PUBLIC PART-OUT NETWORK · DOT-USA · MFD 04/268USTNF0UNDP4RT0U7M4RK3T
ZIP=
SIGN IN
Legal · Effective 2026-04-24

Privacy Policy

This Privacy Policy describes how BustnFound (“we”) collects, uses, and shares information when you use BustnFound.com (the “Service”).

1. Information We Collect

  • Account information: email address, hashed password, optional seller name, optional ZIP code.
  • Listing content: vehicle VINs, photos, prices, descriptions, parts you submit.
  • Messages: text you send to other users through the Service.
  • Technical data: IP address, device/browser type, timestamps, session cookie value.
  • VINs: submitted to the NHTSA vPIC API for decoding. VINs are vehicle identifiers, not personal data, but are disclosed here for transparency.

2. How We Use Information

  • To authenticate you and operate the Service.
  • To display listings and facilitate messaging between users.
  • To prevent fraud, abuse, and violations of our Terms.
  • To respond to valid legal process.
  • To improve and secure the Service.

3. Cookies

We use a single session cookie (named bf_session) to keep you signed in. We do not use third-party advertising or analytics cookies. The session cookie is HTTP-only and marked secure in production.

4. How We Share Information

We share information only as follows:

  • With other users: your seller name, city, ZIP, listing content, and messages with users you have messaged.
  • With service providers (sub-processors): Vercel (hosting); NHTSA vPIC (VIN decode lookup only).
  • For legal reasons: to comply with law, court order, subpoena, or to protect rights, safety, or property.
  • Business transfer: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

5. Data Retention

  • Account data is retained while your account is active and deleted on request (subject to legal holds).
  • Messages and listings may be retained indefinitely as business records for fraud prevention and dispute resolution.

6. Your Rights

Depending on your state of residence, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of the sale or sharing of personal information (we do neither), and to not be discriminated against for exercising these rights.

To exercise any right, email privacy@bustnfound.com. We respond within 45 days.

7. California Residents (CCPA/CPRA)

  • Categories collected: identifiers (email), internet activity (IP, session), user-generated content (listings, messages).
  • Categories sold or shared: none. We do not sell or share personal information.
  • Retention: see Section 5.
  • Right to know, delete, correct, limit use of sensitive info, and non-discrimination rights apply.

8. Children

The Service is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact privacy@bustnfound.com and we will delete it.

9. Security

We hash passwords with bcrypt and transmit data over TLS. No system is perfectly secure; use unique, strong passwords and notify us immediately at security@bustnfound.com if you suspect unauthorized access.

10. International Users

The Service is intended for users in the United States. If you access the Service from outside the U.S., you consent to the transfer of your information to the U.S. for processing.

11. Changes

We may update this Policy from time to time. The effective date at the top shows the latest revision.

12. Contact

privacy@bustnfound.com