Privacy Policy
Milefaro ("Milefaro", "we", "us") is a trade name of MYB LLC, a Washington limited liability company. This policy explains what information we collect when you use milefaro.com and the Milefaro app (the "Service"), how we use it, and the choices you have.
1. Information we collect
- Account information: your full legal name, email address, password (stored only in encrypted, hashed form), date of birth, phone number, city and country, and an optional referral code.
- Content you add: car listings, photos, videos, vehicle identification numbers (VINs), service or ownership records, reviews, ratings and chat messages.
- Waitlist: your email address, what you are interested in (buying, selling, dealer or workshop) and, if you searched one, a VIN.
- Location: the city you choose, and your approximate location only if you allow it in your browser, so we can show cars near you.
- Technical information: IP address, browser and device type, and logs needed to run, secure and fix the Service.
2. How we use information
- To create and run your account and show your listings, reviews and profile to other users.
- To let buyers and sellers message each other.
- To decode VINs and build vehicle history information.
- To keep the Service safe: stopping spam, fake accounts, fraud and abuse (including bot checks by Cloudflare Turnstile).
- To send you important messages about your account and, if you joined the waitlist, news about our launch.
- To follow the law and respond to lawful requests.
3. What other users can see
Other users can see your public profile (name as shown, photo, city and ratings), your listings, photos, videos, reviews and messages you send to them. We do not show your email, phone number or date of birth publicly.
4. Who we share information with
We do not sell your personal information. We share it only with service providers that help us run the Service, under their own security and privacy terms:
- Supabase — database, login and file storage (servers in the United States).
- Netlify — website hosting.
- Cloudflare — domain, security and bot protection (Turnstile).
- NHTSA vPIC (U.S. government) — we send a VIN, not your personal details, to decode vehicle information.
We may also share information if the law requires it, to protect people's safety, or as part of a sale or transfer of the business.
5. Cookies and local storage
We use your browser's local storage to keep you logged in and remember settings such as your country. We do not use advertising cookies.
6. How long we keep information
We keep your information while your account is open. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it longer by law or to resolve disputes and stop fraud.
7. Your rights
You can ask us to give you a copy of, correct, or delete your personal information, and you can unsubscribe from emails at any time. Residents of California, Washington, other U.S. states and Canada (under PIPEDA and provincial laws) may have additional rights. To use any of these rights, email us at the address below. We will not treat you differently for using your rights.
8. Users in Canada and outside the U.S.
Our servers are in the United States. If you use the Service from Canada or elsewhere, your information will be stored and processed in the U.S., where laws may differ from those where you live.
9. Security
We use encryption in transit (HTTPS), hashed passwords, access rules on our database, bot protection and rate limits. No system is perfectly secure, so please use a strong, unique password.
10. Children
The Service is only for people 18 years or older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
11. Changes
We may update this policy. If we make important changes, we will tell you on the website or in the app before they take effect.
12. Contact
MYB LLC (Milefaro) · Washington, USA
Email: support@milefaro.com