Privacy

This site collects what you type into vehicle request, trade-in, and contact forms: name, phone, email, ZIP, vehicle preferences, trade details, self-reported credit tier, and contact consent, and whether you opted in to marketing texts. The vehicle request does not ask for SSN or date of birth. The official credit application does, and that packet is field-encrypted in a dedicated vault, kept out of the CRM, logs, analytics, and AI prompts.

Leads are stored in a Cloudflare D1 database used by the desk and synced to our self-hosted CRM. We use that data to shop cars and to contact you in the way you agreed to.

Analytics uses self-hosted Umami, which does not use cookies. We do not use third-party ad trackers or session recording. Form fields are not meant to be captured as analytics events.

Credit applications are stored only in the encrypted credit vault. Twenty CRM receives a non-sensitive “credit app received” note plus a reference ID. Text (714) 471-8775 to ask what we still hold and to request deletion.

If you message or comment on our Instagram account @greenlightautobroker, we receive the message text, your Instagram username and ID through Instagram's official tools, and store them with your other messages so the desk can reply. Software may suggest a reply, but a person reviews it before anything is sent. We do not sell this data or use it for ads. To have it deleted, follow the steps on our Data deletion page.