Privacy

CarStack collects only the information we need to run reports and operate checkout through our merchant of record (Lemon Squeezy):

• VINs and vehicle metadata stay within the report-engine service and are redacted when we log activity.
• We do not store full payment credentials—checkout is handled by Lemon Squeezy on our behalf.
• We share recalls, OEM maintenance, and valuations verbatim so you always see the source links (NHTSA, OEM, and valuation data providers).

Questions about privacy, retention, or redaction: use your Lemon Squeezy receipt links / billing portal when available, or email the founder team for legal escalations.