Privacy Policy

This Privacy Policy explains how RCA Auto Broker ("RCA," "we," "us") collects, uses, shares and protects your personal information when you visit the website rcaautobroker.com (the "Site") or use the web and mobile app at app.rcaautobroker.com (the "App"); together, the "Platform."

The Platform is developed and operated by Car Dealer Academy LLC. The brokerage service for buying vehicles at US auctions, international shipping, title and paperwork services, customs clearance and related tools is provided by RCA Auto Sales LLC. Each company is responsible for your data within the scope of its own activities.

By using the Platform, you agree to the practices described in this policy. Our use of cookies is detailed in the Cookie Policy. This English version is adapted from the Spanish original; in case of discrepancy, the Spanish version prevails.

On the Site:

• Contact form: name, email address, WhatsApp number (optional), topic and message.
• Newsletter forms: email address or WhatsApp number, name (optional) and whether you checked "I want someone to contact me."
• Our own cookieless analytics: the page visited, the referring domain, approximate country (provided by our hosting provider), device type, scroll depth, active time on page and clicks. See Section 4.
• Consent-based tools: only if you accept them, browsing data collected by third-party analytics and advertising tools. See Section 5.

In the App:

• Registration: full name, email, phone number and country.
• Identity: a government-issued ID, when you upload it for verification, required for services such as Assisted bidding.
• Payments: handled directly by our payment processor. We do not store full card numbers.
• Service data: pickup and delivery addresses, VINs and vehicle photos, customs files (including, where applicable, the name and tax ID (RNC) of the consignee you register), vehicle history reports requested, bids, deposits and purchases.
• Communications: support messages and ticket notes.
• Technical and usage data: IP address, device type, pages visited, time spent and session recordings used to improve the App.

Contact form messages are stored in RCA's database and may be emailed to our team through our email delivery provider so we can reply to you.

Newsletter form data is stored in our database and synced to our email marketing tool, to send you our newsletter, educational content, class invitations and offers related to our services. If you check "I want someone to contact me," a team member may reach out by email or WhatsApp.

To understand which pages are useful, the Site uses its own analytics that does not set cookies or store your IP address. To count unique visitors, a hashed identifier is created from your IP address and browser that rotates daily and is never stored in raw form, so it cannot identify you or track you from one day to the next. This data is used only in aggregate to improve the Site.

Only if you accept them in the cookie banner, the Site enables:

• Web analytics, with consent mode: measures visits and conversions. Until you accept, the tool receives no cookies or identifiers.
• Product analytics: to understand how people navigate the Site and where they get stuck.
• Ad measurement: measures the results of our ads on social media and search engines, and lets us show ads to people who visited the Site.
• In the future, other advertising platforms, always under the same prior-consent rule. We will update the Cookie Policy when they are added.

You can change or withdraw your consent at any time using the "Cookie preferences" link in the footer. Withdrawing consent does not affect processing carried out before you withdrew it.

We use your information to:

• Respond to your messages and requests.
• Provide the services you order (auctions, shipping, paperwork, customs, reports) and manage your account.
• Process payments, subscriptions and deposits.
• Verify your identity when a service requires it, and detect and prevent fraud.
• Send you operational notifications by email, in the App, by SMS and WhatsApp.
• Send you our newsletter and marketing communications, if you subscribed.
• Measure and improve the Site and the App, and measure the effectiveness of our advertising (the latter only with your consent).
• Comply with legal and tax obligations and requests from authorities, and protect our rights.

We process your data on the basis of performing our contract with you, your consent, our legitimate interest in operating and protecting the Platform, and compliance with legal obligations.

We do not sell your personal information. We share it only with the providers we need to operate, each under its own data protection terms:

• Site hosting on servers of a cloud infrastructure provider.
• Database and file storage on servers contracted by RCA.
• Email delivery: contact form emails and transactional emails.
• Email marketing: newsletter management.
• Messaging: SMS and WhatsApp messages.
• Payment and subscription processing.
• Auction data: vehicle information from Copart and IAAI auctions.
• Shipping quotes, when enabled.
• Analytics and advertising, only with your consent.

We also share information with carriers, shipping lines, customs brokers and Auctions strictly to complete the service you requested; when required by law or a competent authority; to prevent fraud or protect our rights; or with a successor in a merger, acquisition or sale of assets.

Identity documents are kept in private storage, with access restricted to the staff who need them for verification. If you clear customs using the consignee option offered by the Platform, your identity data is not mixed with the consignee's, and the consignee's actual data is visible only to RCA's customs staff.

You can stop receiving marketing communications at any time:

• Email: use the "unsubscribe" link included in every email, or write to info@rcaautobroker.com.
• SMS: reply STOP.
• WhatsApp: reply that you no longer wish to receive messages.

Opting out of marketing does not stop operational and security notices about your account, which are necessary to provide the service. Message and data rates from your carrier may apply.

We protect your information with encryption in transit and at rest, role-based access controls, secure authentication and automatic backups. However, no system is 100% secure, and we cannot guarantee the absolute security of information transmitted over the internet. If we detect a security incident affecting your data, we will notify you where required by law. You are responsible for protecting your login credentials.

• Contact messages: as long as needed to handle your request and up to 24 months afterward, unless they lead to a customer relationship.
• Newsletter subscribers: for as long as you remain subscribed; when you unsubscribe, we keep only what is needed to honor your choice.
• Our own analytics: aggregated, pseudonymized data kept as long as needed for historical analysis.
• App accounts: while the account is active. A Free account with no sign-in for 60 days receives reminders and is deactivated on day 67 (a reversible lock that does not delete data). We never deactivate or delete an account for non-payment; it moves to the Free plan.
• Account deletion: if you request it, we delete your personal data, except information we are legally required to keep (for example, transaction records for tax and fraud-prevention purposes).

You have the right to access your information, ask us to correct inaccurate data, request deletion of your data, object to certain uses, withdraw your consent and opt out of non-essential communications. You can exercise these rights from your App profile, through App support, or by writing to info@rcaautobroker.com. We may ask you to verify your identity before acting on your request. We will respond within a reasonable time and as required by applicable law.

The Platform is not directed at anyone under 18, and we do not knowingly collect information from minors. If we learn that a minor's data has been collected, we will delete it.

We operate between the United States and the Dominican Republic and use providers with infrastructure in different countries. Your information may be processed outside the country where you live, including in the United States and the European Union. By using the Platform, you consent to these transfers, and we seek to ensure our providers maintain adequate levels of protection.

We may update this policy to reflect changes in our practices, providers or the law. The date of the last update appears on this page, and we will notify you of material changes. This policy supplements the Terms and Conditions. In case of discrepancy between language versions, the Spanish version prevails.

For questions about this policy or your personal data, write to info@rcaautobroker.com or use the support system inside the App.