Summary: We collect only what we need to run the marketplace — phone numbers for SMS verification, listing details you voluntarily submit, and buyer inquiry contact info (name, phone, optional email/message) used solely to facilitate buyer–seller connections. Buyer inquiry data is never shown publicly. We do not sell, share, or trade your personal information to third parties for any commercial purpose. Ever.
Bye Bye Car Payment ("we," "us," or "our") operates the marketplace at byebyecarpayment.com (the "Site"). We connect Buy Here, Pay Here (BHPH) borrowers who need to exit their loans with buyers looking for affordable vehicles. We are a listing service only — we do not provide loans, financing, or financial services.
For privacy inquiries, contact us at: privacy@byebyecarpayment.com
We collect personal information in the following categories:
When you access the seller listing flow (/sell) or buyer browse page (/listings), you are asked to verify your identity via SMS. We collect your phone number solely to send a one-time verification code via Twilio. Your phone number is stored in our database linked to a verification session.
Sellers voluntarily submit information including vehicle year, make, model, VIN, photos, monthly payment amount, remaining loan term, BHPH dealer name, down payment requirement, and city/state. This information is published on the Site as part of your listing.
We set a browser cookie upon successful phone verification to persist your verified status for up to 1 year. This cookie contains a session token and does not contain personally identifiable information beyond the token itself. We do not use third-party tracking cookies or advertising cookies.
We use hCaptcha to protect the Site from automated bot activity. When you complete a CAPTCHA challenge, hCaptcha collects technical information about your browser and interaction patterns. This data is processed by hCaptcha Inc. under their privacy policy. We receive only a pass/fail verification result. See hCaptcha's Privacy Policy for details.
We automatically collect limited technical data when you visit the Site, including IP address, browser type, and pages visited. This is used for security monitoring and analytics. We use a first-party analytics beacon that records page visits tied to an anonymous visitor ID stored in localStorage — no cross-site tracking. IP addresses are hashed with SHA-256 before storage and are never stored in plain text.
When a verified buyer submits an inquiry on a listing, we collect: full name, phone number, email address (optional), and an optional message. This information is used solely to facilitate a connection between the buyer and seller. Your contact information is never shown publicly — it is shared only with the listing seller and our administrative team for the purpose of facilitating the loan assumption inquiry. IP addresses associated with inquiry submissions are hashed with SHA-256 and stored solely for rate-limiting and spam prevention purposes.
Buyer inquiry data is collected and processed under the same CCPA protections as all other personal data described in this policy. You may request deletion of your inquiry data by contacting us at privacy@byebyecarpayment.com.
We use personal information only for the following purposes:
We do not use your information for advertising, profiling, or automated decision-making that has legal or significant effects on you.
We do NOT sell, rent, share, trade, or otherwise disclose your personal information to third parties for monetary or other valuable consideration. This includes your phone number, vehicle details, and any other data you provide. Your information is not used for targeted advertising, sold to data brokers, or shared with marketing partners.
We share personal information with third parties only in the following limited circumstances:
Vehicle listing information you submit is published publicly on the Site, visible to all visitors. Do not include sensitive personal information (SSN, financial account numbers, etc.) in your listing details.
We may disclose personal information if required to do so by law, subpoena, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect rights, property, or safety.
We use the following cookies on the Site:
We do not use third-party advertising cookies, remarketing cookies, or cross-site tracking technologies.
You can clear or block cookies at any time through your browser settings. Blocking the verification cookie will require you to re-verify your phone number on each visit.
After the applicable retention period, personal information is deleted from our active databases. Backups containing your data may persist for up to 90 additional days before being overwritten.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
You have the right to request that we disclose what personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., information needed to complete a transaction you requested, or to comply with legal obligations).
You have the right to request that we correct inaccurate personal information we maintain about you.
We do not sell or share personal information for cross-context behavioral advertising. Because we do not engage in these activities, there is nothing to opt out of. However, you may submit an opt-out request at any time and we will confirm our non-sale status.
We collect phone numbers as sensitive personal information solely for identity verification. We do not use sensitive personal information for any purpose other than providing the verification service. You may request that we limit our use at any time.
We will not discriminate against you for exercising any of your California privacy rights. We will not deny services, charge different prices, or provide a lower quality of service based on your exercise of these rights.
To exercise any of these rights, submit a request by:
We will respond to verifiable consumer requests within 45 days. We may need to verify your identity (e.g., by confirming the phone number associated with your account) before processing your request. You may also designate an authorized agent to make a request on your behalf.
The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, contact us at privacy@byebyecarpayment.com and we will delete it promptly.
We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted database connections (TLS), access controls, and regular security reviews.
No method of data transmission over the internet is 100% secure. If you believe your information has been compromised, contact us immediately at privacy@byebyecarpayment.com.
We may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of the Site after changes constitutes acceptance of the updated policy. For significant changes, we may also post a notice on the Site.
For privacy questions, requests, or concerns:
We aim to respond to all privacy inquiries within 5 business days and to verifiable consumer requests within 45 days as required by California law.
This policy applies to Bye Bye Car Payment, operated at byebyecarpayment.com. This is a listing service only and does not provide financial, legal, or lending services.