Last updated October 15, 2026
This Privacy Policy (“Policy”) explains how UnderAsk, Inc., a Florida corporation (“UnderAsk,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information through our website, applications, Negotiation Requests, and related communications (the "Service"). It applies to U.S. consumers and dealership contacts who interact with us. It does not govern a dealership’s independent practices after an introduction.
WE DO NOT AND WILL NOT SELL YOUR PERSONAL INFORMATION. WE ALSO DO NOT SHARE IT FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING OR PROCESS IT FOR TARGETED ADVERTISING AS THOSE ACTIVITIES ARE DEFINED BY APPLICABLE STATE PRIVACY LAWS. DISCLOSURES NEEDED TO PROVIDE YOUR REQUESTED SERVICE ARE DESCRIBED BELOW.
We collect information directly from you, automatically when you use the Service, and from dealerships and service providers. The information depends on your interactions with us:
We do not request Social Security numbers, driver’s license numbers, credit reports, credit applications, bank credentials, or vehicle purchase funds. Do not submit them in messages. If you send unnecessary sensitive information, we will limit its use and remove it when reasonably practicable, subject to necessary legal or security retention. Some account credentials or communications may qualify as sensitive personal information under state law; we use them only as reasonably necessary to provide and secure the Service and for permitted legal purposes.
We use the information described above to create and administer accounts; conduct dealer outreach; obtain, analyze, confirm, and present quotes; make introductions you request; process Service payments and refunds; provide support and transactional notices; maintain and improve the Service; investigate errors; protect accounts and systems; prevent fraud and misuse; maintain records; and comply with legal obligations or establish, exercise, or defend legal claims.
Contact and account information supports communication and administration. Request information and dealer messages support quote assistance and introductions. Payment records support billing and accounting. Device and usage information supports functionality, analytics, troubleshooting, and security. Derived preferences and summaries support your request and Service improvement. We use aggregated or de-identified information for pricing trends and improvement where practical. We maintain de-identified information in that form and do not attempt to reidentify it except as permitted to assess de-identification safeguards.
We send marketing emails only if you separately opt in. You may unsubscribe at any time; necessary Service, security, and legal notices may continue. We do not use sensitive information to infer sensitive characteristics or create advertising profiles. If a new purpose requires additional notice or consent, we will provide it before the new processing begins.
We use internal and third-party AI tools to draft dealer communications, analyze replies, and prepare summaries. These providers receive the request details and communications reasonably needed for those functions. We limit personal identifiers in AI inputs where practical and do not submit credit applications or other unnecessary sensitive financial information.
We require providers processing personal information on our behalf to use it only for authorized services and permitted supporting purposes under appropriate contractual restrictions. We do not authorize them to sell your information, use it for targeted advertising, or train general-purpose models for their own use with identifiable customer information. UnderAsk may improve its own quote tools using information as described in Section 2. You make every vehicle transaction decision; our AI does not accept offers, approve financing, or execute transactions for you.
Dealer outreach: we disclose vehicle criteria and general location only, without your name, personal email, telephone number, or street address. If you select an offer and request the dealership’s contact information, we will email you the dealership’s and salesperson’s contact information, the dealership’s email confirming the offer details and pricing, and a sample email you may use to contact the salesperson. We will separately email the selected dealership the confirmed offer and only your first name, stating that you will be in touch shortly. We will not disclose your email address, telephone number, or street address to the dealership. No personal contact information is sent to dealers you have not selected, lenders, insurers, or advertisers. A selected dealership acts independently and may use information under its own policy. This introduction is not blanket consent to unrelated marketing.
Service providers: hosting, communications, payment processing, AI, analytics, customer support, and security providers receive information reasonably necessary for their functions under appropriate restrictions. Professional advisers may receive relevant records for legal, accounting, or compliance services. Payment providers may also process information under their own notices where they independently determine purposes required by law or payment-network obligations.
Legal and business needs: we may disclose relevant information to comply with law or valid legal process, investigate fraud, or protect legal rights and safety. In a merger, acquisition, reorganization, or transfer of the relevant business, information may transfer with that business, subject to applicable law and the recipient’s obligation to honor this Policy. We do not sell standalone customer lists or permit a transaction to circumvent our no-sale commitment. Other disclosures require your direction or consent.
We retain each category of information only as long as reasonably necessary for its disclosed purposes. Account records are retained while needed to administer the account; request and dealer records while needed to perform the Service, provide support, and resolve disputes; payment records for accounting, tax, and legal requirements; and usage or security records for operational and security needs. Relevant criteria include an active request or account, the information’s sensitivity, applicable retention duties and limitation periods, disputes, fraud investigations, and available deletion or de-identification methods. We do not retain information indefinitely merely because it might be useful.
