Privacy Policy

This Privacy Policy is effective as of July 30, 2026.
This Privacy Policy describes the data practices of Autodata Solutions, Inc. (“ASI”, “we,” “our,” or “us”).
This Privacy Policy applies to personal information ASI collects, licenses, receives, uses, and discloses in connection with its automotive marketing, lead generation, data brokerage, and related business activities (the “Services”) where ASI determines the purposes and means of processing. This Privacy Policy applies regardless of whether the information is collected directly from individuals, from business partners, dealers, manufacturers, data providers, or other sources.
ASI is a separate legal entity from J.D. Power and, where required by applicable law, is independently registered as a data broker. Data broker obligations applicable to ASI are addressed in the U.S. State-Specific Disclosures section below.
This Privacy Policy does not apply to:

Information collected or processed by J.D. Power or under a J.D. Power privacy policy, including information collected through J.D. Power-branded websites, applications, consumer surveys, tracking technologies, or other J.D. Power services. Such information is governed by the applicable J.D. Power Privacy Policy, not this Privacy Policy.
The practices of third parties we do not control.
Information collected in the context of job applications or employment with us.
Information that has been anonymized or, to the extent permitted by law, deidentified.

For additional disclosures and rights are detailed in our U.S. State-Specific Disclosures
If you have any questions about our privacy practices, please contact us as set forth in the "Contact Us" section.
This privacy policy covers the following:

How do we collect information?
Depending on the context in which we provide the Services and our role in processing personal information, we collect information from the following sources:

Directly from individuals, including when they express interest in purchasing or leasing a vehicle, request information, complete forms, participate in surveys, or otherwise interact with us or our business partners.
Through our clients, including from automotive manufacturers, dealers, and other business partners.
Third-party data providers, including information we acquire or license from data providers and licensors of commercial or public databases.
Publicly available sources, including information from public records and publicly available sources.
Service providers and vendors that support our operations.
Information we generate, including insights, scores, segments, or other inferences derived from information we receive.

What types of information do we collect?
We may collect the following categories of personal information:

Contact information, such as name, email address, postal address, and phone number.
Vehicle information, such as vehicle identification number (VIN), vehicle ownership information, vehicle purchase, and ownership history, and vehicle purchase interests.
Demographic information, such as age range, household characteristics, and other demographic attributes.
Marketing and lead generation information, such as requests for information, inquiries, survey responses, and consumer interest indicators.
Inferences and audience segments derived from the information described above.

We do not generally collect sensitive personal information as part of our Services. To the extent we receive sensitive personal information, we use and disclose such information only for the permissible purposes authorized by applicable law.
How do we use your information?
We collect and use personal information for the following purposes:

Data Enhancement, and Audience Segmentation. We collect and use information to create, maintain, license, and improve data enhancement, and audience segmentation products and services. This includes matching information across datasets, linking information associated with individuals, households, vehicles, and devices, validating and enhancing data records, and developing audience segments and predictive insights.
Marketing, Analytics, and Data Services. We collect and use information to provide marketing, analytics, measurement, and related data services to our clients. This includes helping clients identify and understand relevant audiences, measure the effectiveness of marketing campaigns, analyze market trends, and facilitate communications between consumers, dealers, and manufacturers.
Analytics and Product Development. We collect and use information to develop, improve, validate, and maintain our products and services, including analytics tools, predictive models, and audience segmentation products. We may use deidentified information for these activities and will maintain such information in deidentified form.
Communications. We collect and use information in the context of sending transactional or marketing messages by email and, where you opt-in, by text.
Security, Compliance and Legal Obligations. We collect and use information to prevent, detect, investigate, and respond to fraud, misuse, policy or legal violations, and threats to safety. We also collect and use information to fulfill legal and regulatory obligations, including responding to consumer rights requests, maintaining suppression and opt-out lists, and complying with applicable privacy laws.
At Your Direction. We collect and use information where you instruct us to do so in a specific way, or where we notify you and obtain your consent.
Non-personal information. We may anonymize or deidentify information so it is no longer considered personal information under applicable law. Where we deidentify information, we commit to maintaining and using the deidentified information in deidentified form and not attempt to reidentify it. We may use non-personal information for any purpose permitted by law.

See Your Privacy Choices to exercise choice around our collection and use of personal information, where available.
How do we disclose information?
We disclose the information we collect for the purposes described in this Privacy Policy. The categories of recipients to whom we disclose information include:

