Privacy Policy

StipScan is operated by Symeron Software Inc. (“Symeron,” “we,” “us”). StipScan lets an automobile dealership collect the documents a lender requires to complete a customer’s credit application. This policy explains what we collect, why, and what choices you have.

Dealerships use StipScan to serve their own customers. Where a dealership decides what to collect and why, that dealership is the controller of the information and Symeron acts as its service provider. If you are a dealership customer, contact the dealership handling your application first.

Information we collect

From consumers applying for vehicle financing:

• Name, mobile phone number, and email address, provided by the dealership.
• Names and phone numbers of personal references, when the dealership records them.
• Photographs or files of the documents you upload. Depending on what the lender requires, these may include a driver’s license, state ID, passport, permanent resident card, Social Security card, ITIN letter, proof of insurance, pay stubs, W-2 or 1099 forms, tax returns, bank statements, utility or mortgage statements, vehicle registration or title, a lease agreement, an award or benefit letter, and a signed credit application.
• Text and data read from those documents by automated character recognition, and technical metadata embedded in uploaded photos (such as EXIF camera and timestamp data) used to assess authenticity.
• IP address and activity timestamps, recorded in our audit log.

From dealership and lender users: name, email address, phone number, and sign-in records.

These documents commonly contain sensitive information, including government identification numbers and financial details. We handle them only for the purposes described below.

How we use information

• Send you a secure link to upload the documents your application requires.
• Identify what each uploaded document is and whether it is legible.
• Check documents for signs of alteration, duplication, or other fraud indicators, and share the result with the dealership.
• Assemble a package for the lender you are applying to.
• Send you reminders while your application is incomplete.
• Secure the service, investigate problems, and keep an audit trail.

We do not sell personal information. We do not use your information or your documents for advertising, and we do not use them to train our own models.

Text messages

If you give a dealership your mobile number and agree to be texted, we send you a link to upload your documents, plus reminders if your application is still incomplete. Message frequency varies with your application. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Who we share it with

We share information with:

• The dealership handling your application.
• The lender the dealership submits your application to, as part of your application package.
• Service providers who process information on our behalf, under contract and only for these purposes: Supabase (database and document storage), Amazon Web Services (text recognition), OpenAI (document classification, fraud review, and spoken upload prompts), Twilio (text messages), Resend (email), Clerk (dealership sign-in), Sentry (error monitoring), and Vercel and Railway (hosting).
• Authorities, where the law requires it.

Retention

We keep uploaded documents, the data read from them, and the related application records for as long as the dealership’s account is active, so the dealership retains the records its own lending and regulatory obligations require. We delete them when the dealership asks us to, or when its account closes. Lender package links expire seven days after they are created.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict how it is used. California residents have these rights under the CCPA, including the right not to be discriminated against for exercising them; we do not sell or share personal information as those terms are defined there.

Because your information belongs to your dealership’s records, please start with the dealership handling your application. You can also contact us and we will route your request to them.

Security

Information is encrypted in transit. Documents are held in access-controlled storage and reached only through short-lived signed links. Dealership accounts are separated from one another, access requires authentication, and actions are recorded in an audit log. No system is perfectly secure, and we cannot guarantee absolute security.

Children

StipScan supports vehicle credit applications and is not directed to children. We do not knowingly collect information from anyone under 18.

Changes

We update this policy when our practices change, and will revise the effective date above when we do.

Contact

Symeron Software Inc.
stipscan@autoclick.com