What we collect, how we use it, who sees it, and what your rights are. Plain language — because if we can’t explain it plainly, you shouldn’t have to read it.
Last updated October 1, 2026
Applies to trumanmotors.com and all Truman Motors sales, finance, and service operations
This policy explains how Truman Motors collects, uses, and protects the information you share with us. It covers the website, the inventory and trade-in tools, the credit application, the service department, and the email, text, and CRM systems we use to sell and service vehicles.
If you apply for financing or a lease, you will also receive our Gramm-Leach-Bliley Act privacy notice at the time you apply. That notice governs the nonpublic personal financial information on your credit application. This policy covers everything else — and where the two overlap, the GLBA notice controls.
1. What we collect
We collect only what we need to answer your question, price your vehicle, get you financed if you ask, and service what you drive.
• Existing Vercel Web Analytics provides pageview statistics with sanitized page URLs. When you choose to allow optional Google Analytics, we measure page visits, time spent with visible pages, scroll milestones, use of the configurator and inquiry steps. We do not send form contents, contact details, VINs, free-text messages or submission identifiers to website analytics. A submitted inquiry is handled separately so we can respond to you.
• When you ask about a vehicle, we collect the contact information you choose to share — typically name, email, and phone number — along with whatever you tell us about your timeline, your trade, and how you plan to pay. That is what lets a salesperson show up to the conversation prepared.
• From the trade-in tool, we collect your VIN or year, make, model, mileage, condition, and options. We run that against vehicle history and wholesale market data to produce a number. You see a range before we ask for your name.
• On a test drive, we scan or photograph your driver’s license and confirm you carry insurance. Our garage-liability insurer and California law both require it. That record is retained under section 5 and is never used for marketing.
• When you apply for financing or a lease, the credit application collects your Social Security number, date of birth, employment and income, residence history, and your written authorization to pull credit. This is nonpublic personal information under the Gramm-Leach-Bliley Act and is handled accordingly.
• In service and parts, we collect your VIN, mileage, service and repair history, warranty status, and the diagnostic data your vehicle reports when we connect to it.
We do not run a credit inquiry until you sign a credit application authorizing one. Browsing inventory, using the trade-in tool, and asking a question about a vehicle never trigger a credit pull — hard or soft.
2. How we use it
We use what we collect to answer your question about a vehicle, price your trade, submit your application to the lenders you authorize, complete the sale or lease and the paperwork the DMV and the state require, service your vehicle, and reach you about recalls and warranty work.
We use analytics to understand which parts of the site actually help shoppers so we can keep improving them.
We do not use credit application information for marketing. What you give us to get financed is used to get you financed — nothing else.
Safety recall and other legally required notices go out regardless of your marketing preferences. Those are not marketing, and you cannot be opted out of them by us.
3. Text messages and mobile information
We text you only if you have opted in — by giving us your mobile number and agreeing to be contacted that way, or by texting us first. You can stop at any time by replying STOP to any message, or get help by replying HELP. Message and data rates may apply, and message frequency varies with where you are in a purchase or a repair order.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
Opting out of text messages does not affect your ability to buy, finance, or service a vehicle with us. We will simply reach you by phone or email instead, and recall and other legally required notices will still be sent by mail or email.
4. Who we share it with
• Lenders and finance sources — only those you authorize on a signed credit application, and only for the purpose of obtaining your financing or lease. Each lender maintains its own privacy policy governing what it does with the application after it receives it.
• The vehicle manufacturer — for the brands we represent, we transmit warranty registration, recall contact information, factory incentive claims, and owner satisfaction surveys. This is a condition of the franchise and of your factory warranty.
• Government agencies — the DMV for title and registration, the state for sales and use tax, and the federal filings vehicle sales require, including odometer disclosures and IRS Form 8300 for cash payments above the reporting threshold. None of this is optional for either of us.
• Service providers who help us run the business include our dealer management system, CRM, website host, email and text platforms, credit bureaus and identity verification vendors, and the administrators of any insurance or aftermarket product you purchase. Optional website analytics providers and your choices are described in section 8. Each provider’s applicable terms and privacy notice describe its processing.
