Legal

Privacy Policy

Effective date: October 25, 2026

This Privacy Policy explains how FinalLap, LLC, a Delaware limited liability company doing business as FinalLap (“FinalLap,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use finallap.com and any related applications, communications, and services that link to this Policy (collectively, the “Services”).

This Policy applies to visitors, account holders, Sellers, Bidders, Buyers, and people who communicate with us. It does not govern a Buyer or Seller's independent handling of information after we connect them.

1. Personal Information We Collect

The information we collect depends on how you use the Services and may include:

Account and Contact Information — Name, username, email address, telephone number, mailing address, profile photo, password or authentication credentials, communication preferences, and account identifiers.

Seller and Vehicle Information — Vehicle year, make, model, trim, VIN, mileage or kilometers, title and registration information, lien and loan information, ownership or authorization documents, location, service history, condition, modifications, photographs, videos, and other listing details. Some listing information is intentionally made public.

Bidding and Transaction Information — Bid amounts and timestamps, watchlists, auction activity, questions, offers, winning-bid information, buyer-seller communications routed through the Services, transaction status, and records needed to support or protect the marketplace.

Payment Information — Information needed to verify payment methods and charge fees. Our payment processor generally collects complete payment-card information directly; FinalLap may receive a token, card brand, expiration date, last four digits, and payment result rather than the complete card number.

Identity, Fraud, and Compliance Information — Date of birth, age confirmation, government-issued identification, proof of address, ownership or authority records, verification results, and sanctions or fraud-screening information, collected only when reasonably needed.

Communications and User Content — Emails, support requests, comments, reviews, messages, photographs, videos, documents, and other content you provide.

Device, Usage, and Cookie Information — IP address, device and browser type, operating system, referring and exit pages, approximate location derived from IP address, identifiers, pages viewed, clicks, auction interactions, and information collected through cookies, pixels, local storage, SDKs, and similar technologies.

Information from Other Sources — Information from identity-verification, fraud-prevention, payment, analytics, vehicle-history, inspection, shipping, social-login, marketing, and other partners; public records; and other users.

2. Sources of Personal Information

We collect personal information directly from you; automatically from your browser, device, and use of the Services; from other users involved in a listing or transaction; from service providers and business partners; and from public or commercially available sources where permitted by law.

3. How We Use Personal Information

We may use personal information to: provide, operate, maintain, and improve the Services; create and secure accounts; review vehicle submissions and create, edit, publish, promote, and archive listings; enable bidding and auction features; verify payment methods and charge and administer fees; share contact and transaction information between a winning Buyer and Seller; provide support; verify identity, ownership, and listing information; detect and address fraud, shill bidding, security incidents, and policy violations; moderate content and enforce our Terms; analyze usage and marketplace trends; personalize content; send transactional notices and, where permitted, marketing communications; comply with legal obligations; establish, exercise, or defend legal claims; and protect users, FinalLap, and the public.

We may aggregate or de-identify information and use it for lawful purposes. FinalLap does not use User Content to train third-party artificial-intelligence or machine-learning models.

4. Public Information and Buyer-Seller Sharing

Listings, vehicle information, auction results, usernames, comments, photos, videos, and other content you choose to post may be visible to the public and may be indexed by search engines. Do not post information you want to keep private.

When an auction ends with a winning result, we may disclose the winning Buyer's and Seller's name, email address, telephone number, vehicle information, bid amount, and other reasonably necessary transaction information to each other so they can complete the sale. Each party then handles that information independently and must use it only for the transaction, safety, legal compliance, or another lawful purpose.

5. How We Disclose Personal Information

We may disclose personal information to: service providers (hosting, payment processing, fraud prevention, analytics, support, and similar functions); other users when needed to complete a transaction or investigate a problem; business and integration partners when you request or use an integrated service; professional advisers; courts, law enforcement, regulators, and others when required or permitted by law or to protect rights and safety; potential or actual investors, purchasers, or successors in a corporate transaction; and other parties when you consent or direct us to disclose information.

6. Cookies, Analytics, and Advertising

We and our providers, such as our payment processor, use cookies and similar technologies such as local storage to keep you signed in, keep the Services secure, prevent fraud, and remember your settings. The Services need these to work.

