Privacy policy
Last updated 16 September 2026
This policy covers the Auction Key ERP, the Auction Key Access app, VIN Intelligence and this website. Questions go to info@auctionkey.app.
Who we are
Auction Key makes software for car auction brokers. A broker runs their business on it, and their buyers and clients sign in to it. In this policy, "we" means Auction Key and "you" means anyone who uses one of our apps or this website.
What we collect
We collect what the apps need to work. That is:
- Account details: your name, email or username, password, role, and the language you picked. Staff accounts also get a one-time sign-in code by email.
- Business records a broker enters: clients with their name, phone number, city and notes, and cars with their VIN, lot, prices, fees, payments and shipping details.
- Auction access: the Copart, IAA and Manheim accounts a broker connects to Access, the limits and approvals set for each buyer, and a recording of each buyer session in Access.
- VIN Intelligence: the VINs you look up and the reports we produce for them.
- Device and server data: a push notification token if you turn notifications on, and server logs with your IP address, the time and the request made.
How we use it
We use this data to run the apps for the broker who pays for them: signing you in, showing each person what their role allows, sending the notifications you turned on, counting the cars won for billing, moving a broker's existing records in, and answering support requests.
We do not sell personal data, and we do not use it for advertising.
This website sets no cookies and runs no analytics. If you message us on WhatsApp or by email, we get what you send.
If a broker added you
If you are a buyer or a client of a broker, that broker decides what goes into their Auction Key account about you, and we hold it for them. Ask the broker first to see, correct or delete it. You can also email info@auctionkey.app and we will pass the request on.
How long we keep it
We keep data while the account it belongs to is active. When an account is closed or a deletion request is confirmed, we delete its data within 30 days. We keep billing records for as long as tax and accounting law requires.
Security
Data travels between the apps and our servers over encrypted connections. Only the people who run and support the service can reach it, and only when that work needs it. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you.
Your choices
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email info@auctionkey.app and we answer within 30 days. The steps for deletion are on the Delete my data page.
Our servers may be in a country other than yours.
Children
Auction Key is business software for adults. We do not knowingly collect data from anyone under 18.
Changes
When this policy changes, we update the date at the top of this page. If a change affects how we use data you already gave us, we tell account holders before it takes effect.