Privacy Policy — Secure Vehicle Transfer

Introduction

This Privacy Policy describes how Cox Automotive, Inc. ("we," "us," or "our") collects, uses, and protects information when you use the Secure Vehicle Transfer mobile application ("the App"). The App is a B2B enterprise tool designed for dealership staff and authorized verifiers participating in the VECU vehicle custody platform.

Information We Collect

Camera Access

The App requests access to your device camera to perform VIN scanning via optical character recognition (OCR) and QR code scanning for credential verification. Camera data is processed locally on the device and is not stored or transmitted beyond what is necessary for the scanning operation.

NFC Access

The App uses Near Field Communication (NFC) to read tags on vehicle windshields for VIN capture. NFC data is processed locally and used solely for VIN identification.

Network Data

The App makes API calls to the VECU platform to verify customer digital credentials. These requests include the scanned VIN and credential data necessary for verification. Network requests are transmitted over encrypted connections (HTTPS/TLS).

Information We Do Not Collect

No PII stored on device. The App does not store personally identifiable information on your device.
No persistent authentication tokens. Authentication tokens are held in memory only and are not written to device storage. Tokens are cleared when the app is closed.
No location data. The App does not request or collect GPS or location data.
No analytics or tracking. The App does not include third-party analytics, advertising, or tracking SDKs.

How We Use Information

Information collected through the App is used solely to:

Scan and identify vehicle VINs
Verify customer digital credentials against the VECU platform
Display verification results (approved, denied, or expired) to the dealership agent

Data Sharing

We do not sell, rent, or share personal information with third parties. Verification data is transmitted only to the VECU platform operated by Cox Automotive for the purpose of credential verification.

Data Security

We implement appropriate technical and organizational measures to protect the information processed by the App, including:

All network communication uses TLS encryption
Authentication tokens are stored in memory only
No sensitive data is persisted to device storage
The App follows OWASP mobile security best practices

Data Retention

The App does not persist user data or verification results on the device. Verification data processed by the VECU platform is subject to the VECU platform's data retention policies.

Your Rights

As a user of this B2B enterprise application, your access is managed by your employer or the dealership that has enrolled in the VECU platform. For questions about your data or to exercise any data rights, please contact your organization's administrator or reach out to us directly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: svc_vehicle_custody_mobile_apps@coxautoinc.com