Privacy Policy

DriveTrue Hub ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit drivetruehub.com and use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

This policy applies to all users of DriveTrue Hub, including visitors, registered members, and subscribers.

We collect information in the following ways:

Information You Provide Directly

• Account registration: name, email address, and password
• Subscription and billing: payment method details (processed securely by Stripe — we do not store full card numbers)
• Profile information you choose to add
• Documents, forms, and data you upload or generate through the Service (e.g., DMV forms, letter templates, insurance declaration pages)
• Communications you send us (support requests, feedback)

Information Collected Automatically

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
• Device information: device type, screen resolution, and language settings
• Transaction security data: When you initiate a purchase on DriveTrue Hub, we capture your IP address and browser user agent at the moment you click to proceed to checkout. This data is recorded in our transaction log alongside your Stripe session ID, payment amount, and transaction type. See Section 3 for how this data is used.
• Cookies and similar tracking technologies (see Section 8)

Information from Third Parties

• Stripe: payment confirmation, subscription status, and customer details returned after a completed checkout
• OpenAI: AI-processed results from documents you submit for analysis (see Section 5)

We use the information we collect to:

• Create and manage your account
• Process payments and manage your subscription
• Provide, operate, and improve the Service
• Generate and store documents you create through the platform
• Send transactional emails (account confirmations, subscription receipts, renewal reminders)
• Respond to your support requests and communications
• Monitor and analyze usage patterns to improve user experience
• Detect, investigate, and prevent fraud, chargebacks, and unauthorized transactions — including by retaining the IP address and browser user agent captured at checkout (see Section 3a)
• Comply with legal obligations, including responding to valid legal process

We do not sell your personal information to third parties. We do not use your personal information for targeted advertising.

To protect our users and our business from fraud, chargebacks, and unauthorized purchases, DriveTrue Hub records the following data for every completed payment transaction:

• IP address of the device that initiated the checkout session
• Browser user agent (browser type and version) at the time of checkout
• Stripe checkout session ID and payment intent ID
• Transaction type (e.g., subscription, letter download, VIN report)
• Payment amount and currency
• Customer name and email address as provided to Stripe
• Timestamp of the transaction

When is this data captured? Your IP address is captured at the moment you click to proceed to Stripe checkout on drivetruehub.com — before you enter any payment information. It is stored in our secure transaction log when Stripe confirms your payment.

Why do we collect this?

This data is used exclusively for:

• Fraud prevention and detection
• Investigating and responding to payment disputes and chargebacks
• Verifying the legitimacy of transactions if a dispute arises
• Complying with legal or regulatory requests related to financial transactions

Who can access this data? Transaction log records are accessible only to DriveTrue Hub administrators. This data is never shared with third parties except as required by law or in connection with a payment dispute submitted through Stripe.

How long is it retained? Transaction security records are retained for 7 years in accordance with financial recordkeeping requirements. You may contact us at [email protected] to request information about records associated with your account.

When you use DriveTrue Hub to fill out, generate, or store documents — including DMV forms, letter templates, driving record requests, and bill of sale documents — that content is stored in your account and is accessible only to you.

You may delete your documents at any time from your Dashboard. Upon account deletion, your documents are permanently removed from our systems within 30 days.

We do not review, share, or use the content of your personal documents for any purpose other than delivering the Service to you.

The Declaration Page Analyzer uses OpenAI's API to process insurance declaration pages you upload. When you use this feature:

• The content of your uploaded document is transmitted to OpenAI for analysis
• OpenAI processes the document and returns an analysis result
• We do not permanently store the raw document content beyond what is needed to display your results
• OpenAI's use of data submitted via API is governed by OpenAI's API data usage policies, which prohibit using API inputs to train their models

We recommend redacting sensitive personal identifiers (such as your full Social Security Number) from documents before uploading. Your policy number, coverage details, and insurer name are sufficient for analysis.

We do not sell, trade, or rent your personal information. We may share your information only in the following limited circumstances:

Service Providers: We share information with trusted third-party vendors who assist us in operating the Service, including:

• Stripe (payment processing)
• OpenAI (AI document analysis)
• Cloud infrastructure and hosting providers

All service providers are contractually required to protect your information and use it only for the purposes we specify.

Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of DriveTrue Hub, our users, or the public.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your information becoming subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained for the duration of your account and for up to 90 days after deletion
• Documents and generated files are retained until you delete them or your account is closed
• Payment records and transaction logs (including IP address and browser user agent captured at checkout) are retained for 7 years as required by financial regulations and for fraud/dispute resolution purposes
• Log data (general server access logs) is retained for up to 12 months

You may request deletion of your account and associated data at any time by contacting us at [email protected]. Note that transaction security records may be retained beyond account deletion to satisfy legal and financial recordkeeping obligations.

We use cookies and similar technologies to operate and improve the Service. Specifically:

• Essential cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled without breaking the Service.
• Analytics cookies: Used to understand how users interact with the Service (e.g., pages visited, features used). This data is aggregated and anonymized.
• Preference cookies: Used to remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the Service. We do not use third-party advertising cookies.

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Secure, hashed password storage (we never store plaintext passwords)
• Access controls limiting employee access to user data
• Regular security reviews

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Opt-out of marketing emails: Use the unsubscribe link in any marketing email or contact us directly

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

We do not discriminate against users who exercise their privacy rights.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you believe a child has provided us with their information, please contact us at [email protected].

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at [email protected] with the subject line "CCPA Request." We will respond within 45 days.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification to registered users. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DriveTrue Hub Email: [email protected] Website: drivetruehub.com

We take privacy concerns seriously and will respond to your inquiry within 5 business days.