Clients. Our business clients, which may include companies and organizations across the automotive industry.
Advertising, Marketing, and Analytics Partners. Advertising networks, marketing and analytics companies, social networks, data analytics providers, and similar partners with whom we work to support audience creation, campaign delivery, measurement, and analytics services.
Service Providers. Vendors that collect or process information on our behalf to support our operations, such as providers of hosting and storage, analytics, payment processing, customer support, account management, and security and fraud prevention services.
Affiliates. Our affiliates and related companies, where necessary to support internal administrative, legal, compliance, security, or corporate governance functions. This Privacy Policy does not otherwise describe information governed by the J.D. Power Privacy Policy.
Business Transaction Participants. Parties involved in a corporate transaction, such as a merger, acquisition, divestiture, reorganization, or similar transaction, including in connection with bankruptcy or similar proceedings.
Security, Compliance, and Enforcement Recipients. Law enforcement, government authorities, regulators, and private parties where we believe, in good faith, that disclosure is necessary or appropriate to comply with law, enforce our rights or agreements, protect against fraud or security threats, or protect the rights, property, safety, or security of ASI, our services, or others.
At Your Direction or With Your Consent. Recipients where you direct us to disclose information or where we provide notice and obtain your consent.
Non‑Personal Information. We may disclose deidentified or aggregated information for any purpose permitted by law.

See Your Privacy Choices to exercise choice around our disclosures, where available.
Your Privacy Choices
This section describes the choices available to you regarding your information.
Region-Specific Choice. Additional disclosures and rights, including rights related to targeted advertising and the sale or sharing of personal information, may apply if you reside in certain regions. For details, please see:

U.S. State-Specific Disclosures

Business Account Controls. If you have a business account with us, you may be able to access, correct, or remove certain account‑level information through your account settings. These controls apply only to information associated with your business account and do not apply to other information we may process outside of that relationship.
Emails. You may opt out of receiving marketing emails from us by changing your communication preferences in your account settings (if you have a business account), following the unsubscribe instructions included in our marketing emails, or emailing us at the address listed in the Contact Us section with “UNSUBSCRIBE” in the subject line. Please note that you cannot opt out of transactional or service‑related communications.
Texts. To stop receiving texts, text “STOP” in response to any text message you receive from us or contact us as set out in the Contact Us section below and specify you want to opt-out of text messages.
How is information protected and retained?
Security. No method of transmission over the internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from the risks presented by unauthorized access or acquisition, we cannot guarantee the security of your personal information.
Retention. We retain each of the categories of personal information listed above for as long as necessary to fulfill the purpose of collection, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish and defend legal claims, for fraud prevention purposes, or as long as required to meet our legal obligations. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
International transfers
We are based in the U.S. Your information may be transferred to and processed in the U.S. or another country where we operate. Where required by applicable law, we will provide appropriate safeguards for data transfers.
Special note about children
Our Services are not directed to children under 16 years old, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from children in violation of applicable law, contact us as set out in the Contact Us section below.
U.S. State-Specific Disclosures
This section applies to residents of California or any other U.S. state that has enacted a comprehensive state privacy law (each, a “Covered State”). For purposes of this Privacy Policy, Covered States include Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Louisiana, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
We may, in our discretion, respond to privacy rights requests from residents of other states. Any such response is provided as a courtesy and does not constitute an admission that ASI is subject to, or that the requester is entitled to rights under, the laws of that state.
This section does not apply to residents of other states except as expressly provided herein.
Notice at Collection
Our data practices are as follows:

Collection. In the past 12 months, we have collected the categories of personal information set out in the What types of information do we collect? section above.
Sources. The categories of sources from which we collect personal information are set out in the How do we collect information? section above.
Purposes. The specific purposes (including business and commercial purposes) for collecting and using personal information are set out in the How do we use your information? section above.
Disclosure. The categories of persons to whom personal information is disclosed, including service providers for business purposes, are set out in the How do we disclose information? section above. We disclose the categories of personal information listed in the What types of information do we collect? section above to service providers for business purposes.
Sales, Shares, and Targeted Advertising. Some of our disclosures of personal information to third parties may be considered a sale, share, or targeted advertising under applicable law. The categories of personal information we sell, share, or process for targeted advertising purposes include: identifiers, characteristics or demographics, commercial information, and inferences drawn from any of the above. The categories of third parties to whom we sell, share, or disclose your personal information for targeted advertising purposes include, where applicable, vendors and other parties involved in cross-context behavioral advertising. We do not sell or share the personal information of consumers we know are under 16 years old.
Profiling. We do not process personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.
Sensitive Data. To the extent we receive sensitive personal information, we collect, use, and disclose such information only for the permissible business purposes authorized by applicable law. We do not sell or share sensitive personal information to third parties.
Data Broker. ASI is registered as a data broker in certain jurisdictions and may collect, license, disclose, and otherwise make available information in connection with its data brokerage, analytics, marketing, and audience services. Additional disclosures regarding data broker obligations, including deletion rights where required, are provided below.
Retention. The criteria used to determine the period of time we retain your personal information is set out in the How is information protected and retained? section above.

Rights
This section sets out your rights. See Exercising Rights below for details on how to exercise your rights.

Verifiable Requests.

For Covered State Residents, you have the right to:

Confirm whether or not we are processing your personal information, and in some regions, confirm the categories of personal information we have processed.
Access your personal information.
Correct inaccuracies in your personal information.
Delete your personal information.
Obtain a copy of your personal information that you previously provided to us in a portable and readily usable format.

