answer but does not prevent use of unrelated App features.

16.1 How to submit a request

Use one of these methods:

• email help@drivrshieldai.com with the subject “Privacy Request”; or
• use the in-app Download my data control on your Account page to get a copy of your data, or the Delete account control to delete your account. The download includes your Garage records with the full VIN, and links to your receipt and vehicle photos that anyone who has the links can open for 7 days. For any other request, such as a correction, use email.

Describe the right you are requesting and identify your account email. Do not send a password, a complete Social Security number, or a complete payment-card number.

16.2 Verification and response

We verify a request in a way proportionate to its sensitivity, such as by confirming control of the account email, using an authenticated in-app flow, or matching limited account details. We do not collect excessive new information merely to verify a request.

We aim to respond within 45 days. If additional time is permitted and reasonably needed, we will explain the reason and the expected completion date. Requests are generally free. We may charge a permitted reasonable fee, or decline a request that is manifestly unfounded, excessive, technically impossible, or outside the requester’s rights, after providing the explanation required by applicable law.

16.3 Authorized agents

An authorized agent may submit a request where permitted. We may ask for proof of the agent’s authority and may verify the request directly with you. A properly authorized request will not be rejected merely because an agent used an approved method.

16.4 Appeals

If we deny a privacy request, the response will explain the decision and how to appeal. Submit an appeal to help@drivrshieldai.com with the subject “Privacy Appeal” within 60 days of the decision. A person who did not make the initial decision reviews the appeal when practicable. We aim to respond to an appeal within 45 days or the shorter period required by applicable law.

17. State-specific notices

This section supplements the rest of the Policy. Mandatory rights in your state control if they provide greater protection.

17.1 California notice at collection

We may collect the following categories of personal information described by California law: identifiers; customer records; commercial and subscription information; Internet or electronic-network activity; approximate or customer-activated precise geolocation; audio information from a consented service call; customer content; professional or service communications; and inferences limited to providing your requested automotive answer or service.

We collect and use those categories for the purposes in Section 5 and retain them according to Section 13. Precise geolocation is used only for a feature you request, with permission, is not collected in the background, and exact coordinates are discarded after the response. We do not use or disclose sensitive personal information to infer characteristics unrelated to the requested service.

We do not sell personal information or share it for cross-context behavioral advertising. California customers may request to know, access, correct, delete, or obtain a copy of covered information and may exercise any applicable right to limit certain uses of sensitive personal information. The request methods are in Section 16.

17.2 Oregon

An Oregon customer may request the categories of third parties and, where the applicable rule requires it, a list of the specific third parties to which DrivrShield disclosed the customer’s personal information. We provide the responsive information after verification, subject to lawful security protections.

17.3 Nevada

DrivrShield does not sell covered information as defined by applicable Nevada privacy rules. A Nevada customer may nevertheless submit a verified sale opt-out request to help@drivrshieldai.com, and we will record the preference.

17.4 Other states

Residents of Colorado, Connecticut, Delaware, Florida, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Rhode Island, Tennessee, Texas, Utah, Virginia, and any other state with applicable consumer-privacy rights may exercise the rights available under that state’s current law through the methods in Section 16. This Policy is not intended to reduce a right that cannot be waived.

18. Children’s privacy

DrivrShield AI is for adults age 18 or older. We do not knowingly collect personal information from a child under 13 and do not permit a person under 18 to create an account. If we learn that a minor submitted personal information, we will take reasonable steps to remove it and close the account. A parent or guardian may report a concern to help@drivrshieldai.com.

19. Third-party services and links

The App may link to a dealership, vehicle-history provider, manufacturer, public safety source, repair facility, app store, or other third party, and you may upload a report obtained from a third party. DrivrShield does not control an independent third party’s collection or use of information. Review that party’s privacy terms before providing information. DrivrShield’s own servers also send limited vehicle and location information to independent vehicle-data, market-data, and public-data services, as described in Section 9.10.

Sign in with Apple, Google Sign-In, and app-store billing are governed in part by Apple’s or Google’s own terms and account settings. Revoking a federated sign-in connection does not necessarily delete information already stored in your DrivrShield account; use the deletion process in Section 14 for that request.

20. United States service

DrivrShield AI is offered only to adults in the United States. Information may be processed in the United States and in other locations where an approved service provider operates, subject to contractual and security controls. The App is not offered as a service directed to residents of another country.

21. Changes to this Policy

We may update this Policy to reflect a product, vendor, security, or regulatory change. We will post the updated version with a new effective date. Before a materially different use of previously collected personal information begins, we will provide prominent notice and obtain new consent when required. We will not treat silence or continued use as consent when affirmative consent is required.

22. Contact us

• Privacy requests and questions: help@drivrshieldai.com
• Customer support: help@drivrshieldai.com
• Website: www.drivrshieldai.com

DrivrShield, LLC is a Florida limited liability company based in Ocala, Florida. Its street address is not published for security reasons. A verified individual or agency with a valid need for formal service information may contact help@drivrshieldai.com for the appropriate process.