Privacy Policy

This Privacy Policy explains how TitleAI ("TitleAI," "we," "us," or "our") collects, uses, shares, and protects information in connection with our website and applications (the "Service"). TitleAI is a business tool used by title agencies and dealers. Please also review our Terms of Service.

1. Our Roles: Controller and Processor

For information about your own account and business (such as your name, email, and billing details), we act as a controller. For the information you input or upload about your customers and other third parties — including vehicle buyers and sellers and their identification documents — you are the controller and we act as your processor, handling that data on your behalf and under your instructions solely to provide the Service. You are responsible for having the proper authority, legal basis, and consents to provide that data to us and for giving any required notices to the individuals it concerns.

2. Information We Collect

Account and business information: name, email address, username, password (managed by our authentication provider), business name and contact details, physical address, phone number, business license number, roles, and team-member invitations.

Customer and transaction data you provide: to help you complete title transfers and permits, you input and upload data that may include full legal names, addresses, phone numbers, email addresses, government-issued identification numbers, vehicle information (VIN, make, model, odometer), sale and tax figures, and other form fields for buyers, sellers, and clients.

Uploaded documents: photographs or scans of documents you upload, which may include vehicle titles, government-issued photo IDs (such as driver licenses and passports), insurance cards, and inspection reports. Our OCR feature reads these documents to extract and pre-fill form fields; the extracted values (which may include a name, address, ID number, date of birth, or expiration date visible on the document) are stored to populate your forms.

Electronic signatures: handwritten signatures captured on a touch device to complete forms.

Payment information: when you subscribe, your card details are collected and processed directly by Stripe. We do not receive or store your full card number; we retain only limited billing metadata (such as card brand, last four digits, and a Stripe customer identifier).

AI assistant content: the messages and questions you send to our AI assistant, and the conversation history.

Usage and device information: log data, device and browser information, and analytics about how you interact with the Service, collected automatically.

3. How We Use Information

• Provide, maintain, secure, and improve the Service
• Extract data from uploaded documents and pre-fill forms (OCR)
• Generate estimates, run the AI compliance checklist, and power the AI assistant
• Process your subscription and usage-based billing
• Send account, activation, invitation, technical, and support communications
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information, and we do not use the customer data or documents you upload for advertising.

4. AI and OCR Processing

Our OCR, AI compliance checklist, and AI assistant are powered by Google's Gemini AI, provided through Google Cloud. To provide these features, the contents of the documents you upload (including images of government-issued IDs and vehicle titles) and the form data and messages you enter are transmitted to Google for processing and returned to the Service.

This processing is used solely to operate the features described above and is governed by the Google Cloud Data Processing Addendum. Your data is not used to train AI models, and we do not sell it.

5. How We Share Information

We do not sell your personal information. We share information only as needed to run the Service, with the categories of recipients below and other service providers who help us operate and support the Service (such as analytics, error monitoring, and customer support tools), under confidentiality obligations, or when required by law or to protect rights and safety.

We may also share information with professional advisors, or in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections. We may disclose information to law enforcement or government agencies when required by law or legal process.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Documents and records you create remain stored until your account is closed or you request deletion. You may request deletion of your data at any time by contacting us; we will delete or de-identify it within a reasonable period following a verified request, except where we are legally required to retain it. Following termination of your account, we make your data available for export for 30 days, after which it may be deleted.

7. Data Security

We take reasonable technical and organizational measures to protect information from loss, theft, misuse, and unauthorized access. Data is encrypted in transit using TLS and at rest, and our infrastructure is built on Google Cloud, which maintains industry-standard security certifications (including SOC 2). Access to your data is restricted to authorized personnel and systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at contact@gotitleai.com. We will respond as required by applicable law.

California residents (CCPA/CPRA). We do not sell or share personal information for cross-context behavioral advertising. Subject to verification, you may request access to, correction of, or deletion of your personal information, and we will not discriminate against you for exercising these rights.

9. Rights of Your Customers and Other Individuals

Much of the personal information in the Service concerns your customers and other third parties and was provided to us by you. If an individual whose information you entered wishes to exercise privacy rights, they should contact the title agency or business that entered their information, which is the controller of that data. We will assist our business customers in responding to such requests as required by applicable law.

10. Data Location

The Service is operated in the United States, and your information is processed and stored in the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information there.

11. Children's Privacy

The Service is intended for business use and is not directed to children under 18. We do not knowingly collect personal information directly from children.

12. Cookies

We use essential cookies and similar technologies to operate and secure the Service (for example, to keep you signed in) and limited analytics to understand usage. You can control cookies through your browser settings, though some features may not work without them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@gotitleai.com.