The short version
- We collect what we need to verify you, pay your bills and collect repayments, and nothing more.
- We never sell your personal information or share it for advertising.
- You can download your data or ask us to delete it from Settings at any time.
- Our site uses no advertising or tracking cookies.
Information you give us
- Account details: legal name, email, phone number, date of birth, home address and password (stored by our sign-in provider, never by us in readable form).
- Social Security number, which federal law requires us to collect to verify your identity. We store it encrypted and only ever display the last 4 digits.
- Identity check: a photo of your government ID and a selfie, processed by our identity provider to confirm you are who you say you are.
- Vehicle: your VIN and the year, make and model decoded from it.
- Insurance: carrier, policy number, expiration date and the card or declarations page you upload.
- Bills: statements you upload, and the biller, amount, due date and account number on them.
- Messages you send to our support team.
Information from others
- From Stripe Financial Connections: your bank name, the last 4 digits of your account, the account owner's name and your account balance when we review a bill.
- From our identity provider: whether your ID check passed, and the name and date of birth on your ID.
- From the National Highway Traffic Safety Administration: vehicle details decoded from your VIN.
- From payment networks: whether each payment succeeded or was returned, and why.
- If you use Spending insights or Rent reporting: transactions from your linked bank account, through Stripe Financial Connections.
- If you use Credit monitoring or Identity protection: your credit score and alerts from our partner.
Information collected automatically
We record basic technical information needed to run and secure the service, such as IP address, device and browser type, a random identifier for your browser, and sign-in times. We count page views without cookies and without building a profile of you. We record your IP address and the time when you accept our Terms.
How we use your information
- To create your account and verify your identity, vehicle, insurance and bank account.
- To screen names against government sanctions lists, as the law requires, and to stop one person from opening several accounts. We compare identifiers such as bank accounts and phone numbers using one-way codes rather than the raw values.
- To review bills, pay billers and collect your membership and installments.
- To send receipts, reminders and important notices about your account.
- To prevent fraud, protect members and keep AutoFloat secure.
- To meet legal, tax, accounting and regulatory obligations.
- To understand how AutoFloat is used and improve it, using aggregated information wherever possible.
What we don't do
- We don't sell or rent your personal information.
- We don't share it with advertisers or data brokers.
- We don't use advertising cookies or cross-site tracking.
How long we keep it
We keep your information while your account is open. When you ask us to delete your account, we close it 14 days later (once nothing is owed) and delete your personal details. Identification records (name, date of birth, address and SSN) are kept encrypted for 5 years after closing, as federal law requires, and payment records for as long as tax and financial rules require. Then they are deleted.
How we protect it
We encrypt data in transit and at rest, limit staff access by role with multi-factor sign-in, and log every access to sensitive actions. See our Security page for details.
Your choices and rights
- Access and download your data from Settings, then Privacy.
- Correct your information in Settings, or by contacting us for details locked after verification.
- Request deletion from Settings. We delete what we're not required to keep.
- Choose whether reminders come by email, text or both.
- California residents have rights under the CCPA, including to know, delete and correct personal information and to not be discriminated against for using these rights. Residents of other states may have similar rights. We do not sell or share personal information as those laws define it.
Children
AutoFloat is only for adults 18 and older. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we make a material change, we'll notify you by email or in the app before it takes effect, and show the updated date at the top of this page.
Contact us
Questions or requests about your privacy can be sent to privacy@autofloat.co. We'll respond within 30 days.