Privacy Policy

01Overview

This Privacy Policy describes how Negoshify, Inc. ("Negoshify," "we," "us," or "our") collects, uses, and shares information about you when you use the Negoshify service, including our website at negoshify.com, our MCP server at mcp.negoshify.com, and related tools (collectively, the "Service").

Negoshify is a California-based company and collects a deliberately minimal amount of personal information — the information we need to connect you with Participating Dealers and to facilitate a vehicle reservation. We do not sell your personal information for money. This Policy explains what we collect, why, and the choices you have.

02Information We Collect

Information you provide directly

Payment information

When you place a reservation, you complete payment via Stripe, Inc., our payment processor. Negoshify does not collect, process, or store your full payment card number, CVV, or bank account details. Stripe handles that data directly under its own privacy policy. We receive only limited confirmation data from Stripe (such as a payment identifier, the last four digits of the card, the cardholder name, and authorization status).

Information collected automatically

Information we do not collect

We do not collect Social Security numbers, driver's license numbers, full payment card numbers, bank account numbers, biometric identifiers, precise GPS location, or data from sensitive categories (health, religious affiliation, genetic data). If a feature we add in the future requires any of these, we will update this Policy and obtain consent where required.

03How We Collect Information

• Directly from you, when you provide information through your AI client (such as Claude or ChatGPT) via the Negoshify MCP server, or when you email our support team;
• From your device automatically, through standard web logs and cookies (see Cookies & Tracking);
• From Stripe, in the form of payment confirmation metadata and authorization outcomes;
• From Participating Dealers, in the form of confirmations, vehicle availability updates, and appointment outcomes related to your reservation.

04How We Use Information

We use your information to:

• Facilitate vehicle searches, comparables, and reservations;
• Place and manage the $500 authorization hold through Stripe;
• Connect you with the Participating Dealer for your reservation and coordinate your appointment;
• Send transactional communications (confirmations, appointment reminders, status updates) by email and SMS;
• Send marketing communications where you have consented, and allow you to opt out;
• Respond to support inquiries and resolve disputes;
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms;
• Improve the Service, measure performance, and analyze usage in aggregated form;
• Comply with legal obligations, respond to lawful requests, and protect our rights.

We do not use your personal information to train third-party AI models.

05How We Share Information

Participating Dealers

When you place a reservation, we share your name, phone number, email address, and appointment preferences with the specific Participating Dealer associated with that reservation so the dealer can confirm the vehicle, confirm the appointment, and contact you. Each Participating Dealer is an independent business with its own privacy practices. Once your information is shared with a dealer, that dealer's use of your information is governed by its own privacy policy, not ours. If you wish to opt out of marketing messages from a specific dealer, contact that dealer directly.

Service providers

We share information with third-party service providers that perform services on our behalf, including:

• Stripe, Inc. — payment processing and authorization holds;
• Cloud infrastructure providers — hosting, databases, and backups;
• Email and SMS delivery providers — transactional and marketing message delivery;
• Analytics providers — aggregate usage analytics;
• Customer support tools — responding to your inquiries.

These providers are contractually limited to using information only for the services they provide to Negoshify.

Legal and safety

We may disclose information when we reasonably believe disclosure is necessary to: (a) comply with a subpoena, court order, or other legal process; (b) protect the rights, property, or safety of Negoshify, our users, or others; (c) investigate or prevent fraud; or (d) enforce our Terms.

Corporate transactions

If Negoshify is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

We do not sell your personal information for money

We do not sell your personal information to third parties in exchange for money. See Your California Privacy Rights below for more on how "sale" and "sharing" are defined under California law and how to opt out.

06Cookies & Tracking

We use a limited set of cookies and similar technologies on negoshify.com:

• Strictly necessary cookies to operate the site (for example, to remember a theme preference);
• Analytics cookies to understand aggregate usage, page performance, and referral sources.

We do not currently use cross-context behavioral advertising cookies on the Negoshify site, and we do not permit third-party ad networks to track you across unrelated sites through our Service. You can control cookies through your browser settings. Most browsers also honor "Do Not Track" and the Global Privacy Control signal; where required by law, we treat a Global Privacy Control signal as a request to opt out of "sale" or "sharing."

By using the Service, you consent to the use of electronic communications and standard analytics tracking technologies, and you waive any claim that such use constitutes unlawful wiretapping, eavesdropping, or interception under any state law, including the California Invasion of Privacy Act, to the fullest extent permitted by law.

07Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (together, the "CCPA"). Terms defined in the CCPA have the same meaning when used in this section.

Categories of personal information collected

In the preceding 12 months we have collected the following categories of personal information:

• Identifiers (name, email, phone, IP address);
• Customer records as defined in Cal. Civ. Code § 1798.80(e) (contact information tied to a reservation);
• Commercial information (reservation history, vehicle interest);
• Internet or other electronic network activity (browsing and interaction with our Service);
• Geolocation data (approximate, derived from IP).

Sources, purposes, and disclosures

The sources from which we collect information and the purposes for which we use it are described in § 3 and § 4. The categories of third parties with whom we share information are described in § 5.

Your rights

Subject to verification of your identity and to certain exceptions under the CCPA, you have the right to:

• Know what personal information we have collected, used, disclosed, and (if applicable) sold or shared about you;
• Delete personal information we collected from you;
• Correct inaccurate personal information we maintain about you;
• Opt out of the "sale" or "sharing" of your personal information, as those terms are defined under the CCPA;
• Limit the use and disclosure of sensitive personal information (we do not collect sensitive personal information as defined by the CCPA);
• Non-discrimination — we will not discriminate against you for exercising your rights.

To exercise these rights, email us at privacy@negoshify.com. You may also designate an authorized agent to make a request on your behalf in accordance with CCPA regulations. We will respond to verifiable consumer requests within the time frames required by the CCPA (typically 45 days, extendable once by an additional 45 days where reasonably necessary).

California Shine the Light

California Civil Code § 1798.83 permits California residents who have an established business relationship with us to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, email privacy@negoshify.com with the subject "Shine the Light Request."

08Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. Payment card data is handled by Stripe, which is certified to the highest level of PCI Data Security Standard compliance. No system is completely secure, however, and we cannot guarantee the absolute security of any information you transmit to us. You are responsible for keeping your payment methods, email account, and devices secure.

09Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to satisfy legal, accounting, tax, or reporting requirements. Reservation records (name, contact, VIN, dealer, outcome) are typically retained for up to seven (7) years to support dispute resolution, tax reporting, and record-keeping obligations applicable to automotive referral businesses. You may request deletion of your information as described in § 7, subject to exceptions where we are required or permitted by law to retain it.

10Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, email privacy@negoshify.com and we will take appropriate steps to delete the information.

11Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and update the "Last updated" date above. Your continued use of the Service after the updated Policy becomes effective constitutes your acceptance of the updated Policy.

12Contact

For questions about this Policy or your personal information, contact us at: