Privacy Policy

1. Who we are & scope

Lucky Motor Co. is a flat-fee car-buying concierge and negotiation service based in Simi Valley, California. We act on behalf of the buyer to source vehicles, negotiate with dealers, remove unnecessary add-ons, and help arrange financing and delivery. We are paid only by the buyer and do not accept commissions or payments from dealers.

This Policy applies to personal information we collect through the Site and Services. It does not apply to the practices of third parties we do not own or control, including dealerships, lenders, or other websites that may be linked from our Site. This Policy also serves as our “notice at collection” under California law.

2. Information we collect

Information you provide to us

We collect information you choose to give us, such as when you submit a contact form, request a consultation, book a call, use the AI Deal Analyzer, or communicate with us. This may include:

• Identifiers and contact details — your name, email address, and phone number (if you call or email us).
• Vehicle and deal details — the car you are interested in, and any pricing, quote, or offer information you submit to the AI Deal Analyzer.
• Scheduling information — details provided when you book a call through our scheduling provider.
• Communications — the contents of messages, emails, and notes you send us.

Information collected automatically

When you use the Site, we and our analytics and advertising partners automatically collect certain information through cookies and similar technologies, including:

• Device and connection data — IP address, browser type, device type, operating system, and referring/exit pages.
• Usage and interaction data — pages viewed, links clicked, time on page, scrolling, and similar activity, including session-replay and heatmap data (see Section 6).
• Approximate location — general location inferred from your IP address. We do not collect precise (GPS-level) geolocation.

3. Categories of personal information (CCPA/CPRA)

Over the past 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (CCPA), as amended by the CPRA. The sources are you, your device and browser, and our analytics and advertising partners.

*“Shared” means disclosed to advertising partners (e.g., Meta) for cross-context behavioral advertising, which may be treated as a “sale” or “share” under California law. See Sections 7 and 9. We do not sell your personal information for monetary payment.

We do not collect the following CCPA categories: protected classifications (e.g., race, religion); biometric information; sensory data such as audio or video recordings of you; professional or employment information; education records; genetic data; or sensitive personal information as defined by the CPRA.

4. How we use your information

We use personal information to:

• Provide, operate, and deliver the Services, including negotiating, coordinating paperwork and financing, and arranging delivery.
• Respond to your inquiries, schedule and conduct consultations, and communicate with you about your deal.
• Generate your AI Deal Analyzer results (see Section 5).
• Operate, maintain, analyze, and improve the Site and Services, including through analytics and session replay.
• Market and advertise our Services, including measuring and optimizing advertising campaigns and reaching relevant audiences (see Sections 6 and 7).
• Detect, prevent, and address security incidents, fraud, and abuse.
• Comply with legal obligations and enforce our terms.

We use your information consistent with the purposes for which it was collected, and we do not use sensitive personal information for purposes beyond what is permitted under the CPRA.

5. The AI Deal Analyzer

The AI Deal Analyzer is a free tool that reviews vehicle and pricing details you submit and returns an analysis. Information you enter is transmitted through our infrastructure provider (Cloudflare) to our AI provider (Anthropic) to generate the analysis, which may include real-time web search. We may also email you and store a copy of your submission and result to follow up with you and improve the Services.

Inputs to and outputs from our AI provider are not used to train its models. The Analyzer is intended for general guidance only and does not constitute financial, legal, or tax advice. Please do not enter sensitive personal information into the tool.

6. Cookies & tracking technologies

We use cookies, pixels, and similar technologies that fall into three general groups:

• Essential — needed for the Site to function.
• Analytics & performance — to understand how the Site is used and improve it. We use Microsoft Clarity, which captures interaction metrics, heatmaps, and session replays (recording mouse movements, clicks, and scrolling, with page content masked where supported). It does not record audio or video of you.
• Advertising — to measure and improve our advertising. We use the Meta Pixel and Meta Conversions API; see Section 7.

Your choices for tracking

You can control cookies through your browser settings and opt out of many advertising cookies via industry tools. We honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale/sharing of personal information for the browser and device from which it is sent. Blocking some cookies may affect how the Site works.

7. How we disclose your information

Service providers

We share personal information with vendors who process it on our behalf, under contracts that limit their use of it to providing services to us. These include:

• Framer — website hosting.
• Cloudflare — infrastructure and serverless backend.
• Anthropic — AI processing for the Deal Analyzer.
• Resend — transactional and follow-up email delivery.
• Cal.com — appointment scheduling.
• Microsoft Clarity — analytics and session replay.
• Notion — internal customer record-keeping.

Advertising partners

We use Meta Platforms, Inc. (the Meta Pixel and the Meta Conversions API) to measure and improve our advertising and to reach relevant audiences. Through these tools, we may disclose certain information to Meta, including identifiers such as a hashed (pseudonymized) version of your email address and information about your interactions with our Site.

Other disclosures

We may disclose information to comply with the law or legal process, to protect our rights, property, and safety or that of others, and in connection with a merger, acquisition, financing, or sale of all or part of the business. We do not disclose your personal information for those parties’ own independent marketing without your consent.

8. Your California privacy rights

If you are a California resident, you have the following rights under the CCPA/CPRA, subject to certain exceptions:

• Right to know / access — request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
• Right to delete — request deletion of personal information we collected from you.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale/sharing — direct us not to sell or share your personal information for cross-context behavioral advertising (see Section 9).
• Right to limit use of sensitive personal information — note that we do not use or disclose sensitive personal information for purposes that trigger this right.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

How to exercise your rights

Submit a request by emailing Cole@luckymotorco.com with the subject “California Privacy Request,” or by calling (805) 823-5810. To protect your information, we will take steps to verify your identity before responding, and we may ask for information to match it against what we hold. You may use an authorized agent to submit a request on your behalf with proof of authorization. We will respond within the timeframes required by law (generally within 45 days, with one permitted extension). If you believe we have violated your rights, you may also contact the California Privacy Protection Agency or the California Attorney General.

9. “Do Not Sell or Share My Personal Information”

You can opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising in any of these ways:

• Enable the Global Privacy Control (GPC) in a supported browser or extension — we treat this as a valid opt-out automatically.
• Email us at the address in Section 17 with the subject “Do Not Sell or Share.”
• Disable advertising cookies through your browser settings.

Because opt-outs tied to cookies are specific to the browser and device you use, you may need to opt out on each browser and device.

10. California “Shine the Light”

Under California Civil Code § 1798.83, California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing. You may direct questions to the contact in Section 17.

11. Data retention

We retain personal information for as long as needed to provide the Services, communicate with you, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it. Retention periods vary based on the type of information and the purpose for which it was collected.

12. Data security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including transmitting information over encrypted connections and pseudonymizing certain identifiers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

13. Children’s privacy

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

14. Third-party links

The Site may link to third-party websites and services we do not control, such as dealerships, lenders, or our scheduling provider. This Policy does not apply to those sites. We encourage you to review their privacy policies.

15. Visitors outside the United States

The Services are intended for users in the United States, and the information we collect is processed in the United States. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

16. Changes to this policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be posted on this page. Your continued use of the Services after an update means you accept the revised Policy.

17. Contact us

Questions about this Policy or your personal information? Reach us at: