Privacy Policy

Version: 1.0Last updated:

Summary

This Privacy Policy explains what personal information Elite AI Broker collects, how we use it, with whom we share it, and what rights you have over that information. It applies to the site eliteaibroker.com, the subdomains (app.eliteaibroker.com, lia.eliteaibroker.com), conversations via WhatsApp, SMS, and AI voice, and the processing of your vehicle matching request.

Data we collect

We collect the following categories of data:

  • Contact data: name, phone number, email, preferred language.
  • Identity and qualification data: credit score range (not the exact score), credit tier (A/B/C), history of credit pulls performed through Elite.
  • Vehicle request data: make, model, desired year, budget, timeline, trade-in, search geography.
  • Conversational data: transcripts of chats with Lia, transcripts of AI voice calls (where applicable), voice note audio.
  • Technical data: IP, user agent, dates and times of interactions, session ID.
  • Consent data: immutable records of each consent act (SMS, AI calls, soft-pull credit, data processing) with timestamp, IP, and reference to the version of the text you accepted.

How we use your data

We use your data exclusively to:

  1. Qualify your request and match your need with appropriate affiliated dealers.
  2. Coordinate competitive negotiation between dealers for your vehicle.
  3. Schedule and confirm appointments.
  4. Comply with legal obligations (TCPA, FCRA, Florida 320.27).
  5. Internally improve our AI systems (see Credit data and AI Notice sections).
  6. Communicate updates about your deal (subject to your active consent).

We do not sell your personal data to third parties for external marketing purposes.

Third parties we share with

We share minimal and necessary information with the following third parties:

  • Affiliated dealers: first name, last initial, credit tier (range), vehicle of interest (pre-deal). Full information post-offer-acceptance.
  • Affiliated brokers: same data as dealers, as applicable.
  • Stripe (payment processor): card data for the commit fee. Stripe stores it; Elite does not.
  • Twilio (telephony/SMS): your phone number and content of messages we send/receive via SMS or voice.
  • Anthropic Claude (AI provider): text of your conversation with Lia, necessary context. Not used to train external models.
  • SoftPull Solutions: minimal data for soft-pull credit (name, date of birth, last 4 of SSN).
  • ElevenLabs (AI voice): text that Lia/Mia will vocalize.

We never share your full credit report with dealers or brokers, only the range/tier (FCRA Rule 6).

Credit data (FCRA)

We comply with the Fair Credit Reporting Act (FCRA):

  • The soft-pull credit that Lia performs does not affect your credit score.
  • Before doing the soft pull, we request explicit specific consent.
  • We only share the score range and tier with dealers/brokers, never the full report.
  • Credit data is encrypted at rest in Supabase, and access is restricted by Row Level Security (RLS).
  • After 25 months of inactivity, credit data is automatically archived to cold storage.

If Elite were ever to take an "adverse action" based on your credit info (it is not our usual practice; we offer alternatives, we do not deny service), we would send you an Adverse Action Notice in accordance with FCRA.

Your rights (CCPA-style)

Although Elite is not formally subject to the California Consumer Privacy Act (CCPA) because it is based in Florida, we apply its principles voluntarily as best practice:

  • Right to know: you can request what personal data we have about you.
  • Right to correct: you can ask us to correct inaccurate information.
  • Right to delete: you can request the deletion of your personal data, subject to legal retention obligations (consent logs for 4 years under TCPA, credit data for 25 months under FCRA).
  • Right to opt out of "sale": Elite does not sell your data, but you can still formally request this restriction.
  • Right to portability: you can request a copy of your data in machine-readable format (JSON).

To exercise any of these rights, write to info@eliteaibroker.com with the subject "Privacy Request". We respond within 30 calendar days.

Data retention

  • Contact and request data: while your account is active + 24 months thereafter.
  • Consent logs (TCPA): minimum 4 years from the consent date.
  • Credit data: 25 months, then cold storage for 5 additional years for audit.
  • Conversational transcripts: 24 months, then anonymization.
  • Financial logs (commit fees): 7 years (accounting obligation).

Security

We apply the following security measures:

  • Encryption in transit (TLS 1.3 mandatory on all endpoints).
  • Encryption at rest (AES-256 in Postgres with RLS by tenant_id).
  • Access to sensitive data restricted by service_role roles in Supabase Vault.
  • Immutable audit log of every access to sensitive data (ops.audit_log_global).
  • Periodic review of access logs by the founder (Jose Graveran) and the technical team.

Children

Elite does not offer services to minors under 18 years old and does not intentionally collect data from minors. If you discover that a minor has provided information to Elite, contact us so we can delete it immediately.

Contact for privacy requests

Elite AI Broker - Privacy Officer Email: info@eliteaibroker.com (subject: "Privacy Request") Phone: +1-786-981-9157 Postal address: Miami, FL - United States