Privacy Policy

This page explains how Market Check Cars, Inc., a Nevada corporation ("MarketCheck", "we"), handles personal information collected through the MarketCheck Developer Platform: the developer dashboard at developers.marketcheck.com, the MarketCheck APIs, the MarketCheck MCP endpoints, and related services (collectively, the "Service"). This Privacy Policy governs your use of the MarketCheck Developer Platform. For corporate inquiries unrelated to the Developer Platform, please visit our main MarketCheck Privacy Policy.

1. What we collect

• Account information: provided at sign-up and during profile completion: name, email, company, country, industry, role, and the URL of the application you intend to build.
• Billing information: card or ACH details (tokenized and stored securely by our payment processor; we never see full card details), invoice email recipients, billing address, tax ID where applicable.
• API usage telemetry: request timestamps, endpoint paths, response codes, response times, IP address, API key used. We use this for billing, capacity planning, abuse detection, and to power your usage dashboard.
• Device + session signals: a privacy-preserving hardware fingerprint, IP, and basic browser fingerprint at sign-up time. Used solely for fraud and abuse prevention (e.g., detecting fake-account farms).
• Bot defense tokens: when you sign up or log in, we mint and verify a reCAPTCHA v3 token server-side. This is subject to Google's Privacy Policy and Terms of Service.
• Authentication metadata: when you enroll in 2FA, we store an enrolment timestamp and hashed recovery codes. We do not store your TOTP secret.
• Communications: emails you send us, support tickets, and lifecycle / billing emails we send you. We track open rates only at aggregate level.

2. How we use it

• To provision your account, authenticate you, and provide the Service.
• To bill you accurately and to investigate billing disputes.
• To detect and prevent fraud, abuse, scraping, fake-account creation, and other Terms-of-Service violations.
• To send transactional, lifecycle, and security emails. Marketing emails are opt-in.
• To improve the Service: to spot common bug patterns, refine onboarding, and surface usage trends.
• To comply with law and respond to lawful requests from authorities.

3. How we share it

Service providers: We share personal information with third-party service providers who perform services on our behalf under written confidentiality and data processing agreements:

• Payment Processors: To securely process billing, payment tokenization, and subscription invoices.
• Cloud Infrastructure & Database Hosting: To host our platform servers, databases, and API infrastructure.
• Email & Communication Services: To send transactional, lifecycle, support, and billing communications.
• AI Model & Gateway Providers: To route and process prompts and interactions in developer dashboard features (e.g., MCP Playground).
• Bot Defense & Security Vendors: To perform fraud prevention, login verification, and abuse mitigation.
• Data Analytics & Telemetry Platforms: To store and analyze API telemetry, usage metrics, and system performance.

Legal requirements: Where required by valid legal process or to enforce our Terms.

Corporate transactions: In a merger, acquisition, or asset sale we will give notice before personal information becomes subject to a different privacy policy.

We do not sell personal information or share it for cross-context behavioral advertising.

4. AI Features and Processing

MCP Playground (Developer Dashboard): When you use the in-dashboard MCP Playground, your prompts and resulting MarketCheck API responses are routed through an AI gateway to your selected third-party model provider (e.g., Anthropic, OpenAI, Google, or xAI). To support operational debugging and billing verification, each interaction turn is logged to a secure database collection. All inputs and outputs are sanitized at capture using automated scrubbing filters to strip sensitive identifiers and personal information (including emails, phone numbers, payment cards, SSNs, IP addresses, and API keys).

90-Day Conversation Text Purge: All scrubbed conversation text is permanently deleted from operational logs after 90 days via an automated daily deletion job.

Numeric Telemetry: Non-personal numeric usage data (token counts, calculated micro-cent costs, selected model, and latency) is retained for up to 24 months for billing reconciliation and capacity planning, after which it is kept in aggregate-only form.

Consented Support Features (Ask AI Assistant & Marketing Concierge): When you interact with our Ask AI support assistant or marketing Concierge video host, questions, transcripts, and call recordings are retained for 12 months under your explicit consent to deliver support and follow-up services. After 12 months, audio archives and transcript records are automatically purged.

AI Training Assurances & Data Sharing Limits:

• No Model Training: We process API requests and support interactions through commercial enterprise endpoints. Prompts, responses, transcripts, and code snippets are never used by MarketCheck or our third-party model providers to train public or proprietary AI models.
• Data Sharing Limits: We do not share your prompt or transcript data with any third party other than your designated model provider and our internal operational and billing systems.

5. Cookies & storage

Essential Cookies: Necessary for the platform to function (such as security, session management, and site navigation). These cannot be disabled. We use Google reCAPTCHA to prevent abuse, governed by Google's Privacy Policy and Terms of Service.

Analytics Cookies (Optional): We use analytics to understand site traffic and usage in aggregate. These are disabled by default and activated only with your explicit consent.

Managing Your Preferences: You can update or revoke your choices at any time via the "Privacy Choices" link in our site footer. We honor Global Privacy Control (GPC) signals sent by your browser by automatically disabling non-essential cookies. We do not use advertising or cross-site tracking cookies.