For California residents, you have the right to:

Know what personal information we have collected about you, specifically have the right to know the categories of sources from which personal information was collected, the business or commercial purposes for collecting, selling, or sharing personal information, the categories of personal information that we sold, shared, or disclosed for a business purpose, the categories of third parties to whom we disclosed personal information, and the specific pieces of personal information we have collected about you;
Correct inaccurate personal information we maintain about you. and
Delete personal information that we have collected from you.

If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data. Submit this request through our Right to Know Web Form.
If you are an Oregon resident and we process your personal data on the basis of your consent, you also have the right to revoke that consent at any time. Following a valid revocation request, we will stop processing your personal data as soon as practicable, and no later than 15 days after we receive your request, except to the extent further processing is required or permitted by law. Submit a revocation request through our Right to Revoke Web Form.
If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed personal data. Submit this request through our Right to Know Web Form.
If you are a Connecticut or Rhode Island resident, you also have the right to obtain a list of the specific third parties to which we have sold personal information. Submit this request through our Right to Know Web Form.

Opt-Out of Sales, Shares, and Targeted Advertising. You have the right to opt-out of us selling or sharing for cross-contextual advertising purposes your personal information to third parties, or processing your personal information for targeted advertising purposes.
Nondiscrimination. You have the right not to be discriminated against for exercising any of your rights.
Appeals. You have the right to appeal our decision in response to your requests.
Authorized Agents. You may exercise your rights through an authorized agent.

Exercising Rights
This section sets out how to exercise your rights. Note that rights relating to personal information we process on behalf of a business client as a processor or controller must be exercised through that client.

Verifiable Requests. Verifiable requests require us to verify your identity before fulfilling them. To exercise any of these rights, submit a request through our form Privacy Web Form (specifying the rights you wish to exercise) or call our toll-free number at (866) 467-8688 X2496. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.
Sales, Shares, and Targeted Advertising. For information in our systems, including information associated with identifiers such as your VIN or other persistent identifiers, you may submit an opt-out request through our form Privacy Web Form. Where applicable, this opt-out will apply to personal information associated with you across our systems, including information maintained in pseudonymous profiles.
Authorized Agents. Authorized agents must submit requests through the specific methods designated herein. Except where prohibited by law, we will require written and signed proof of the agent’s permission.
Appeals. To appeal, write us at the email or postal address set out in Contact Us and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.
Limitations. Your rights are subject to exceptions and our data retention practices. To the extent permitted by law, rights requests must be exercised through the applicable designated method specified herein.

Additional California Disclosures

Data Broker. California law requires registered data brokers to participate in a state-administered deletion mechanism known as the Delete Request and Opt-Out Platform (DROP). If you are a California resident, you may submit a request through DROP to require registered data brokers, including us, where applicable, to delete personal information relating to you. Requests must be submitted and verified through DROP at https://consumer.drop.privacy.ca.gov.
Metrics. Where required by applicable law, ASI will make available metrics regarding consumer rights requests received, complied with, and denied during the preceding calendar year, as well as response time information, once such information becomes available and in the manner required by law
Shine the Light. If you are a California resident and have an established business relationship with us, you have the right to request a list of the categories of personal information (as defined by Shine the Light) disclosed by us to third parties for their own direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of such third parties. To exercise this right, write us at the email or postal address set out in the Contact Us section above and specify that you are making a “California Shine the Light Request.” We will respond to requests received in accordance with Shine the Light.

Additional Connecticut Disclosures
Large Language Models. We do not collect or use personal data to train large language models. However, when we sell personal data to third parties, they may use the data to train their own large language models. See their privacy policies for details.
Disclosures for Nevada
For Nevada residents, you have the right to opt-out of sales of your personal information to third parties. To exercise your right, follow the opt-out process in Exercising Rights above. Your rights are subject to exceptions and our data retention practices.
Changes to This Privacy Policy
This privacy policy is current as of the date which appears at the top of this privacy policy. We reserve the right to update this privacy policy at any time. Any such update will be effective immediately upon posting on the website. Accordingly, we encourage you to refer to this privacy policy on an ongoing basis. If the changes are material, we may provide additional notice to you as required by applicable law, such as through email or prominent notice on the website. By using our Service following any privacy policy update, you freely and specifically give us your consent to collect, use, transfer, and disclose your information in the manner specified in the updated privacy policy.
Contact Us
The controller responsible under this Privacy Policy is:
Autodata Solutions, Inc.
Attn: Privacy
320 East Big Beaver Road, Suite 500
Troy, MI 48083
ASIprivacy@jdpa.com
If you have questions about this Privacy Policy or experience difficulty accessing this Privacy Policy, you may contact us using the postal or email address above.
Requests to exercise privacy rights must be submitted using the designated methods described in the applicable sections of this Privacy Policy. The contact details in this section should not be used to submit rights requests except where a specific section of this Privacy Policy expressly permits submission by email or postal mail, or where required under applicable law.