Last updated: November 6, 2026
Ridekick, operated by Ridekick Corp., a Delaware corporation, helps car shoppers analyze listings and automate parts of dealer outreach and negotiation. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
If you ask Ridekick to contact a dealer, we use the information necessary to send or support that outreach. Depending on the workflow, this may include the listing you submitted, vehicle interest, location, timing, negotiation context, and other details you chose to provide.
At first contact, dealerships do not get your full name. They get a shortened or made-up version of your name, and they may get your ZIP code. They get your own phone number and email when you choose to share them to book a visit or lock in an offer.
We aim to limit sharing to what is reasonably necessary to operate the service, but communications you authorize may reveal information about your vehicle interest, pricing targets, or other preferences to the dealer. If you give us a mobile number for Ridekick text updates, we use it to send you those updates. A dealership gets your number when you choose to share it to pick a time to visit or lock in an offer.
To keep negotiations organized, Ridekick may use Ridekick-managed relay contact channels, including a Ridekick-managed email address or reply phone number, when contacting a dealer on your behalf. Those channels are used only to continue the active negotiation you authorized and help avoid exposing your personal phone number unless you choose to share it directly.
Sharing your details with a dealership. When you choose to share them to book a visit or lock in an offer, we send your name, phone number and email to the one dealership you pick, and not to other dealerships on your request. That dealership may call or text you about your visit or your request. We cannot take your details back once they are sent.
Ridekick may send or receive SMS messages in three contexts: one-time login codes you ask for when you choose to sign in with a text, service notifications to Ridekick users who opt in to text updates, and one-to-one dealer communications tied to an active vehicle negotiation that a user authorizes Ridekick to handle on the user's behalf.
Login codes. If you choose to sign in with a text, we text a one-time login code to the mobile number you type, when you tap Send code. We use that number to send the code and to check it when you enter it. We keep it with your account so you can sign in the same way again. We send one text for each code you ask for, and a reply if you text STOP or HELP. Reply STOP to opt out of login code texts and HELP for help. Message and data rates may apply. We do not share your mobile number or text consent with third parties or affiliates for their own marketing. You can sign in with an email code instead. This is separate from text updates about your requests, and you can use one without the other. See Login code texts for the screen and the exact agreement.
For Ridekick user notifications, we process your phone number, opt-in status, timestamps, delivery events, carrier responses, and message content as needed to operate the service, troubleshoot issues, prevent abuse, and comply with messaging rules.
For dealer negotiations, we process dealership phone numbers, message content, and related negotiation metadata in order to continue an active one-to-one conversation about pricing, availability, quote details, and purchase logistics. Message frequency varies by negotiation. Message and data rates may apply. Recipients can reply STOP to opt out and HELP for help. We do not share mobile numbers or text opt-in data from these texts with third parties or affiliates for marketing or promotional purposes. Dealership staff can read how these texts start and stop at https://www.ridekick.com/dealer-texts.
Dealer SMS messages are sent only in connection with an existing buyer-authorized negotiation. Ridekick does not use this dealer messaging channel for bulk outreach or promotional campaigns.
Additional messaging disclosures are available in Ridekick's Mobile Terms.
Ridekick uses software automation and AI providers to analyze listings, draft or send messages, summarize responses, and generate negotiation suggestions. To provide these features, we may process and store your inputs, dealer outputs, and related metadata.
We may use this information to monitor performance, debug issues, improve prompts and workflows, and develop future features, subject to our contractual and legal obligations.
You can connect an AI assistant, such as ChatGPT, Claude or Cursor, to your Ridekick account. You approve it on a Ridekick screen. It can read your requests and the offers dealers sent you. Depending on your account and what you approve, it can also search for cars listed near you, read your messages with a dealership, and send a dealership a message after you say yes to that message. It can also file a closed request away.
What an assistant reads from Ridekick, such as your requests, your offers and your messages with dealerships, leaves Ridekick and goes to the company that makes the assistant, under that company's own terms. Deleting it at Ridekick does not delete it there.
If you tick the separate box when you approve it, the assistant can also send requests for written offers to dealerships without asking you each time. Until you choose to share your details, dealerships do not get your full name. They get a shortened or made-up version of your name, and they may get your ZIP code. When you share your details on Ridekick to pick a time to visit or lock in an offer, the dealership gets your name, phone number and email. If the approval screen said so when you connected it, your assistant can also pick a time to visit for you. The dealership you chose then gets your name, phone number and email.