• Legal obligation — if compelled by valid legal process (subpoena, court order, regulatory inquiry, or a lienholder’s or law enforcement’s lawful demand regarding a specific vehicle), we will disclose information to the extent required. We do not voluntarily share with law enforcement absent valid legal process.
We do not sell your information to third parties. We do not rent, trade, or share your contact information with data brokers or lead aggregators. Nothing about how Truman Motors makes money depends on monetizing your data — we make money selling and servicing cars. Mobile numbers and text consent are never shared at all, as stated in section 3.
5. How long we keep it
We keep information as long as we need it to provide the service and to meet our legal, warranty, and accounting obligations. Operationally:
• If you inquire about a vehicle and do not buy, we retain your contact and vehicle-interest record for up to 24 months, then delete it.
• If you use the trade-in tool without giving us contact information, we retain the VIN-level valuation to improve the model. There is nothing in that record that identifies you.
• If you buy or lease, the deal file is retained for the period federal and California law require — generally seven years, and longer for the title and odometer records the DMV specifies.
• If you apply for credit and no deal results, we retain the application for 25 months as the Equal Credit Opportunity Act requires, then destroy it under the disposal standards of the FTC Safeguards Rule.
• Service and repair records are retained for the life of our relationship with the vehicle, so the history follows the car and the next technician is not guessing.
• If you ask us to delete your information, we do so within 30 days, subject to any records we are legally required to retain. For a completed vehicle sale, that exception covers most of the file — we will tell you specifically what we kept and why.
6. Your rights
You have the right to know what we have, to correct it, to delete it, and to opt out of any non-essential use of it. These rights apply regardless of where you live — we extend them to all U.S. residents.
To exercise any of these rights, email privacy@trumanmotors.com or write to us at the address in section 12. We will respond within 30 days, and we will not charge you for exercising any right under this policy.
7. California residents (CCPA / CPRA)
If you live in California, the California Consumer Privacy Act and the California Privacy Rights Act give you specific additional rights. We honor all of them.
• Right to know what categories of personal information we have collected about you in the prior 12 months, the sources, the purposes, and the categories of third parties we have shared it with.
• Right to delete the personal information we have about you, subject to limited exceptions (chiefly active transactions, warranty and safety records, and the DMV, tax, and lending records we are required to keep).
• Right to correct inaccurate personal information.
• Right to opt out of any “sale” or “sharing” of personal information. As stated above, we do not sell or share your information for cross-context behavioral advertising; this right is preserved nonetheless.
• Right to limit the use of sensitive personal information. We collect your Social Security number and driver’s license number, which California treats as sensitive, and we use them only to verify identity, obtain financing you requested, and complete title and registration — never to infer characteristics about you.
• Right to non-discrimination — we will not deny you service, charge you a different price, or provide a different level of service because you exercised any of these rights.
Information we collect in connection with a credit application is governed by the Gramm-Leach-Bliley Act and is exempt from the CCPA. We extend equivalent handling to it anyway, but the deletion right does not reach records the GLBA and lending regulations require us to retain.
To exercise your California rights, email privacy@trumanmotors.com with the subject line “California Privacy Request.” You may designate an authorized agent to make a request on your behalf.
8. Cookies and analytics
Essential website functions and inquiry forms work without optional analytics. We store your analytics choice in this browser for up to 180 days so we can respect it on later visits. Use Privacy choices in the footer to allow or reject optional Google Analytics at any time. Existing Vercel Web Analytics pageview measurement continues without analytics cookies when you reject Google Analytics; these optional controls do not turn it off. If your browser sends Global Privacy Control, this website keeps optional analytics off. Your email-marketing preference on an inquiry form is a separate choice.
