This Privacy Policy describes how TemboList ("we," "us," "our") collects, uses, and protects information when you use our Service. By using TemboList, you agree to the practices described below.
1. Information we collect
Account information — name, email address, phone number, dealership name, city, state.
Vehicle information you upload — VIN, year, make, model, mileage, price, condition notes, photographs, and any private notes you choose to add.
Billing information — handled directly by Stripe. TemboList stores only a Stripe customer ID and subscription status. We never see or store your full credit-card number.
Usage data — basic logs of API requests (route, timestamp, response status) for debugging and abuse prevention.
2. How we use information
- To provide and operate the Service.
- To generate AI-drafted listing copy from the vehicle data you provide.
- To process subscription payments via Stripe.
- To send transactional emails (account, billing, password reset).
- To improve product features and troubleshoot issues.
- To comply with legal obligations.
3. AI processing
When you click "Generate Listing," we send the public-facing vehicle data (year, make, model, trim, mileage, price, features, condition notes, exterior color) to a third-party large-language-model provider (currently Anthropic Claude). Private notes are NEVER sent to the AI model. The AI provider's data-handling terms apply during processing; TemboList does not use vehicle data to train any AI model.
4. Photos and vehicle media
Photographs you upload are stored on Emergent Object Storage under access-controlled URLs. Photos are served only to authenticated requests tied to your account.
5. Sharing of information
We do not sell your personal information. We share data only with:
- Stripe — to process subscriptions.
- Anthropic (Claude) — to generate listing copy on demand.
- NHTSA VIN-decode public API — to populate vehicle specs from a VIN.
- OwnerKeep — to retrieve vehicle reliability scores.
- Government agencies or law-enforcement when legally required.
6. Data retention
Active-account data is retained as long as your account exists. Sold-vehicle archive data is retained until you delete it or close your account. Upon account closure, data is deleted within 30 days unless we are legally required to retain it longer (e.g., billing records for tax purposes — Stripe retains these per their own policy).
7. Your rights
You may at any time:
- Update your profile from the Settings page.
- Delete individual vehicles from your inventory.
- Request a copy of your data by emailing tembolist@gmail.com.
- Request account deletion by emailing the same address.
California residents have additional rights under the California Consumer Privacy Act (CCPA). EU/UK residents have rights under GDPR/UK-GDPR. Contact us to exercise any of these rights.
8. Security
Passwords are stored using bcrypt hashing. All traffic between your device and our servers is encrypted in transit (HTTPS). We follow industry-standard practices, but no system is perfectly secure — please notify us immediately if you suspect unauthorized account access.
9. Cookies and local storage
TemboList uses local storage on your device to keep you signed in (JWT token), to enable the Progressive Web App offline-photo queue, and to remember UI preferences. We do not use third-party advertising cookies or cross-site trackers.
10. Children
The Service is intended for business use by licensed adult dealers. We do not knowingly collect information from anyone under 18.
11. Changes to this policy
Material changes will be communicated via email or in-app notice. The "Effective" date at the top will always reflect the latest revision.
12. Contact
Privacy questions? Email tembolist@gmail.com.