We keep a record of what you allowed, when you allowed it and which wording you saw. We keep a log of what your assistant does at Ridekick: when it reads your requests, opens an offer sheet, searches for cars, sends a request, reads or sends a message to a dealership, or files a request away. How long we keep them, and what happens when you delete your account, is under Data Retention.
A connection that can only read can stay connected while the assistant uses it. Every connection ends on its own after 30 days without use at the latest, and always within 365 days of the day you connect it. Some end sooner, such as after 24 hours. It also ends when you disconnect it, as below.
To end it, open Ridekick Settings and disconnect the assistant under Connected assistants. The assistant stops reading your requests and offers within a minute. This does not delete anything the assistant already has.
We may share information in the following categories:
Mobile information, text messaging originator opt-in data, and consent records are not shared with third parties or affiliates for their own marketing or promotional purposes. You can ask Ridekick to send your mobile number to a dealership. Ridekick sends it so the dealership can answer your request. The dealership, and the software it uses to manage requests, handle your number under their own privacy policies.
Ridekick uses third-party providers to operate the service. These include database and authentication providers such as Supabase, analytics providers such as PostHog, advertising platforms such as Meta and Reddit (unless you opt out of advertising cookies), messaging providers, AI or automation vendors, and — if we offer optional paid features in the future — a payment processor such as Stripe.
These providers process information on our behalf under their own terms and privacy commitments. Their handling of data may differ from ours.
We use cookies and similar technologies in three ways:
If you visit from the European Union, the European Economic Area, the UK or Switzerland, we don’t load these advertising pixels or record your session, even if you accept advertising cookies. We still collect usage analytics, such as which pages you visit and what you click. We work out where you are from your internet connection, so this may not apply if your location can’t be determined.
You can opt out of advertising pixels anytime on the Your Privacy Choices page. We also honor the Global Privacy Control (GPC) browser signal as an opt-out of the sale or sharing of personal information. You can manage cookies through your browser settings, though some features may not work properly if essential cookies are disabled.
We retain information for as long as reasonably necessary to provide the service, complete purchased features, keep business records, comply with legal obligations, resolve disputes, enforce agreements, and improve the service. We may keep de-identified or aggregated information for longer.
Vehicle scan photos and scan history are kept so you can revisit them, and we may use them to improve how the scan feature reads vehicle information. You can delete individual scans or your entire scan history at any time in the product. Scans that are not linked to an account or negotiation are automatically deleted after 18 months.
If you connect an AI assistant to your Ridekick account, we keep a record of the permission you gave it (when you allowed it, changed it or ended it) for 4 years, or longer while the permission is still active, and a log of what it did for 2 years. The log lists actions and identifiers, not the text of your messages. If you delete your account, we cut the link between the log and you. We keep the permission records for the rest of their 4 years in case we need them to answer a legal claim, and we delete entries that are past their time in a periodic clean-up. Our backups can still hold the link for a short time after deletion, until they are overwritten.
If someone tells us an email address is not theirs, we keep a coded version of that address (a hash) and the date, so we do not send it Ridekick emails about a car someone asked us to get written offers on, unless its owner confirms it themselves, for as long as we run the service. This does not stop sign-in codes, or emails to a signed-in account's own verified address.
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights regarding your personal information.
Categories we collect. In the last 12 months we have collected:
Sources, purposes, and recipients. We collect this information from you, your device, dealers and listing sources, and our service providers. We use it for the purposes described in “How We Use Information,” and we disclose it to the categories of recipients described in “How We Share Information.” We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of minors under 16.
Sale or sharing. We do not sell your personal information for money. We do use advertising cookies and pixels (Meta and Reddit) that may share online identifiers and activity for cross-context behavioral advertising, which California law may treat as a “sale” or “sharing.” These are active by default, and you can opt out anytime on the Your Privacy Choices page or via the Global Privacy Control signal, which we honor. We do not use or disclose sensitive personal information for purposes that require a right to limit.
Your rights. Subject to verification and legal exceptions, you have the right to:
How to exercise. You can use the Your Privacy Choices page for opt-out requests, or email us at legal@ridekick.ai for any privacy request. We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf with proper authorization. Under California's “Shine the Light” law, we do not share personal information with third parties for their own direct marketing.
We use reasonable technical and organizational measures to protect personal data, but no system is perfectly secure. We cannot guarantee absolute security of information transmitted over the internet or stored in third-party systems. Security reports can be sent to security@ridekick.ai.
Ridekick is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the "Last updated" date above.
Questions about this Privacy Policy can be sent to Ridekick Corp. at legal@ridekick.ai.