Legal Document

Privacy Policy

This policy explains what information we collect, how we use it, and how we protect it.

Effective: May 2026  ·  Keyzi, LLC

1. Overview

Keyzi, LLC (“Keyzi,” “we,” “us”) operates a vehicle marketplace platform that connects buyers with franchised dealers. This Privacy Policy describes how we collect, use, and handle information in connection with your use of the Keyzi platform.

We collect only the information necessary to operate the platform. We do not sell personal data to third parties. We do not use your information for advertising targeting beyond the platform.

2. Information We Collect

Buyer Information

When you submit a vehicle request or unlock a deal, we collect:

  • Name and email address (provided during unlock checkout)
  • Vehicle preferences submitted in your buyer request (make, model, trim, timeline, location)
  • Payment information processed by Stripe — we do not receive or store your full card number
  • IP address and browser information collected automatically during site use

Dealer Information

When you apply for and maintain a dealer account, we collect:

  • Dealership name, city, and state
  • Primary contact name, email address, and phone number
  • Franchise make authorizations
  • Uploaded invoice and pricing documents submitted for listing verification
  • Listing content including vehicle details, pricing, and photos
  • Account activity including offers submitted, violations recorded, and moderation history
  • Authentication credentials via Supabase Auth (password hashed; we do not store plaintext passwords)
  • Stripe customer and subscription IDs for billing management

Automatically Collected Information

When you use the platform, we automatically collect standard server and browser information including IP address, browser type, pages visited, and timestamps. This information is used for security monitoring, debugging, and understanding platform usage patterns.

We may use session cookies or local storage to maintain authentication state and user preferences. We do not currently use third-party advertising cookies or cross-site tracking.

3. How We Use Your Information

  • To operate the marketplace and match buyer requests with dealer offers
  • To process and confirm payment transactions
  • To send deal confirmations and account-related communications
  • To verify dealer-submitted pricing documentation
  • To enforce our terms, manage violations, and maintain platform integrity
  • To respond to support requests and legal inquiries
  • To improve the platform through usage analysis
  • To comply with applicable legal obligations

We do not use your information to build advertising profiles, sell leads to unaffiliated parties, or engage in behavioral tracking beyond what is necessary to operate the platform.

4. How We Share Your Information

Between Buyers and Dealers

When a buyer unlocks a deal, they receive the dealer’s name and contact information. The dealer does not receive the buyer’s contact information from Keyzi directly — the buyer initiates contact after unlock.

Buyer vehicle request details (make, model, trim, location, timeline) are visible to authorized dealers when browsing requests. Buyer names are not disclosed to dealers before unlock.

Service Providers

We share data with the following infrastructure providers who process it on our behalf:

  • Stripe — payment processing and subscription billing. Stripe's privacy policy governs their handling of payment data.
  • Supabase — database hosting, authentication, and file storage for uploaded documents.
  • Vercel — hosting and content delivery for the Keyzi platform.

These providers are contractually bound to use your data only to provide services to us and not for their own commercial purposes.

Legal and Safety Disclosures

We may disclose information if required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of Keyzi, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

5. Data Retention

We retain account information for as long as your account is active. Dealer accounts and associated data are retained for a reasonable period after account closure to support dispute resolution, legal compliance, and audit purposes.

Uploaded invoice and pricing documents are retained to support the verification history of associated listings. Buyer request data is retained to support deal records.

You may request deletion of your personal information by contacting us at privacy@keyzi.co. We will honor deletion requests subject to legal obligations and legitimate business retention needs (e.g., payment records, dispute records).

6. Security

We take reasonable measures to protect the information we hold, including:

  • Authentication through Supabase Auth with hashed credentials
  • Admin access protected by HMAC-based session tokens
  • Payment data handled exclusively through Stripe (PCI DSS compliant)
  • Database and file storage hosted on Supabase with access controls
  • HTTPS enforced on all platform endpoints

No system is perfectly secure. We cannot guarantee that unauthorized parties will never gain access to our systems. If you suspect unauthorized access to your account, contact us immediately at security@keyzi.co.

7. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information by contacting us at privacy@keyzi.co.

  • Account data: Dealers can update their contact information from the dealer portal.
  • Account deletion: Contact us to request account closure and data deletion.
  • Communication preferences: You may opt out of non-essential emails by contacting us.
  • Payment data: Managed directly through the Stripe Customer Portal.

Residents of certain states (including California) may have additional rights under applicable privacy law. Please contact us to exercise such rights.

8. Children

Keyzi is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information to us, contact us at privacy@keyzi.co and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes by email or by notice on the platform before the changes take effect. Continued use of the platform after the updated effective date constitutes acceptance of the revised policy.

10. Contact

For privacy inquiries or requests:

Keyzi, LLC
privacy@keyzi.co