Legal
Version 1.0 · Effective 2026-07-11
In plain wordsHow JDM Rush Imports collects, uses, shares, and protects your personal information when you use the JDM Rush Marketplace.
This Privacy Policy describes how JDM Rush Imports ("JDM Rush", "we", "us") handles personal information collected through the JDM Rush Marketplace (the "Platform"). We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using the Platform you consent to the practices described in this policy. This policy does not cover what a buyer or seller does with information about the other party after we release it to them as part of a completed deal; each party is responsible for their own use of that information.
In plain wordsAccount details, listing information, photos, chat transcripts, offers and contracts, payment records, and basic technical data.
We collect (a) account information: name, email address, password (stored as a salted hash), phone number if provided, and city and province; (b) listing information: vehicle details, VIN, condition disclosures, maintenance history, known issues, pricing parameters, photographs and video; (c) negotiation records: chat messages exchanged with Rush, offers, counter-offers, and their outcomes; (d) transaction records: bills of sale, electronic signatures (typed or drawn), legal names provided at signing, and identity-release records; (e) payment records for platform fees: processed by Stripe, from which we receive transaction status and reference identifiers but not full card numbers; and (f) technical data: log, device, and usage information reasonably necessary to operate and secure the Platform, and error diagnostics collected through our monitoring tools.
In plain wordsTo run the marketplace: listings, negotiation, contracts, payments, notifications, safety, and improving the service.
We use personal information to (a) create and manage accounts and verify email addresses and phone numbers; (b) publish and manage listings; (c) operate Rush and the negotiation process, including applying the seller's pricing parameters to offers; (d) generate, deliver, and store transaction documents and facilitate electronic signing; (e) process platform-fee payments and maintain financial records; (f) send transactional notifications by email and SMS about your listings, offers, contracts, and deals; (g) protect the Platform and its users, including enforcing identity protection, investigating fraud, misrepresentation, or circumvention, and moderating content; (h) comply with legal obligations; and (i) understand usage and improve the Platform. We do not sell personal information.
In plain wordsChat messages and listing details are processed by third-party AI providers to generate Rush's responses. Offer decisions come from seller-set rules, not from AI judgment.
Rush's conversational responses are generated by third-party artificial-intelligence language model providers. When you chat or negotiate on the Platform, the content of the conversation and relevant listing details are transmitted to those providers (currently Anthropic and DeepSeek) to generate responses. We do not permit these providers to use Platform data to train their models except as stated in their enterprise terms. Decisions to automatically accept, reject, or escalate an offer are made by deterministic rules applying the seller's own pricing parameters; they are not discretionary AI decisions. Chat transcripts are retained as part of the negotiation record. Do not share sensitive personal information (such as financial account numbers or government identifiers) in chat; it is not needed at any point in the negotiation.
In plain wordsWith the other party to your deal (at the identity-reveal step), and with the service providers that run the platform. Never sold.
We share personal information only as follows: (a) with the other party to your transaction — before a deal is signed and paid, the Platform shows the other party only non-identifying information (such as a first name or masked name and general location); after both parties sign and the platform fee is paid, each party's legal name and contact details are released to the other to complete the sale; (b) with service providers that process data on our behalf: payment processing (Stripe), email delivery, SMS delivery (Twilio), database and file hosting (including Neon and Cloudflare), application hosting (Vercel), AI response generation (Anthropic, DeepSeek), and error monitoring (Sentry); these providers may store data outside Canada, including in the United States, and are bound by contractual confidentiality and data-protection obligations; (c) where required or permitted by law, including to comply with legal process or to investigate fraud or safety issues; and (d) in connection with a business reorganization or sale, subject to equivalent protections.
In plain wordsUntil a deal is signed and paid, the other side can't see who you are. We enforce this in the product, and we ask you to respect it too.
Identity protection is a designed feature of the Platform: legal names, email addresses, and direct contact details of buyers and sellers are withheld from the other party until the bill of sale is signed by both parties and the platform fee is paid. Information you voluntarily reveal about yourself inside a chat message is visible to the other party and is not protected by this mechanism. Once identities are released, the parties exchange information directly; from that point on, each party's handling of the other's information is their own responsibility.
In plain wordsWe keep transaction records as long as the law and disputes require; other data only as long as it's needed.
We retain account information while your account is active and for a reasonable period after closure. Transaction records — including bills of sale, signatures, offers, negotiation transcripts, and fee records — are retained for as long as necessary to satisfy legal, tax, audit, and dispute-resolution requirements, generally seven years for records connected to a completed transaction. Listings and their content are retained while live and for a reasonable archival period after expiry or removal. We may retain information as needed to enforce our terms or investigate misuse. Where retention is no longer required, we delete or anonymize data.
In plain wordsEncryption in transit, hashed passwords, restricted access — and no system is perfect, so we also monitor and respond.
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption of data in transit, salted password hashing, signature verification on payment webhooks, access controls, and monitoring. No security is absolute; in the event of a breach creating a real risk of significant harm we will notify affected individuals and report as required by PIPEDA. You are responsible for keeping your account credentials confidential.
In plain wordsYou can access, correct, or ask us to delete your information, and withdraw consents, subject to legal limits.
Subject to legal exceptions, you may request access to the personal information we hold about you, request corrections, request deletion of your account and associated data, and withdraw consent to uses that are not necessary to complete an existing transaction or meet a legal requirement. Note that records of signed contracts and paid fees must be retained even after account deletion. To exercise these rights, contact us through the contact information published on the Platform; we will respond within the time required by law. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
In plain wordsTransactional emails and SMS are part of using the marketplace. Marketing is opt-in and every marketing message has an unsubscribe.
By using the Platform you agree to receive transactional messages necessary to the service — for example verification codes, offer and contract notifications, and deal updates — by email and, where you have provided a phone number, by SMS. Commercial electronic messages beyond transactional notices are sent only with your consent in accordance with Canada's Anti-Spam Legislation (CASL), and every such message includes sender identification and a functioning unsubscribe mechanism. Withdrawing marketing consent does not stop transactional messages required to complete your active listings and deals.
In plain wordsWe use the cookies needed to keep you signed in and the site working; we don't run third-party ad tracking.
The Platform uses cookies and similar technologies that are necessary for authentication, session management, and security. We do not use third-party advertising cookies. If we introduce analytics that involve non-essential cookies, we will update this policy and provide appropriate choices.
In plain wordsWe'll post changes with a new version and effective date. Contact us with any privacy question or complaint.
We may update this Privacy Policy from time to time; material changes will be posted with a new version number and effective date, and where required we will seek renewed consent. Questions, access requests, and complaints may be directed to JDM Rush Imports via the contact information published on the Platform. You may also direct unresolved privacy complaints to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
