Privacy Policy

Effective Date: May 30, 2026

This Privacy Policy describes how CCC Co-Pilot, operated by Mason Whitaker ("we," "us," or "our"), collects, uses, and protects information when you use our website at ccccopilot.com and our web application at my.ccccopilot.com (collectively, the "Service").

---

1. Information We Collect

We collect the following information when you subscribe to or use CCC Co-Pilot:

• Account information: Shop or business name, contact name, email address, and phone number provided during checkout.
• Payment information: Billing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment method information on our servers.
• IP address: We collect and store your shop's IP address to authenticate access to the Service. This is the primary mechanism by which your subscription is tied to your location.
• Usage data: We log AI analysis requests including the section analyzed (Complaint, Cause, or Correction), the text submitted, the AI-generated response, and token usage. This data is used to monitor service health and calculate billing costs.
• Vehicle information: VIN numbers and vehicle details entered into the application are transmitted to third-party services (NHTSA) for recall and vehicle data lookups. We do not permanently store VIN numbers.

2. What We Do NOT Collect

CCC Co-Pilot is intentionally designed to operate without access to your sensitive business systems. We do not collect:

• Customer names, addresses, or personal information from your repair orders
• Vehicle owner identity information
• Financial data from your shop management or dealer management system (DMS)
• Employee records or payroll information
• Any data from systems not directly entered into the CCC Co-Pilot interface

3. How We Use Your Information

• To authenticate and authorize access to the Service by your shop's IP address
• To process subscription payments via Stripe
• To provide and improve the AI analysis features of the Service
• To monitor usage for billing, capacity planning, and abuse prevention
• To contact you regarding your account, billing, or service updates
• To respond to support requests sent to support@ccccopilot.com

4. Third-Party Services

CCC Co-Pilot uses the following third-party services to operate:

• Anthropic (Claude AI): Repair order text submitted for analysis is sent to Anthropic's API for processing. Anthropic's privacy policy applies to data processed by their models.
• Stripe: All payment processing is handled by Stripe. Your payment information is subject to Stripe's Privacy Policy.
• Supabase: Account and usage data is stored in Supabase, a hosted database service.
• Cloudflare: The Service is served through Cloudflare's infrastructure. Cloudflare may process request metadata including IP addresses.
• NHTSA: VIN lookups and open recall data are retrieved from the National Highway Traffic Safety Administration's public API.

5. Data Retention

We retain account information for as long as your subscription is active and for a reasonable period thereafter for legal and accounting purposes. Usage logs are retained indefinitely for service monitoring purposes. You may request deletion of your data by contacting us at support@ccccopilot.com.

6. Data Security

We take reasonable measures to protect your information, including encrypted transmission (HTTPS/TLS), access-controlled databases with Row Level Security enabled, and server-side API key management. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

How Access Control Works

CCC Co-Pilot uses a location-based access model rather than individual usernames and passwords. When your shop subscribes, your shop's network IP address is registered to your account. Any device connected to your shop's internet connection — computers, tablets, phones — can access the tool without a separate login. This means:

• There are no individual user passwords to manage, lose, or compromise.
• Access is automatically available to anyone on your registered shop network.
• If your shop's network IP address changes, contact us at support@ccccopilot.com to update your registration.
• We recommend not completing the subscription setup from a home network or public Wi-Fi, as that network's IP would be registered instead of your shop's.

Payment Security

All subscription payments are processed by Stripe, Inc. — a PCI DSS Level 1 certified payment processor. CCC Co-Pilot never sees, stores, handles, or has access to your credit card or payment information. All payment data is transmitted directly between your browser and Stripe's secure servers.

Repair Documentation Data

Complaint, Cause, and Correction text you enter into the tool is transmitted securely to our AI processing infrastructure to generate guidance questions. This text contains vehicle repair information only — it does not include customer names, contact information, or any personally identifiable information. Repair documentation is stored in our database solely to provide your shop's session history and VIN-based workflow features.

7. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us at support@ccccopilot.com. You may also manage or cancel your subscription at any time through the billing portal accessible from the application.

8. Children's Privacy

CCC Co-Pilot is a professional business tool and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active subscribers of material changes via email. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.