Privacy Policy

Before You Sign ("we", "us") is a consumer tool that helps car buyers review dealership offers. This policy describes what personal information we collect when you use the app, how we use it, how long we keep it, and what controls you have. It applies to the website and the signed-in app.

The legal entity operating Before You Sign, its business address, and any state-specific privacy disclosures (for example CCPA / CPRA notices) will be listed here before public launch.

• Account details: name, email, and password (stored hashed by our authentication provider).
• Deal information you enter or upload: vehicle year/make/model/trim/VIN last 4, mileage, dealership name and location, advertised and selling price, taxes, dealer fees, add-ons, trade-in, down payment, APR, term, and monthly payment.
• Documents you upload: buyer's orders, quotes, purchase worksheets, financing worksheets, add-on breakdowns, and similar dealership paperwork. See the Document Upload & Data Handling Notice.
• Support messages and feedback you send us (including optional screenshots).

• Basic device and browser metadata (user agent, viewport, current route) captured when errors occur or when you submit feedback, so we can reproduce issues.
• Session records maintained by our authentication provider so you stay signed in.

We do not use advertising trackers or third-party marketing analytics as of the last-updated date on this page.

• Generate your Deal Score, report sections, and negotiation content.
• Save your deals and reports so you can return to them across devices.
• Extract structured fields from documents you upload so you can review and edit them before analysis (see Data Handling Notice).
• Process payments through our payment provider and issue receipts.
• Send transactional emails related to your account (sign-in confirmation, password reset, purchase receipts).
• Diagnose bugs, respond to support requests, and improve accuracy.

We share personal information only with vendors that help operate the Service:

• Cloud hosting & database — stores your account, deals, and uploaded documents.
• Payment processor — handles subscriptions. We do not receive or store your full card number.
• AI document-extraction provider — receives the pages of documents you upload so structured fields can be extracted for your review. Content is used to answer your request, not to train public models.
• Email delivery provider — sends transactional messages.

We do not sell your personal information, and we do not sell your financial or deal data.We may disclose information if required by law or to protect the safety and rights of users.

A current list of subprocessors will be published on this page before public launch.

• Account & deals: kept while your account is active. Reports and deals you soft-delete are removed from your dashboard immediately and purged from our systems within 30 days.
• Uploaded documents: kept while attached to a deal. When you delete a document or delete the deal, the file is removed from storage within 30 days.
• Account deletion requests: when you request account deletion, your account, deals, analyses, and documents are removed within 30 days of the request being processed.
• Support & error logs: retained up to 12 months for debugging and abuse prevention, then deleted or aggregated.
• Payment records: kept as long as required by tax and accounting law.

Data is transmitted over TLS and stored in a managed cloud database with row-level security so signed-in users can only access their own deals, analyses, and documents. Uploaded documents are stored in a private bucket that is not publicly accessible; downloads are served via short-lived signed URLs. No system is perfectly secure, and we do not promise that the Service is immune from all breaches. If a breach affecting your information occurs, we will notify affected users as required by applicable law.

• Update your profile from Account Settings.
• Delete individual documents and saved analyses at any time from your dashboard.
• Request deletion of your entire account and associated data from Delete Account.
• Request an export of the data connected to your account by emailing support.
• Depending on where you live, you may have additional rights (access, correction, portability, appeal). Contact us to exercise them.

Before You Sign is not directed to children under 13, and we do not knowingly collect information from them.

When we make material changes we will update the "Last updated" date and, for signed-in users, may notify you in-app or by email. Continued use of the Service after an update means you accept the revised policy.

Privacy questions and data requests: visit Support. A dedicated privacy email address will be listed here before public launch.