Privacy Policy

How Jimmbo collects, uses, and protects information when you use our marketplace as a seller or as a registered dealer-buyer.

Effective: April 25, 2026

This Privacy Policy describes how Jimmbo Holdings, Inc., a Delaware corporation ("Jimmbo", "we", "us") handles personal data when you visit jimmbo.co, create an account, list a vehicle, register as a dealer, place a bid, or otherwise use our services. It is incorporated into our Terms & Conditions. Jimmbo is operated for the United States only; we do not knowingly serve users outside the 50 U.S. states.

We collect the following categories of information:

a. Account Information

Name, email address, password (hashed), phone number, and display name. Provided when you sign up or sign in via Google.

b. Seller Listing Data

VIN, license plate, mileage, ZIP code, vehicle photos and videos, condition disclosures, payoff/title status, and the dashboard image we analyze for warning lights. Some of this data (photos, mileage, condition, ZIP) is shown publicly on the listing.

c. Dealer Verification Data

If you register as a dealer, we additionally collect your dealership business name, business address, dealer license number and state, tax ID, and supporting documents (license, resale certificate). We submit license numbers to state DMV portals for automated verification and may store the verification result.

d. Payment Information

The $50 seller listing fee and dealer credit-card holds are processed by Stripe. We do not store full card numbers on our servers — Stripe stores card details and returns a token plus the last four digits and brand for display.

e. Auction Activity

Bids, comments, watchlist activity, favorites, and notification preferences. Bids and comments are public; watchlist and favorites are private to you.

f. Device & Usage Data

IP address, browser type, device identifiers, pages visited, and timestamps. Used for security, fraud prevention, and product analytics.

g. Communications

Emails and SMS messages you send to or receive from Jimmbo, including support tickets and inbound replies routed through SendGrid.

• Operate auctions: publish listings, accept bids, send outbid alerts, and notify winners.
• Verify dealer eligibility against state DMV records.
• Process the $50 listing fee, dealer bid holds, and the 1% buyer premium via Stripe.
• Connect the winning dealer with the seller for pickup, payment, and title transfer.
• Send transactional emails (bid confirmations, won/lost, daily recaps) and SMS notifications you've opted into.
• Detect fraud, abuse, off-platform circumvention, and violations of our Terms.
• Improve the product through aggregated, de-identified analytics.

The following information is visible to anyone browsing the site:

• Sellers: Display name (first name + last initial), vehicle photos/videos, VIN-decoded specs, mileage, condition disclosures, and ZIP code (city-level).
• Dealers: Dealership name, city/state, license state, and bidding history on each auction. We display this to give sellers confidence in who is bidding.
• Bids & comments: All bids and listing comments are public, including the bidder's dealership name.

Personal contact information (email, phone, full address, payoff amounts) is never public. It is shared only between the seller and the winning dealer once an auction closes.

Because Jimmbo's buyer side is restricted to licensed dealerships, dealers should expect a higher level of business transparency than typical consumer marketplaces:

• Your dealership name, location, and license state are displayed publicly alongside your bids and won-auction history.
• Aggregated dealer performance metrics (win rate, total spend, top makes acquired) appear on the public Leaderboard.
• Dealer accounts may be linked to multiple individual users under one dealership; activity is attributed to the dealership, not the individual user.
• License verification data submitted to state DMV portals is retained for compliance and audit purposes for as long as your dealer account is active, plus three years.
• Your contact email and phone are shared with sellers of vehicles you win so the transaction can be completed.

We share personal data only with:

• The other party in your transaction. When an auction ends, the seller and winning dealer receive each other's name, phone, email, and pickup address.
• Service providers: Supabase (hosting, database, authentication, storage), Stripe (payments), Twilio (SMS), Resend (transactional email), SendGrid (inbound email), Google (Gemini AI analysis of dashboard photos and listing media), and Firecrawl (market analytics scraping).
• State DMV portals for the limited purpose of verifying dealer license numbers.
• Law enforcement or regulators when required by valid legal process or to investigate fraud.
• A successor entity in the event of a merger, acquisition, or sale of Jimmbo's assets.

We do not sell your personal information to advertisers or data brokers.

Jimmbo uses Google Gemini through the Lovable AI Gateway to grade listing photos, detect dashboard warning lights, and redact personal information (names, addresses, phone numbers) from uploaded maintenance documents before they are made public. Maintenance docs are processed in-memory and only the redacted version is stored. Raw images of dashboards are stored to your listing but are visible to all viewers — do not include personal documents in vehicle photos.

We use first-party cookies and local storage to keep you signed in, remember your preferences, and run basic product analytics. We do not use third-party advertising cookies or cross-site tracking pixels. You can clear cookies in your browser at any time, but doing so will sign you out.

Data is transmitted over TLS and stored in Supabase with row-level security policies that restrict access to the appropriate user. Passwords are hashed; payment card data is held by Stripe (PCI-DSS Level 1). No system is perfectly secure — please use a strong, unique password and enable any available account-protection features.

• Active account data is retained until you delete your account.
• Completed auction records (bids, sale prices, vehicle details) are retained indefinitely as marketplace history. Your name may be replaced with "Deleted user" if you delete your account.
• Payment records are retained for seven years for tax and accounting compliance.
• Dealer license verification data is retained for the duration of your dealer account plus three years.
• Email/SMS logs are retained for 90 days for deliverability troubleshooting.

You can:

• Access & update your profile, notification preferences, and saved alerts in Account Settings.
• Delete your account at any time, which removes your personal profile data and pseudonymizes your historical bids and listings.
• Unsubscribe from marketing emails using the link in any email footer; transactional emails (bid confirmations, won/lost notifications) cannot be disabled while you have an active account.
• Opt out of SMS by replying STOP, or by toggling SMS off in notification preferences.
• Request a copy of the personal data we hold about you by emailing roger@jimmbo.app.

California, Colorado, Virginia, and other state-law residents have additional rights (right to know, delete, correct, and opt out of "sales" of personal information). We honor all such requests; since we do not sell personal information, no opt-out is required.

Jimmbo is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, contact roger@jimmbo.app and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced by email and posted at the top of this page with a new effective date. Continued use of Jimmbo after the effective date constitutes acceptance of the updated policy.

Email roger@jimmbo.app with any privacy questions or general support requests.