Privacy Policy

This explains what JunkyardProfit, operated by JJA Ventures LLC (“we”), collects, why, and what you can do about it. Short version: we collect what the app needs to work, we don't sell it, and you can delete all of it yourself.

What we collect

• Your email address, when you create an account. Sign-in is a link sent to that address; we never store a password.
• What you log: parts pulled, the vehicle, what you paid, sale price, fees, shipping and your notes.
• Which vehicles you look up, and when, to count monthly plan limits.
• Subscription status: your plan and a Stripe customer reference. Card details go to Stripe directly; we never see or store them.
• A one-way fingerprint for free lookups. When you aren't signed in we store a salted SHA-256 hash of your IP address and browser identifier, so the free allowance can't be reset by clearing cookies. The raw IP address is not stored, and the hash can't be reversed back into one.
• A lookup log. For each vehicle opened we record the vehicle, the time, whether you were signed in, your plan, whether the lookup counted against your limit, and one-way hashes of your network address and browser (no raw IP address, name or email). We use it to prevent abuse of the free tier and to plan capacity, and delete entries after 90 days.
• Cookies, described below.

We don't run advertising trackers, and we don't collect location data or contacts. If you use the VIN barcode scanner, the camera image is processed on your device and never uploaded.

Cookies we set

• Sign-in cookies from Supabase, to keep you logged in.
• jp_lookups, which counts free lookups for signed-out visitors. Expires after about 40 days.
• jp_locale, which remembers whether you chose English or Spanish. Expires after a year.

All of these are needed for the site to function. We don't set analytics or advertising cookies.

Why we're allowed to use it

We use your data to provide the Service you asked for, to enforce plan limits fairly, to process payments, and to answer support requests. For visitors in regions with a legal-basis requirement, that is performance of a contract and our legitimate interest in preventing abuse of the free tier.

Who else touches it

• Supabase — database and sign-in.
• Stripe — payments and subscription management.
• Vercel — hosting.
• eBay and NHTSA — we send part and vehicle search terms to their APIs. We don't send them anything about you.

We don't sell or share personal information, and we don't use it for targeted advertising.

How long we keep it

Account data and your pull log are kept until you delete them or close your account. Lookup history is kept for the current billing period plus a short retention window. Free-lookup fingerprints reset each month. Payment records are kept as long as tax and accounting law requires.

Your choices

• Export: download your whole pull log as CSV from the pull log page, any time.
• Delete: your account page has a delete button that removes your account, pull log and lookup history and cancels any active subscription. It cannot be undone.
• Ask us: email support@junkyardprofit.com for a copy of your data, a correction, or deletion. Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.

Children

The Service isn't intended for anyone under 18, and we don't knowingly collect data from children.

Security

Data is encrypted in transit, access to the database is restricted per-account by row-level security, and we hold no card numbers. No system is perfectly secure; if a breach affects you, we'll notify you as the law requires.

Changes

If this policy changes materially, we'll say so by email or in the app before the change takes effect. The date at the top always reflects the current version.

Contact

JunkyardProfit is operated by JJA Ventures LLC, 1301 W Wade Hampton Blvd, Ste C #1056, Greer, SC 29650. Email support@junkyardprofit.com. See also our Terms of Service.