When information is no longer needed, we delete or de-identify it. Deleted information in backups may remain until ordinary backup rotation, with access restricted and no ordinary active use. We use reasonable administrative, technical, and physical safeguards, but no system is completely secure. We will provide legally required notices of a qualifying security incident. UnderAsk is based in the United States; information may be processed where its providers operate, subject to appropriate contractual safeguards and applicable law.
We may use cookies and similar technologies for login, preferences, functionality, security, and Service analytics. Providers operating these tools for us must follow the restrictions described above. We do not use advertising pixels or other tools in a manner that sells personal information or shares it for cross-context behavioral advertising. Browser settings may allow you to reject or delete cookies; blocking essential cookies may affect functionality.
We recognize legally required universal opt-out signals, including Global Privacy Control, for the purposes covered by applicable law. Because we do not sell, share for advertising, or conduct targeted advertising, no such activity needs to be stopped when we receive a signal. A signal does not itself request account deletion or disable essential processing. Traditional "Do Not Track" signals do not have a uniform standard, and we do not separately respond to them.
You may contact us to request access, correction, deletion, or a copy of your personal information. Depending on your state and the law’s application to UnderAsk, you may also have rights to confirm processing; know categories, sources, purposes, and recipients; obtain a portable copy; request information about specific third-party recipients; opt out of sale, targeted advertising, or certain significant profiling; withdraw consent for processing based on consent; or limit sensitive-information processing. Available rights and exceptions vary by state.
Submit privacy requests to support@underask.ai. Identify your request and the account email or other information needed to locate relevant records; do not send unnecessary sensitive documents. We do not require a new account. We may verify identity and authority using information already held or reasonable additional information, used only for verification and security. Authorized agents may submit requests where permitted; we may require evidence of authorization and legally permitted verification. Opt-out requests will not be subjected to identity verification where prohibited.
We respond within applicable legal deadlines and explain extensions or denials. You may appeal a denial by emailing support@underask.ai with “Privacy Appeal” in the subject line. We respond within the applicable deadline and provide regulator complaint instructions where required. Exceptions may permit retention for legal compliance, security, active transactions, or claims. We will not discriminate or retaliate for exercising rights. Deleting information necessary for an active Service may prevent us from completing it; refunds remain governed by the Terms of Use and mandatory law.
California residents have the rights provided by the California Consumer Privacy Act, as amended ("CCPA"), when it applies to UnderAsk. These include access and knowledge, correction, deletion, portability, opt-out of sale or sharing, limitations on certain sensitive-information uses, and protection against discrimination. For covered access, deletion, and correction requests, we acknowledge covered requests within ten (10) business days and substantively respond within forty-five (45) calendar days, subject to permitted extensions and notice.
The following categories describe our collection and business-purpose disclosures during the preceding twelve (12) months, or since launch if shorter:
| Category | Examples | Business purpose recipients |
|---|---|---|
| Identifiers and customer records | Name, contact details, account identifiers, credentials, billing details, IP address. | Relevant operational providers; advisers and legally required recipients. Selected dealer receives name and email only at your request. |
| Commercial information | Request criteria, vehicle interests, Service purchases, receipts, quotes and general financing or lease preferences. | Relevant providers; dealers receive vehicle criteria and general location. Selected dealer receives the selected quote. |
| Internet activity and approximate location | Device and cookie information, Service interactions, ZIP code and IP-derived general location. | Hosting, analytics and security providers; dealers receive general location only. |
| Communications and professional information | Support and dealer messages; dealership staff business contact details. | Communications, AI and support providers; relevant dealer contacts; advisers when necessary. |
| Inferences and sensitive information | Derived shopping preferences and quote summaries; account login credentials and any sensitive content in submitted messages. | Relevant operational providers for Service and security purposes. No intentional disclosure of login credentials to dealers. |
The Service is intended for adults 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child submitted information, contact us. We will take appropriate steps to delete it, except records lawfully necessary for security or legal compliance.
We review this Policy at least annually and update the date above when it changes. We will provide at least 30 days’ notice of material changes by email or through the Service, except when law requires a different timing, and obtain consent where required. An update does not itself authorize an incompatible new use of previously collected information. Our no-sale commitment remains in effect.
Place data adapted from GeoNames, licensed under CC BY 4.0. Zip code areas: U.S. Census Bureau.