When enabled and you have opted in, we use Google Analytics to understand use of the main website. Google receives usage events and technical information about the browser and device; its service may derive an approximate location from network information. We use a 30-day lifetime for our Google Analytics cookies, turn off advertising storage and personalization signals in our website integration, and do not send your inquiry contents to Google Analytics. We remove query strings and fragments from the page URLs we send to Google Analytics. We send only recognized referring website origins, without their paths, query strings or fragments. For Google Analytics source reporting, we keep finite source and medium labels and an approved referring origin in this browser tab while a visit is active, with an approximately 30-minute inactivity limit. Current approved landing labels take precedence; unknown referring websites are omitted. Separately, we may remember the first eligible approved source and medium labels and a recognized referring website’s origin on this browser for up to 30 days after you opt in, for CRM inquiry attribution. Google Analytics does not reuse this 30-day CRM record as the source of later visits. If you send an inquiry while this choice is active, we include those approved labels and a sanitized public page in the inquiry record in our CRM to understand which sources bring inquiries. No referring path, query string or fragment is included. Campaign names and content labels are currently excluded until specific labels are approved. We do not store ad-click identifiers such as GCLID or FBCLID. Rejecting Google Analytics removes this website’s optional tab-visit and CRM campaign records and Google Analytics cookies and stops further collection by the optional Google Analytics integration. It does not stop the existing Vercel pageview baseline. It does not erase source context already saved with an inquiry or data already received by a provider, or change choices on other websites or subdomains. To avoid counting the same received inquiry submission more than once, we keep up to 100 random submission identifiers on this browser, expiring after 30 days, and remove them when you reject analytics. These identifiers are not sent to analytics providers.
9. How we protect what we collect
As a dealer that arranges financing, we are a financial institution under the FTC Safeguards Rule and maintain a written information security program with a designated qualified individual responsible for it. Information is transmitted over HTTPS, nonpublic personal information is encrypted in transit and at rest, access requires multi-factor authentication, and staff and contractors reach customer records only as their jobs require. Our staff are trained annually, and our vendors are assessed before they touch customer data.
Paper deal jackets and applications are stored in locked storage and destroyed by cross-cut shredding or a bonded destruction vendor when their retention period ends.
No system is perfectly secure. If we ever experience a breach that affects your information, we will notify you in accordance with California law — and we will tell you what happened, what information was involved, and what we are doing about it.
10. Children’s privacy
Truman Motors’ services are not directed to children under 16, and we do not knowingly collect information from children under 16. If you believe a child has provided information to us, please contact privacy@trumanmotors.com and we will delete it.
11. Changes to this policy
We may update this policy from time to time as the business changes. When we do, we will update the “Last updated” date at the top of this page. For material changes — changes that expand the categories of information we collect or share — we will notify you directly via the email address you provided, if any.
12. Contact us
Questions, requests, or complaints about this policy can go to privacy@trumanmotors.com or, by mail:
Truman Motors
Privacy Office
16501 Ventura Boulevard, Suite 610
Encino, California 91436
About this policy
This is the operating policy in effect on the date listed at the top of this page. We aim to keep it short enough that you can actually read it. If anything here is unclear, that’s on us — email us and we’ll explain.
Optional Microsoft Clarity replay
Only after your separate replay opt-in, Microsoft Clarity records masked interactions on selected public pages of www.trumanmotors.com to help us improve the website. Dedicated inquiry/contact pages, the configurator, unreviewed pages, and visits with unapproved URL or referrer information are excluded. Form contents on other public pages are masked. Microsoft receives technical browser/device and interaction information and uses analytics cookies. We do not provide customer identifiers or inquiry contents, and our integration denies advertising storage.
The main site uses a separate Clarity project from our landing page. Clarity cookies can be shared across Truman subdomains, so browser identity or session state may be shared even though recordings are sent to separate projects. Your main-site replay choice is stored for up to 180 days and does not grant permission on another subdomain. Withdrawing replay stops new main-site recording and refreshes this page; a final upload may contain interactions collected while you had consented. Shared cookies may remain for other subdomains. Withdrawal does not erase information already received by Microsoft. Global Privacy Control, preview and QA visits keep replay off.
Review Microsoft’s privacy statement and Clarity’s data information.
More information: Google’s privacy policy and Google Analytics data practices.