Privacy policy

• Bid and contact data: name, business or brand name, email, phone, website, selected space, bid amount, timestamps, and messages.
• Creative and fulfillment data: uploaded artwork, production proofs, approvals, installation records, placement photographs, renewal choices, and support history.
• Authorization and payment data: Stripe customer, payment-method, authorization, PaymentIntent, and charge identifiers; card brand and last four digits; authorized, capturable, captured, released, and refunded amounts; authorization and recovery status; capture deadlines; fraud signals; and billing contact details. Brand My Van does not receive or store complete card numbers or card security codes.
• Website and device data: pages viewed, referrer, browser and device characteristics, approximate location derived from an IP address, first-party identifiers, interaction events, error logs, and security data.

• Run the auction, validate bids, determine winners, prevent fraud, and resolve ties or errors.
• Authorize full-amount bid holds, show a bidder's reserved exposure, capture one-time winning payments, recover failed captures, release uncaptured holds, issue refunds of captured money, maintain records, and handle disputes.
• Review creative, prepare proofs, print, install, document, maintain, renew, and remove placements.
• Answer questions, send service notices, enforce the policies, and comply with legal or processor requirements.
• Measure site use, understand which visits lead to bids or payments, diagnose problems, and improve the service.

Brand My Van does not sell personal information for money and does not use bidder information to send unrelated third-party marketing.

Brand My Van uses service providers to operate the site and campaign. They process information under their own terms and privacy commitments:

• Stripe for full-amount card authorizations, manual capture, authentication, hold release, payment processing, refunds, fraud prevention, and payment records.
• Supabase for auction, bidder, campaign, and operational data storage.
• Vercel for website hosting, server functions, and operational logs.
• Cloudflare for domain, network, security, and traffic services when enabled.
• DataFast for first-party website analytics and attribution when enabled.
• Printing and installation vendors only when they need approved artwork and job details to fulfill a winning placement.

If DataFast payment attribution is enabled, an analytics visitor identifier may be associated with a bid authorization or captured Stripe payment so Brand My Van can understand which site visit produced a conversion. Complete card data is not shared with DataFast.

The site may use first-party cookies or similar storage for security, session continuity, saved preferences, analytics, and attribution. DataFast may receive a first-party visitor identifier plus page and interaction data when analytics is enabled. Browser controls can clear or block these technologies, but blocking necessary storage may prevent bidding or payment verification from working.

Where applicable law requires a choice before non-essential analytics, Brand My Van will not enable those analytics until that choice is available. Recognized browser privacy signals will be handled where required by applicable law.

Information may be disclosed to the service providers above; to professional advisers under confidentiality; when reasonably necessary to prevent fraud or protect people, the vehicle, or the service; in connection with a business transfer; or when required by valid legal process.

Auction amounts and status can be public, but bidder email, phone, card, and private billing data are not posted. Approved artwork and advertiser identity are necessarily public while displayed on the vehicle and may appear in campaign documentation or photographs.

Brand My Van keeps information only as long as reasonably needed to run the auction and campaign, provide renewals and support, maintain tax and payment records, prevent fraud, resolve disputes, and meet legal obligations. Retention periods vary by record type. When information is no longer needed, it is deleted or de-identified where reasonably practical.

Access controls, encrypted network connections, restricted server credentials, and third-party payment handling are used to reduce risk. No online system can guarantee absolute security. If a security incident materially affects your information, notice will be provided as required by applicable law.

You may ask to access, correct, or delete personal information, or object to certain uses, through the monitored support contact below. Brand My Van may verify the request and may retain information required for payment, tax, fraud-prevention, dispute, and legal records. Depending on where you live, additional rights may apply, including the right to appeal a denied request or use an authorized agent.

Service messages about a bid, authorization deadline, hold release, payment recovery, captured payment, proof, installation, downtime, renewal opportunity, policy enforcement, or support request are part of fulfilling the transaction and are not promotional subscriptions.

The service is for adults and is not directed to children under 18. Service providers may process data in the United States or other locations where they operate. Material privacy changes will be dated and posted here; where required, additional notice or consent will be provided.