6. Data retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Account + billing data: Retained while your account is active, and for the period required by tax/accounting law thereafter.
• API usage telemetry: Retained for up to 24 months for billing reconciliation and capacity planning; aggregate-only after that.
• AI interaction logs & prompts: AI conversation text is PII-scrubbed at capture and permanently purged after 90 days via an automated daily job. Non-personal numeric usage telemetry (tokens, latency, micro-cent cost) is kept for up to 24 months for billing.
• Consented support transcripts & video calls (Ask AI / Concierge): Retained for 12 months under explicit user consent, then automatically purged.
• Fraud/abuse signals (blocks, abuse flags): Retained for 30 days unless an active investigation requires longer.
• Email logs: Retained for 12 months.

7. California Consumer Privacy Disclosures (CCPA / CPRA)

The MarketCheck Developer Platform is a business-to-business (B2B) Service. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), California residents acting in a B2B context (e.g., as business representatives, employees, or contractors of developer entities using our Service) are entitled to specific statutory disclosures and privacy rights regarding their personal information.

7.1 Categories of Personal Information Collected and Disclosed. In the preceding 12 months, we have collected and disclosed for business operational purposes the following categories of personal information from B2B developers and business representatives:

• Identifiers: Name, professional email address, IP address, user ID, API keys, and privacy-preserving hardware/device signatures. Disclosed to hosting, security, and communication service providers.
• Commercial Information: B2B transaction records, subscription history, tax IDs, and API usage telemetry. Disclosed to payment processors and billing accounting platforms.
• Internet or Network Activity: Request paths, response times, browser fingerprint, session signals, and interaction logs. Disclosed to telemetry, security, and cloud hosting providers.
• Professional or Employment Information: Company name, job title, industry, application URL, and business role provided during profile completion.
• Sensitive Personal Information: Account credentials paired with authentication codes, and tokenized payment details (processed directly by payment gateways). Used strictly to maintain platform security and deliver requested Service features.

7.2 No Sale or Sharing of Personal Information. MarketCheck does not sell personal information for monetary or other valuable consideration, nor do we share personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

7.3 Your California Privacy Rights. Subject to statutory limits under the CCPA/CPRA, California business representatives have the following rights:

• Right to Know / Access: Request details regarding the categories and specific pieces of personal information collected, sources, business purposes, and third-party service providers to whom data was disclosed in the preceding 12 months.
• Right to Delete: Request deletion of personal information collected from you, subject to permitted legal exceptions (e.g., legal compliance, tax compliance, fraud prevention).
• Right to Correct: Request correction of inaccurate or incomplete personal information in our records.
• Right to Opt-Out of Sale / Sharing: Because we do not sell or share data for targeted ads, this option is disabled by default. Our platform honors browser-level Global Privacy Control (GPC) signals.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information for essential B2B platform operations and security, which does not require an opt-out under CPRA.
• Right to Non-Discrimination: You will not receive discriminatory treatment or altered pricing for exercising your statutory privacy rights.

7.4 How to Exercise Your Rights. To submit a CCPA/CPRA request, email us at privacy@marketcheck.com with the subject line "CCPA Consumer Request" or update your account details at /profile. We will verify your request using information appropriate to your relationship with us and respond within 45 days as required by law.

8. Additional Disclosures for UK and EEA Residents

If you are located in the United Kingdom (UK) or European Economic Area (EEA), this section applies to you pursuant to the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the UK Data Protection Act 2018.

8.1 Data Controller & Representative. Market Check Cars, Inc. is the data controller for the personal data processed through the Service. For any UK/EEA privacy inquiries or to reach our designated privacy representative, please email privacy@marketcheck.com or contact us at the address provided in Section 12.

8.2 Legal Bases for Processing. Under UK/EEA data protection law, we rely on the following legal bases depending on the purpose:

8.3 International Data Transfers. Market Check Cars, Inc. is headquartered in the United States. When you use the Service, your personal data is transferred to, stored, and processed in the United States. To ensure adequate data protection, we implement:

• Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum (IDTA).
• Data Processing Agreements (DPAs) with strict security and processing limitations with all service providers.

8.4 Your Data Subject Rights. Subject to applicable legal limits, UK and EEA users have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where legal grounds exist.
• Right to Restrict Processing: Request that we limit processing under certain conditions.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.
• Automated Decision-Making: Protection against decisions based solely on automated processing with legal effects. (We do not engage in automated legal decision-making).

To exercise any of these rights, email privacy@marketcheck.com. We will respond within one month.

8.5 Right to Lodge a Complaint. If you believe our processing infringes UK/EEA laws, you have the right to lodge a complaint with a supervisory authority:

• In the UK: The Information Commissioner's Office (ICO) at ico.org.uk or +44 303 123 1113.
• In the EEA: Your local national Data Protection Authority (DPA) in your EU member state of residence.

9. Security

We protect your data with TLS in transit, encryption at rest, role-based access control, multi-factor authentication for our staff, and a 2FA option for your developer account. We never store your full card number. Payment processors do. We never store your TOTP secret. Suspected security incidents: security@marketcheck.com.

10. Children

The Service is intended for businesses and developers aged 18 or older. We do not knowingly collect personal information from anyone under 18.

11. Changes

We may update this policy from time to time. If we make material changes, we will notify you by email, through a prominent notice on our website, or by updating the "Last updated" date above prior to the changes taking effect.

12. Contact

Market Check Cars, Inc.
169 Madison Ave STE 57434, New York, NY 10016, USA.
General contact: info@marketcheck.com.
Privacy questions & US / UK / EEA inquiries: privacy@marketcheck.com.
Security incidents: security@marketcheck.com.

Market Check Cars, Inc. · Terms of Service · Data Processing Agreement · CCPA Addendum