Privacy Policy

1. Overview

Drifolio respects your privacy. This Privacy Policy explains how Drifolio collects, uses, stores, shares, and protects information when you use our website, vehicle profile tools, account features, public profiles, private sharing features, Garage News, subscription services, membership management, vehicle transfer features, ownership history tools, referral features, notification center features, maintenance reminder features, recall campaign features, push notifications, installable web app features, and related platform features.

Drifolio operates in the United States. We process information in accordance with applicable U.S. privacy and consumer protection laws, including applicable state privacy laws where required. For users outside the United States, including users in the European Union, we also honor applicable privacy rights such as the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) where required.

2. Information We Collect

We may collect information you provide directly, including your name, email address, account details, vehicle information, photos, service records, ownership notes, private vault documents, sale-related listing information, vehicle transfer invitations, buyer or recipient email addresses, ownership history entries, referral information, notification preferences, recall review activity, support messages, newsletter subscriptions, and other information you choose to submit.

Vehicle information may include year, make, model, trim, VIN, mileage, colors, ownership status, registration or warranty dates, maintenance records, service providers, receipts, service intervals, Next Due mileage or date targets, reminder status, title status, recall campaign review status, transfer status, ownership history, location information you choose to provide for sale listings, and photos.

We may also collect technical and usage information, including IP address, browser type, device type, operating system, referring pages, pages viewed, clicks, interactions, session activity, cookies, log data, approximate location derived from technical signals, install status, notification permission status, notification center activity, read/unread status, push subscription endpoints, public push keys, device labels, and related push delivery metadata.

3. Information from Third-Party Services

If you sign in with Google or another authentication provider, we may receive information such as your name, email address, profile image, and account identifier as permitted by that provider and your settings.

If you purchase a paid subscription, payment information is processed by Stripe or another payment provider. Drifolio does not store full credit card numbers. We may receive payment status, subscription plan, customer identifier, renewal date, billing status, cancellation status, pending plan changes, trial status, promotional eligibility, and related transaction metadata from the payment provider.

If you interact with Drifolio through social media or if Drifolio publishes content through connected social integrations, we may process information necessary to operate those integrations, such as page identifiers, post identifiers, permissions, publishing results, and API status messages.

4. How We Use Information

• To create, operate, and maintain your Drifolio account.
• To provide vehicle profiles, private sharing, public profiles, records, photos, Garage News, maintenance reminder features, notification center features, and vehicle transfer tools.
• To process subscriptions, billing status, plan limits, paid feature access, transfer trial eligibility, referral rewards, push notification eligibility, and Premium/Pro email reminder eligibility.
• To facilitate vehicle transfer invitations, acceptance flows, ownership history records, buyer email locks, and related transfer notices.
• To provide support, respond to requests, and send service-related communications.
• To personalize and improve the platform, user experience, performance, and security.
• To detect, prevent, and respond to fraud, spam, abuse, malware, unauthorized access, and security incidents.
• To analyze usage, troubleshoot errors, measure platform performance, and improve product features.
• To comply with legal obligations and enforce our Terms of Service.

5. Public Profiles, Private Sharing, and Sale Listings

If you make a vehicle profile public, the selected vehicle information, photos, records, profile details, sale information, and related content may be visible to anyone who visits the public profile or discovers it through a shared link.

If you use private sharing features, recipients of the share link may be able to view selected vehicle information until the link expires, is revoked, or otherwise becomes unavailable.

If you mark a vehicle for sale, selected sale information such as asking price, city/state, title status, seller note, and contact preference may be displayed according to the visibility settings and plan features available to you.

You are responsible for reviewing what you publish or share and for removing sensitive information before making content public or sending a private share link.

If you use vehicle transfer features, Drifolio may process vehicle transfer invitations, buyer or recipient email addresses, transfer tokens, acceptance records, transfer status, ownership dates, ownership history records, and related notification activity. This information is used to facilitate transfers, maintain vehicle history, protect account security, prevent abuse, and evaluate transfer-related membership promotions where available.

Vehicle transfer tools do not replace legal title, registration, lien, inspection, tax, insurance, or DMV requirements. Users are responsible for completing any required legal ownership transfer steps outside of Drifolio.

6. Maintenance Reminders, Notification Center, Push Notifications, and Email Notices

If you add maintenance records with Next Due mileage or date targets, Drifolio may use that information to show dashboard reminders and, depending on your plan and settings, send push notifications or email reminders. Free members can view reminders in the dashboard and may receive limited push reminders. Premium and Pro members may receive broader push reminders and maintenance reminder emails.

The Drifolio Notification Center may store notification history, notification categories, read/unread status, notification preferences, and related delivery metadata so you can review important account, vehicle, transfer, membership, marketplace, vault, and maintenance, recall campaign, and safety review activity in one place.

Push notifications require device or browser permission. If you enable push notifications, Drifolio may store push subscription data such as endpoint URLs, public encryption keys, authentication keys, device/browser information, platform type, enabled status, and last-seen timestamps. This information is used only to operate, troubleshoot, secure, and deliver notifications.

To prevent duplicate notifications and troubleshoot delivery, Drifolio may keep reminder delivery logs such as user, vehicle, record, reminder type, notification category, channel, recipient or endpoint reference, subject/title, status, sent time, and error message if delivery fails. These logs are used to operate and secure the reminder system.

You can control notification categories, delivery methods, and frequency from Account Settings. You can also disable push notifications through your browser or device settings.

7. Recall Campaign Records and NHTSA Data

If recall campaign features are available, Drifolio may use vehicle information such as VIN, year, make, model, trim, and related vehicle identifiers to request, store, display, update, and organize recall campaign records or safety-related vehicle information from public sources such as NHTSA or other third-party data providers.

Drifolio may store recall campaign details such as campaign number, component, manufacturer, summary, consequence, remedy, notes, reported date, source URL, last checked date, review status, completed status, dismissed status, and related notification history. This information is used to show ownership alerts, help you review campaigns, reduce duplicate alerts, track which campaigns you have dismissed or marked completed in Drifolio, and link you to official sources for VIN-specific verification.

When you open an official recall lookup page, you may leave Drifolio and interact directly with a third-party website such as NHTSA. Those third-party websites are governed by their own privacy policies, terms, cookies, analytics, and data practices. Drifolio does not control how third-party government or manufacturer websites process information you enter directly on their sites.

8. Cookies, Analytics, and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the platform, understand usage, measure performance, and improve Drifolio.

We may use analytics tools such as Microsoft Clarity, PostHog, or similar services to understand how users interact with the platform. These tools may collect or process information such as pages visited, session behavior, clicks, scrolls, device information, browser information, and interaction patterns.

Analytics information helps us improve usability, diagnose issues, protect the platform, and understand which features are most useful. You can control cookies through your browser settings. Blocking cookies may affect platform functionality.

9. Memberships, Trials, and Referrals

Drifolio may process membership plan selections, plan limits, subscription status, pending plan changes, cancellation status, renewal dates, trial eligibility, promotional entitlements, feature access, and plan-related account messages. This information is used to operate memberships, enforce plan limits, preserve stored data when plans change, and provide eligible features.

If you use referral features, Drifolio may process referral codes, referral relationships, verified referral status, referral rewards, and eligibility information. Referral information is used to operate the referral program, prevent abuse, and apply eligible rewards.

10. AI-Assisted Content and Image Generation

Drifolio may use AI-assisted tools to generate, format, summarize, rewrite, or enhance certain content, including Garage News articles, image prompts, marketing content, and platform messaging.

AI-generated or AI-assisted output may be incomplete, inaccurate, or not suitable for decision-making. We may process article titles, prompts, vehicle-related context, and similar non-sensitive content through third-party AI providers to operate these features.

11. How We Share Information

We do not sell your personal information. We may share information with service providers and vendors that help us operate Drifolio, including hosting providers, analytics providers, email delivery providers, payment processors, security providers, customer support tools, authentication providers, and infrastructure vendors.

We may also share information when required by law, legal process, or valid government request; to enforce our Terms; to protect the rights, safety, and security of Drifolio, users, or third parties; or with your consent.

12. Third-Party Services

Drifolio may link to or integrate with third-party services such as Google, Stripe, Meta/Facebook/Instagram, NHTSA, vehicle manufacturers, Microsoft Clarity, PostHog, OpenAI, email providers, hosting providers, or other service providers. These services may process information according to their own privacy policies and terms.

We are not responsible for the privacy practices of third-party websites or services that we do not control.

13. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, encryption in transit, secure authentication practices, monitoring, upload restrictions, and other security measures.

No internet-based service is completely secure. You are responsible for keeping your login credentials confidential and for using strong account security practices.

14. Data Retention

We retain information for as long as reasonably necessary to provide the platform, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, and support legitimate business purposes.

If you delete your account or request deletion, some information may be deleted, de-identified, retained in backups for a limited period, or retained where required for legal, tax, accounting, fraud prevention, dispute resolution, or security reasons.

If you request account deletion, Drifolio will schedule deletion based on your account status:

• For free or inactive accounts, deletion is scheduled after a short retention period.
• For accounts with an active paid subscription, deletion is scheduled for the end of the current billing period.

When a deletion request is submitted:

• Public vehicle profiles, for-sale listings, and private share links may be disabled immediately.
• Your subscription will be set to cancel at the end of the billing period where applicable.
• Maintenance reminder settings, push subscriptions, notification center records, notification preferences, transfer-related delivery records, and reminder logs may be deleted, anonymized, or retained only where legally required.
• Your data will be deleted or anonymized when the scheduled deletion date is reached.

No prorated refunds are issued unless required by law.

If your membership is downgraded, canceled, unpaid, expired, or reverted after a trial, some vehicles, records, documents, photos, or paid features may become hidden, read-only, limited, or unavailable. Drifolio may continue storing that data, subject to this policy, so access can be restored if you upgrade or resubscribe.

15. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain personal information. You may also have the right to object to certain processing or withdraw consent where processing is based on consent.

Texas residents, California residents, European Union residents, and users in other jurisdictions may have additional rights under applicable privacy laws, including the Texas Data Privacy and Security Act (TDPSA), the California Consumer Privacy Act (CCPA/CPRA), and the GDPR where applicable.

To submit a privacy request, contact us at support@drifolio.com. We may need to verify your identity before completing a request. We will respond within the time required by applicable law.

16. International Users and GDPR

Drifolio is based in the United States, and information may be processed and stored in the United States or by service providers that support our platform.

If you are located outside the United States, including in the European Union, you understand that your information may be transferred to and processed in the United States. Where applicable, Drifolio will honor valid data subject rights requests, including access, correction, deletion, restriction, objection, and data portability.

17. Children’s Privacy

Drifolio is not intended for children under 13 years old, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Drifolio, please contact us so we can review and remove the information where appropriate.

18. Email and Communications

We may send account, security, subscription, membership, transfer, referral, verification, support, dashboard reminder, notification center, push notification, maintenance reminder, and service-related communications. If you subscribe to Garage News or marketing communications, you may unsubscribe using the available unsubscribe link or by contacting us.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make material changes, we may provide notice through the platform or by other reasonable means. Continued use of Drifolio after changes are posted means you accept the updated policy.

20. Contact

Please contact us at support@drifolio.com for privacy questions, legal requests, or data rights requests.