Privacy Policy
Last updated: April 17, 2026
1. Introduction
Curb Direct ("Curb," "we," "us," or "our") operates the Curb platform at app.curb.direct (the "Service"), a software-as-a-service application for automotive dealerships to manage private-party vehicle acquisition workflows. This Privacy Policy describes how we collect, use, and share information when you use our Service.
2. Information We Collect
Account information: When you sign up or are invited to Curb, we collect your name, email address, phone number (if provided), and role within your dealership.
Authentication data: When you sign in with Google, we receive your Google profile information (name, email, profile picture) as authorized by Google's OAuth scopes. We do not access your Google Drive, Gmail, Calendar, or other Google services beyond basic profile information.
Usage data: We collect information about how you interact with the Service, including pages visited, features used, timestamps, and IP address for security and analytics purposes.
Business data: The Service allows your dealership to input and manage customer leads, appointments, vehicle information, and related acquisition data. This data is owned by your dealership.
3. How We Use Information
- To provide, maintain, and improve the Service
- To authenticate users and secure the Service
- To send account-related emails (invitations, password resets, service notifications)
- To respond to support requests and communicate with you
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
4. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
- Within your dealership: Information you create or that is created about you in the Service is visible to other authorized users of your dealership's Curb account.
- Service providers: We use third-party providers (such as Supabase for database hosting, Vercel for application hosting, and Resend for transactional email) who process data on our behalf under contractual data protection obligations.
- Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Curb, our users, or others.
- Business transfers: In the event of a merger, acquisition, or sale of assets, information may be transferred as part of the transaction.
5. Data Security
We implement industry-standard security measures including encrypted connections (TLS), encrypted data at rest, role-based access controls, and regular security reviews. No system is 100% secure, and we cannot guarantee the absolute security of your information.
6. Data Retention
We retain your account information for as long as your account is active. Business data created within the Service is retained according to your dealership's policy. You may request deletion of your personal data by contacting us.
7. Your Rights
Depending on your location, you may have the right to access, correct, delete, or port your personal information. You may also have the right to object to or restrict certain processing. To exercise these rights, contact us at the address below.
8. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect information from children under 18.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Curb Direct
Email: [email protected]
Web: app.curb.direct