Privacy Policy

Auction Road (“we,” “us”) operates theauctionroad.com, an online vehicle auction platform based in Colorado. This policy explains what personal data we collect, why, and the rights you have over it.

Account information: full name, email, phone number, password (stored as a salted hash, never in plain text).

Identity verification data: when you verify your identity to bid or sell, our verification provider (Stripe Identity) collects a government ID image and a selfie to confirm your identity and age. We receive and store the verified result (name, date of birth, verification status) — we do not store the ID image or selfie itself; Stripe does, under its own privacy practices.

Financial information: we never see or store full payment card numbers. Card details are handled directly by Stripe (wallet funding, membership) and Escrow.com (vehicle purchase funds); we store transaction records (amounts, dates, status) but not card numbers.

Vehicle and listing data: VIN, photos, condition details, and location you provide when listing a vehicle.

Usage data: bids placed, watchlist activity, comments, and standard technical data (IP address, browser type) collected automatically for security and fraud prevention.

• To operate the auction platform: create your account, run auctions, process payments
• To verify identity and age (21+), and to prevent fraudulent buyers and sellers
• To comply with Colorado law, including the Sunday vehicle-sale restriction (C.R.S. § 44-20-302)
• To send transactional notifications (outbid alerts, auction results, account activity)
• To investigate and prevent fraud, abuse, or violations of our Terms of Service

We do not sell your personal data, and we do not use it for targeted advertising.

If you are a Colorado resident, the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.) gives you the right to:

• Confirm whether we process your personal data, and access it
• Correct inaccuracies in your personal data
• Delete your personal data (see Account settings, or contact us)
• Obtain a portable copy of your data
• Opt out of the sale of personal data, targeted advertising, or profiling — we don't do any of these today, so there is nothing to opt out of at this time

We honor Global Privacy Control (GPC) signals from your browser as a valid opt-out request where applicable. To exercise any of these rights, use the Delete Account option in My Account, or contact us using the details below. We will not charge a fee or discriminate against you for exercising these rights.

Some of the data we collect (biometric verification results, government ID data) is “sensitive data” under the CPA. We only process it with your consent, given when you start identity verification, and only for the purpose of confirming your identity and age.

We share data only with the service providers needed to run the platform:

• Stripe (identity verification, wallet payments, membership fees)
• Escrow.com (holding and releasing funds for a completed vehicle sale)
• VinAudit (vehicle history reports, only when a seller requests one)
• Cloudflare (image hosting and delivery)

We do not sell personal data to third parties, and we do not share it for cross-context behavioral advertising.

We keep account data while your account is active. If you delete your account, we remove your personal details (name, email, phone) but retain a minimal record of past bids and sales for legal, tax, and dispute-resolution purposes, as other users' transaction history depends on it.

Passwords are hashed with bcrypt; connections use HTTPS; identity documents are handled entirely by Stripe's certified infrastructure and never touch our servers.

Auction Road is not directed at anyone under 21. We verify age through government ID before anyone can bid or sell.

For any privacy request or question, use the contact option in the chat widget, or reach out through the contact details on our About page once published.