Privacy Policy

This Policy applies to personal information we collect through the Services. It does not apply to third-party websites or services that we do not control.

Drivo Auction is operated by Drivo Rent A Car, a vehicle rental company serving the New York metropolitan area, as the channel through which it sells its used fleet and rental vehicles. This Policy covers the Drivo Auction Services; for Drivo Rent A Car's general privacy practices, please see the privacy policy at drivo.com.

Because Drivo Auction is a platform for dealers and business buyers, the Services are intended for business use and for individuals who are at least 18 years old. If you do not agree with this Policy, please do not use the Services.

We collect information in three ways: information you provide to us directly, information we collect automatically, and information we do not collect through the Site.

Information you provide to us

• Account and registration details — your name, business or dealership name, email address, and phone number.
• Account credentials — a password you choose. We store passwords only in hashed (irreversible) form and never in plain text.
• Invitation information — if you are invited to join, we process the email address and dealership name associated with your invitation.
• Bidding and transaction activity — the bids you place, "Buy Now" purchases, and the vehicles you win.
• Communications — information you provide when you contact us for support or otherwise correspond with us.

Information we collect automatically

• Log and usage data — your IP address, browser type and settings, device information, the pages and listings you view, and the dates and times of your activity.
• Cookies and similar technologies — we use strictly necessary cookies to authenticate you, keep you signed in, and protect against fraud. See "Cookies & Tracking Technologies" below.

Information we do not collect through the Site

• Payment is arranged separately with our team; we do not collect or store full payment card numbers through the Services.
• We do not request special categories of sensitive personal information (such as government identifiers, health, or biometric data) to use the Services.

We use the information we collect to:

• Provide, operate, and maintain the Services, including creating and authenticating your account.
• Process and display bids, run auctions, determine winning bids, and facilitate the handover of vehicles you win.
• Send transactional messages — such as invitations, registration confirmations, bid and outbid notices, and win notifications.
• Send periodic auction communications, such as a weekly summary of vehicles you have won. You can opt out of non-essential emails at any time.
• Protect the security and integrity of the Services, detect and prevent fraud, and enforce our terms.
• Comply with applicable laws, regulations, and legal process, and maintain business records (including for tax and accounting).
• Analyze and improve the Services and develop new features.
• Respond to your inquiries and provide customer support.

We use cookies and similar technologies that are strictly necessary to provide the Services. These include a session cookie that keeps you securely signed in and a token used to protect against cross-site request forgery.

We do not use cookies for third-party advertising or cross-site behavioral tracking. Most browsers let you refuse or delete cookies; because our sign-in relies on essential cookies, disabling them will prevent you from logging in and using key features.

To understand how many people visit the Services, we count page views without cookies. For each visit we record the page, the website that referred you (if any) and whether you are on a phone or a computer, together with an anonymous identifier made by one-way hashing your IP address and browser with a value that changes every day. We do not store your IP address, and the identifier cannot be used to follow you from one day to the next or across other websites.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers (sub-processors) — we share information with vendors who process it on our behalf under confidentiality and security obligations, including cloud application hosting (Vercel), database hosting (Neon), image and document storage and delivery (Cloudinary), and transactional email delivery (Resend).
• Other auction participants — your bidding activity may be visible to other registered participants on a vehicle's listing, but your identity is shown only in an anonymized form (for example, "Bidder #1"). Platform administrators can see your identity and bidding history.
• Completing a sale — if you win a vehicle or use "Buy Now," we share your name and contact and business details with our fleet and sales team and the relevant seller in order to arrange payment, title, and pickup.
• Legal and safety — we may disclose information when we believe it is required by law or legal process, or necessary to enforce our terms, investigate fraud, or protect the rights, property, or safety of Drivo Auction, our users, or others.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
• With your consent — we may share information for other purposes with your consent or at your direction.

We retain your personal information for as long as your account is active and as needed to provide the Services.

We also retain certain information after account closure where necessary to comply with our legal, tax, accounting, and recordkeeping obligations, resolve disputes, prevent fraud, and enforce our agreements. For example, records of completed auctions, winning bids, and transactions are retained for business and legal recordkeeping. When information is no longer needed, we delete or de-identify it.

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption of data in transit (HTTPS/TLS), storage of passwords in hashed form, access controls that limit staff access on a need-to-know basis, and the use of reputable infrastructure providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any unauthorized use of your account.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information. You can also update most account details directly from your dashboard.
• Deletion — request that we delete your personal information, subject to legal retention obligations.
• Opt out of non-essential email — unsubscribe from periodic summaries and other non-essential communications. We will still send essential transactional messages about your account and transactions.

To exercise these rights, contact us at auction@drivo.com. We may need to verify your identity before responding, and we will not discriminate against you for exercising your rights.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with additional rights:

• The right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• The right to delete personal information we collected from you, subject to certain exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the "sale" or "sharing" of personal information — we do not sell or share your personal information as those terms are defined under California law.
• The right to non-discrimination for exercising your privacy rights.

The categories of personal information we collect are: identifiers (such as name, email, phone number, and IP address), commercial information (such as bidding and transaction activity), and internet or network activity (such as usage and log data). To exercise these rights, contact us at auction@drivo.com. You may use an authorized agent to submit a request on your behalf, subject to verification.

Drivo Auction is operated from the United States, and our service providers may store and process information in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under applicable data-protection law, including the rights to access, rectify, erase, restrict, or object to processing, and to data portability. To exercise these rights, contact us using the details below.

The Services are intended for businesses and for individuals who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

The Services may contain links to third-party websites or documents that we do not operate or control — for example, vehicle history or condition reports hosted by third parties. This Policy does not apply to those third-party services, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will provide additional notice as appropriate (for example, by email or a notice within the Services). Your continued use of the Services after an update becomes effective constitutes acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us: