Legal record
Before sharing data
This policy explains how Next Car handles personal data it receives when you use the website, create an account, send a form, or publish a vehicle. A vehicle listing and the contact channel selected by its seller may become publicly available. Do not include sensitive information, identification documents, banking information, passwords, or third-party data that should not be public in a description, image, or comment. The financing application may request financial information and an optional SSN/ITIN. Provide it only when it is necessary for your application, and never include it in open fields, public listings, or public messages.
Scope
Next Car operates a platform to browse vehicles, publish listings, connect buyers and sellers, and receive contact or financing requests. This policy applies to data processed through the Next Car website. If you continue a conversation, negotiation, or request with a seller, dealership, lender, or another third party, that entity's own policies will also govern its subsequent handling.
Data we collect
Account and authentication: email address, credentials handled by the authentication service, account type, session, and the date/version of Terms acceptance. Profile and listing: seller first and last name, email, phone, WhatsApp, and selected contact method; and, for dealerships, business name, logo, location, social links, and website. A listing processes vehicle information, including VIN if entered, location, price, description, photos, and comments. Images or comments may incidentally contain personal data. Forms: for contact, name, phone, email, interest, vehicle, and message. For financing, data may also include address, date of birth, housing, employment, income, co-applicant information, vehicle of interest, trade-in, VIN, payoff amount, and comments. SSN/ITIN is optional. Technical and security data: authentication session cookies, page views, and performance metrics; and, to limit form abuse, a hashed fingerprint built from the form type, received IP address, and, when present, the account identifier. Next Car does not store the IP in plain text in that limiter.
How we use information
We use data to create and maintain accounts, authenticate sessions, allow listings and their updates, display the catalog and dealership directory, enable the contact channel selected by each seller, answer inquiries, and process financing requests. We also use it to prevent automated or abusive submissions, maintain website security and availability, diagnose failures, and measure page usage and performance. We do not use data from a financing application to display advertising based on that content.
Public listing information
When you publish a vehicle, you authorize the listing information to be available to catalog visitors: vehicle specifications, price, location, description, images, and, if you provide it, VIN. The identifying seller name associated with the listing may also form part of the information exposed by the catalog. The email address or WhatsApp number you select as the contact channel is provided as a contact link on the vehicle detail page. A published dealership profile may show its name, logo, city/state, social links, website, and inventory. Avoid including sensitive or third-party information: published content may be copied, indexed by search engines, or temporarily retained in caches outside Next Car's control.
Financing applications
Financing applications are handled as private records and are not included in the public catalog. They are used to review the request and so that Next Car or the applicable provider can contact you about it. Because of the nature of this data, do not send financial information or identifiers through open fields that are not intended for them. If you add co-applicant information, you confirm that you are authorized to provide it. Submitting an application does not guarantee approval, a credit offer, or a particular rate.
When we share data
We may allow processing by service providers that help us operate the service: Supabase for authentication, database, and storage; and Vercel for hosting, web analytics, and performance metrics. Administrative staff access is limited to what is necessary to operate the service, handle requests, and protect the platform. Public information is shared with any catalog visitor. If you use an email, WhatsApp, social-media, or third-party website link, your communication moves to that third party. We may also disclose data when necessary to comply with the law, respond to valid requests, investigate abuse, or protect rights, safety, and property. Next Car does not sell personal data for money.
Security
We apply reasonable technical and organizational controls to reduce unauthorized access. The application uses authentication, role-based access controls, data-access rules, and limited public views to separate private information from the public catalog. No transmission or storage is entirely fail-safe. Information you choose to publish or provide to a third party through a contact link is also subject to the practices of the recipient.
Retention
We retain data for as long as needed to provide the service, manage an account, maintain a listing, handle a request, resolve disputes, prevent abuse, and comply with applicable obligations. A listing can be updated or deleted from the account when that function is available; deletion does not ensure removal of copies already made by third parties or caches. Contact and financing requests are retained for the period reasonably necessary to handle them and for applicable legal, accounting, security, or claim-resolution obligations. When a deletion request is appropriate, we will assess its scope and applicable exceptions.
Your rights and choices
Depending on applicable law, you may request access, correction, updating, deletion, restriction, or objection to processing of your personal data, and portability where applicable. You may also withdraw consent when processing is based on it, without affecting the lawfulness of earlier processing. You can update a listing's contact method and contact data from your account settings. For other privacy requests, email info@nextcar.com with the subject line "Privacy" and identify the account or data concerned. We may request reasonable information to verify your identity before responding.
Minors
Next Car services are not directed to people who lack the legal capacity to enter into contracts. We do not knowingly seek to collect data from minors. If you believe a minor provided personal data without appropriate authorization, contact us so we can review it.
Changes and contact
We may update this policy when the services, data practices, or applicable obligations change. We will publish the current version and effective date on this page. For privacy questions or requests, contact us at info@nextcar.com. This policy supplements Next Car's Terms and Conditions and does not replace rights granted by applicable law.