NextAfto

Privacy Policy

Last updated: May 21, 2026

1. Who we are

NextAfto ("NextAfto," "we," "us," or "our") operates the NextAfto platform at nextafto.com (the "Service"), which connects vehicle shoppers ("Customers") with participating motor-vehicle dealers ("Dealers") so Dealers can submit competing offers. This Privacy Policy explains what information we collect, how we use it, and your choices.

2. Information we collect

From Customers: name, email address, phone number, ZIP code, vehicle preferences (make, model, year, trim, colors, options), deal terms (term length, monthly target, down payment, credit range), and, if you submit a trade-in, the trade vehicle's VIN, mileage, condition, loan payoff balance, accident history, key count, title status, and photographs.

From Dealers: business legal name and DBA, contact name, address, ZIP, phone, email, website, dealer license number, brands and models carried, service area definitions, and payment / subscription information processed by our payment processor.

Automatically: IP address, browser type, device identifiers, pages visited, referrer URLs, timestamps, and session cookies necessary for authentication and security.

From third parties: vehicle data and VIN decoding from the National Highway Traffic Safety Administration (NHTSA) and other automotive data providers; payment status from our payment processor; deliverability data from our email and SMS providers.

3. How we use information

We use information to operate, maintain, secure, and improve the Service; match Customer requests to eligible Dealers; deliver Dealer offers to Customers; verify Customer identity (e.g., one-time codes sent by email or SMS); send transactional and service messages; prevent fraud and abuse; comply with law; analyze usage; and develop new features. We may aggregate or de-identify information for any purpose, indefinitely.

4. How we share information

With Dealers: when you submit a Customer request, we share the request details, your ZIP, vehicle preferences, deal preferences, and any trade-in details (including VIN and photos) with the matched Dealers. We do not share your phone number or email address with Dealers; Dealers contact you only after you affirmatively reach out to them using the contact information they provide in their offer.

With service providers: hosting, email (SMTP), SMS, payment processing, error monitoring, analytics, and similar vendors who process information on our behalf under written contracts.

For legal reasons: to comply with a subpoena, court order, or other legal process; to enforce our Terms of Service; or to protect the rights, property, or safety of NextAfto, our users, or the public.

Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor or acquirer.

5. Cookies and similar technologies

We use strictly necessary cookies for authentication and session management. We may also use first-party analytics cookies. You can disable cookies in your browser, but parts of the Service will stop working (for example, you will not be able to stay signed in).

6. Data retention

We retain Customer requests, offers, and audit records for as long as your account is active and for a commercially reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. We may retain aggregated or de-identified information indefinitely.

7. Security

We use technical and organizational safeguards designed to protect personal information, including TLS in transit and access controls. No system is perfectly secure; you use the Service at your own risk.

8. Your choices

You may update or correct your account information at any time by signing in. You may request deletion of your account by contacting us at the address below; some records may be retained as required by law or for legitimate business purposes (e.g., audit logs, completed transaction records).

9. California residents

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what categories of personal information we collect, to request access or deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. We may "share" limited information with Dealers as described above; you can opt out by not submitting a Customer request, since Dealer matching is the core function of the Service. To exercise CCPA rights, email [email protected].

10. Children

The Service is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. International users

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, which may have data-protection laws different from those of your country.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes will be communicated by posting a notice on the Service or by email. Continued use after changes take effect constitutes acceptance.

13. Contact

Questions about this Privacy Policy can be sent to [email protected] or via the contact form.