Auction Circle LLC ("we", "our") operates a lot-based vehicle auction platform. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. We keep things short on purpose. If you read it once, you should not need to read it again.
01 · What We Collect
We collect three categories of information:
- Account data — name, email, phone number, hashed password, and an ID number for verified bidders. You provide this when you register.
- Bidding data — bids you place, lots you watch, proxy bids you set, invoices we issue, and the events you attend. Generated automatically as you use the service.
- Technical data — IP address, browser, device type, log timestamps, and a session cookie. Captured to keep the service running and secure.
02 · How We Use It
We use your information to operate the auction platform, contact you about lots and invoices, prevent fraud, and meet our obligations under anti-money-laundering and tax law. We do not sell personal information. We do not run targeted ad networks against your bidding history.
03 · Sharing
We share data only with parties we cannot run the service without:
- Lenders who consigned a lot you won — to transfer title and arrange handover.
- Payment processors who handle bank wires and ACH on our behalf.
- Carriers if you book vehicle shipping through us.
- Authorities when compelled by valid legal process.
Every recipient is bound by a written data-handling agreement, and we share only the minimum necessary.
04 · Cookies
We use a single session cookie to keep you signed in and a CSRF token cookie to prevent cross-site forgery. We do not use third-party advertising cookies or behavioural-tracking pixels. You can clear cookies at any time — you'll need to sign in again afterwards.
05 · Retention
We keep account and transaction records for seven years after your account closes, in line with U.S. financial-record retention rules. Technical logs roll off after ninety days. To close your account, write to legal@circle365.com and we'll handle it inside thirty days.
06 · Your Rights
You can access, correct, export, or delete your personal data by writing to us. Where applicable (GDPR, CCPA), you can also object to processing or restrict it. We answer rights requests within thirty days, free of charge.
07 · Security
Passwords are hashed with bcrypt. The site runs over TLS. Database backups are encrypted. We monitor for unauthorised access continuously. If a breach affects you, we will notify you within seventy-two hours of confirming it.
08 · Contact
Questions, requests, or concerns about privacy: legal@circle365.com. For everything else, see the contact page.
Last reviewed May 30, 2026. Material changes are posted on this page and dated clearly.
