Privacy Policy

Last updated: April 24, 2026

DEALERPLATEGUY, LLC, doing business as WreckedLeads ("we," "us," or "WreckedLeads"), operates software that helps auto collision repair shops give their customers an AI-assisted preliminary damage estimate. This Privacy Policy explains what information we collect when you submit an estimate request, how we use it, how long we keep it, and the rights you have over it.

1. Who's collecting your information

When you submit a damage estimate through a shop's website, two parties are processing your data:

• The collision shop you submitted to (the "Shop") — they are the primary recipient of your lead and will contact you to follow up.
• WreckedLeads — we provide the software the Shop uses, so we process your data on their behalf as a service provider.

2. What we collect

When you use the estimate tool, we collect:

• Contact information you enter: full name, phone number, email address.
• Vehicle information: year, make, model, whether it's drivable, whether airbags deployed.
• Photos of the damage you upload.
• Technical metadata we record at submission time to prove you consented: your IP address, browser user agent, and timestamp.
• Attribution data: which ad, link, or referral brought you to the page (UTM parameters, referrer URL).
• Basic analytics via Google Analytics: pages viewed, approximate location, device type. No personally identifying data is sent to Google.

3. Why we collect it

• To give the Shop the information they need to call you back and confirm your estimate.
• To send you follow-up emails if you start an estimate but don't finish it (you can unsubscribe from these anytime — every email has a link at the bottom).
• To send your AI-generated estimate result back to you on screen.
• To help the Shop measure which advertising channels bring in real jobs.
• To improve the accuracy of our AI estimates over time (training data is anonymized — see Section 6).

4. Who we share it with

We share your data only with parties that help us provide the service:

• The Shop you submitted to — they get the full lead (name, contact, photos, AI estimate) so they can follow up with you.
• Anthropic — we send your damage photos and vehicle info to Anthropic's Claude AI model to generate the preliminary estimate. Anthropic does not train on or retain your data beyond processing the request.
• Supabase — our database host. Your data is stored on their servers in the United States.
• Postmark — handles sending the emails you receive from us.
• Cloudflare — hosts our website and provides bot protection.

We do not sell your personal information to third parties. We do not use your data for advertising beyond the Shop's attribution tracking.

5. How we protect it

• Data is transmitted over HTTPS/TLS.
• Photos are stored under non-guessable URLs.
• Access to the lead dashboard requires authentication.
• Our service providers (Supabase, Postmark, Cloudflare, Anthropic) are SOC 2 Type II compliant.

6. How long we keep it

Personal information (name, phone, email, photos) is automatically anonymized 90 days after your repair is closed, or 90 days after submission if you never return. After anonymization, only non-identifying technical data (vehicle year/make/model, damage category, final job total) is retained so the AI can learn to give better estimates to future customers.

You can request deletion of your data at any time before the 90-day window by emailing us (see Section 9).

7. Your rights

Regardless of where you live, you can always:

• Unsubscribe from our emails using the link at the bottom of every one.
• Request a copy of the data we hold about you.
• Request deletion of your data.
• Correct inaccurate data by contacting us.

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a consumer privacy law, you have additional rights under that state's law, including the right to know what personal information we have about you and the right to have it deleted. We will honor these requests regardless of your state of residence.

To exercise any right, email us at the address in Section 9. We'll respond within 30 days.

8. Children's privacy

WreckedLeads is not intended for use by anyone under 18. We do not knowingly collect information from minors. If you believe a minor has submitted information, contact us and we'll delete it.

9. Contact us

For privacy-specific requests, put "Privacy Request" in the subject line. We will respond within 30 days as required by applicable state privacy laws (CCPA, CPA, VCDPA, CTDPA, UCPA).

10. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and, when appropriate, notify you by email. Continued use of the service after an update means you accept the revised policy.

← Back to WreckedLeads