Privacy Policy

Effective September 24, 2026

In short: we collect what you type and upload, plus your name and email, to grade your car and send you the result. Files are deleted 30 days after scoring. We share data only with the providers that run the service (hosting, email, AI processing) and, for high-scoring cars, with a dealer partner who may contact you. We do not sell your data. Email privacy@scoremycar.ai to have your submission deleted.

1. Who is responsible

Score My Car (scoremycar.ai) is operated by RK Motors, LLC, Charlotte, North Carolina, USA, which is the controller of the personal data described here. Contact: privacy@scoremycar.ai.

2. What we collect

• What you give us: your name, your email address, the year, make and model, your description of the car, and any files you upload (photos, documents). Documents can contain personal information — yours or other people's. Please redact what is not needed.
• Automatically: a one-way hash of your IP address (used only for daily limits; we do not store the address itself), the time of submission, and the result of the bot check. We set no cookies of our own; the bot check (Cloudflare Turnstile) may set its own as described in Cloudflare's privacy policy.
• Produced by the service: your score, grade, rationale and the AI's read-outs of your files.

3. Why we use it

• To confirm your email address (the code), grade your car and show and email you the result.
• To enforce daily limits and prevent abuse.
• If your score meets the threshold shown on the home page: to pass your name, email, car details, description, files and result to a dealer partner (the operator or an affiliate) so it may contact you once about the car.
• To operate, secure and improve the service, including reviewing anonymized results to calibrate the scoring method.

Where a legal basis is required, it is your consent (given when you submit) and our legitimate interests in running the service and preventing abuse.

4. Who we share it with

• Anthropic (Claude) — your description and files are sent to Anthropic's API to be read and graded. Anthropic processes them under its commercial terms and does not use API inputs to train its models.
• Cloudflare — hosts the site, stores your submission and files, and runs the bot check.
• Resend — delivers the code, the result email and lead notifications.
• The dealer partner named in section 3, for submissions at or above the threshold only.
• Authorities, when the law requires it.

We do not sell personal data and do not share it with advertisers.

5. How long we keep it

• Uploaded files: deleted 30 days after scoring. Submissions that are never verified are deleted after two days.
• The submission record (name, email, car details, description, result): kept while the result link is live so you can revisit it, and for our records. Ask us to delete it at any time.
• Lead notifications sent to the dealer partner are kept by it under its own retention practice.

6. Your choices and rights

• You can have your submission, files and result deleted by emailing privacy@scoremycar.ai from the address you submitted with. We will confirm within 30 days.
• You can ask what we hold about you, ask us to correct it, or object to follow-up contact, at the same address.
• Residents of California, Virginia, Colorado, Connecticut, Utah and other states with privacy laws have additional rights, including the right to know, delete and opt out of the sale or sharing of personal data. We do not sell or share personal data for cross-context advertising. Contact us to exercise any right; we will not discriminate against you for doing so.

7. Security

Data is encrypted in transit. Files are stored privately and are never served back over the web — not to you, not to anyone; only the scoring process and the operator can read them. Result links are unguessable but are not password-protected: anyone you give the link to can see the car, score and rationale (not your name or email).

8. Children

The service is for adults. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.

9. International visitors

The service is operated in the United States and data is processed there. By using it from elsewhere you consent to that transfer.

10. Changes

We will post any change here with a new effective date. Material changes to how we use data already collected will be announced by email where we can.