We use PostHog, an analytics provider, to understand how the Services are used: which pages are visited, where visitors arrive from, and which steps people complete, such as creating an account, registering to bid, or listing a car. PostHog receives your IP address, which it converts to an approximate location, and your device and browser type, and it sets a cookie so a returning browser is recognized. When you are signed in, we link this activity to your account using an internal identifier. PostHog does not receive your name, email address, phone number, payment details, or bid amounts, and we do not record your screen.

We also use Google Analytics, Google Ads and the Meta Pixel to measure our ads. They set cookies, and Google and Meta may use what they collect under their own privacy policies. If you give an email, a scrambled version of it may be sent to them. We do not sell personal information. Some state laws treat this ad measurement as “sharing”; to opt out, turn on Global Privacy Control in your browser and these tags will not load.

7. Marketing Communications

You may unsubscribe from marketing emails using the unsubscribe link or by contacting us. Even after opting out, we may send non-marketing messages about your account, bids, listings, fees, security, or transactions. For recipients in Canada, we will send commercial electronic messages only with consent or another lawful basis and will comply with CASL.

Text messages. We use your mobile number to send the codes that confirm it and sign you in, and the account, auction and marketing texts you agree to. Reply STOP to any text to opt out of those messages, or change your choices in your account settings. We keep a record of when you agreed and opted out, because a text program has to be able to show it.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Payment and Identity Providers

Fees are processed by Stripe, and text messages and phone verification are handled by Twilio. Their privacy policies govern information they collect directly. FinalLap does not intend to store complete payment-card numbers. If FinalLap uses an identity-verification provider, additional notice and consent will be provided as required for sensitive or biometric information.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to maintain accounts and listings, preserve auction history and public results, complete billing, prevent fraud, resolve disputes, enforce agreements, and satisfy legal, tax, and recordkeeping obligations. Public listings and auction results may remain available indefinitely as part of the historical marketplace record unless removal is required by law.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure. You are responsible for using a strong unique password and promptly reporting suspected compromise to support@finallap.com.

11. Your Choices and Requests

Depending on where you live and subject to exceptions, you may have rights to access, know, correct, delete, or obtain a copy of personal information; opt out of sale, sharing, or targeted advertising; limit certain uses of sensitive information; withdraw consent; appeal a denied request; and receive equal service without unlawful discrimination. You can delete your account yourself in your account settings; finallap.com/delete-account explains what is deleted and what we must keep. To submit any other request, email privacy@finallap.com. We may need to verify your identity.

12. U.S. State Privacy Disclosures

Where a U.S. state privacy law applies, FinalLap may have collected identifiers, customer-record information, commercial information, internet activity, geolocation, visual information, professional information, inferences, and sensitive personal information (used only for permitted purposes such as security and fraud prevention). We do not sell personal information for money. We do not sell personal information; Section 6 describes our ad measurement and how to opt out. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale/sharing.

13. Canadian Privacy Information

FinalLap is responsible for personal information under its control. We will designate a Privacy Officer contactable at privacy@finallap.com. We collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate, with consent or another lawful basis. Canadian residents may request access and correction subject to limited exceptions. Personal information may be processed in the United States and may be subject to foreign laws. We retain information only as long as reasonably necessary.

Quebec: Unless FinalLap expressly states otherwise, transactional Services are not currently offered to consumers in Quebec. Before serving Quebec residents, FinalLap should provide French-language materials and additional Quebec-specific privacy disclosures and procedures.

14. International Users and Cross-Border Processing

The Services are operated from the United States. If you use them from Canada or another country, your information may be transferred to and processed in the United States and other countries whose privacy laws may differ from those where you live.

15. Children and Minors

The Services are not directed to children or minors. FinalLap does not knowingly collect personal information from anyone under 18 or under the age of majority required to use transactional Services. Contact privacy@finallap.com if you believe a minor provided personal information.

17. Changes to This Policy

We may update this Policy prospectively. We will post the revised Policy and update the effective date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent where required.

18. Contact Us

Privacy Officer

FinalLap, LLC

17301 Beach Boulevard, Suite 20, Huntington Beach, CA 92647

Email: privacy@finallap.com