Privacy Policy

Last updated: May 11, 2026

Empire Auto Protect, LLC (“Empire,” “we,” “us,” or “our”) operates the Empire Auto Protect website at empireautoprotect.com (the “Site”) and the Empire Auto Protect mobile application (the “App,” and together with the Site, the “Services”). This Privacy Policy explains how we collect, use, and share information when you use the Services.

1. Information We Collect

1.1 Information you provide

• Account information: email address, password (stored as a one-way hash), and contact phone number.
• Policy verification: policy number, last 8 digits of your Vehicle Identification Number (VIN), or 5-digit ZIP code of your insured property.
• Customer service: details you provide when contacting our support team, filing a claim, or requesting a quote on the Site.

1.2 Information we collect automatically

• Device info: mobile device model, operating system version, app version, and unique device identifiers.
• Usage data: screens viewed, actions taken (e.g., paying a bill, viewing your ID card), and approximate session timing.
• Push notification tokens: if you grant permission to receive notifications.
• Log files: like most websites, we log IP address, browser type, ISP, date/time, referring/exit pages, and click activity. Not linked to personally identifiable information. Used for analytics and security.
• Cookies and web beacons: the Site uses cookies to store preferences and improve experience. You can disable cookies in your browser settings.
• Approximate location: derived from IP address, used for fraud prevention only — we do NOT collect precise GPS location.

1.3 Information from third parties

• Policy data: details about your service contract or warranty (coverage, status, payment history) from our policy administration system, InlineCRM.
• Payment status: updates from finance companies (MEPCO, SPARTA, EFS / Ensurety, WALCO) regarding the status of your installment plan.

1.4 Phone number / SMS

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. The above categories exclude text messaging originator opt-in data and consent; that information will not be shared with any third parties. By providing a telephone number and submitting any form on the Site, you consent to be contacted by SMS text message (message frequency may vary). Message and data rates may apply. Reply STOP to opt out. Reply HELP for more information.

2. How We Use Information

• Verify your identity and bind your app login to your Empire policy.
• Display your policy details, payment status, ID card, and contract documents.
• Send transactional emails (password resets, account confirmations) and optional push notifications (payment reminders, service updates).
• Provide customer service when you contact us, file a claim, or request roadside assistance.
• Detect and prevent fraud or unauthorized access.
• Improve the Services by understanding which features customers use.
• Comply with legal obligations.

3. How We Share Information

We share information only as described below — we never sell your personal data.

• Service providers / processors:
  • InlineCRM (policy administration system)
  • MEPCO, SPARTA, EFS / Ensurety, WALCO (finance companies that bill your installment plan)
  • Aegis (home warranty administrator for applicable policies)
  • Maverick Payments (payment processor)
  • Resend (transactional email delivery)
  • Expo (mobile push notifications)
  • PostHog (anonymous product analytics)
  • Sentry (error monitoring)
  • Google (Site analytics and advertising — see Google Ads Privacy Policy)
• Partners: when you tap a partner link in the App (e.g., RepairPal) or click a partner link on the Site, you are directed to that partner’s website, which has its own privacy policy.
• Legal: when required by law, subpoena, court order, or to protect Empire, our customers, or others.
• Business transfers: in the event of a merger, acquisition, or sale of assets, where information may be transferred to the successor.

4. Your Choices and Rights

• Account deletion: you can delete your app login at any time inside the App (Profile → Delete App Login). This removes your sign-in credentials and device data but does NOT cancel or modify your underlying Empire policy — to manage that, contact us directly.
• Push notifications: you can disable them at any time in your device settings.
• Marketing emails: any marketing email will include an unsubscribe link.
• Data access / correction / deletion: contact us at support@empireautoprotect.com.

CCPA Privacy Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), California consumers have the right to:

• Request disclosure of the categories and specific pieces of personal data we have collected about them.
• Request that we delete any personal data we have collected.
• Request that we not sell their personal data (we do not sell personal data).

If you make a request, we have one month to respond. To exercise these rights, contact us at support@empireautoprotect.com.

GDPR Data Protection Rights (EU/UK Residents)

If you are located in the EU/UK, you are entitled to:

• Access — request copies of your personal data.
• Rectification — request correction of inaccurate or incomplete information.
• Erasure — request deletion under certain conditions.
• Restrict processing — request that we restrict processing under certain conditions.
• Object to processing — under certain conditions.
• Data portability — request transfer of your data to another organization.

If you make a request, we have one month to respond.

5. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

6. Security

We use industry-standard measures to protect your information: encrypted transport (HTTPS / TLS), hashed password storage (bcrypt), encrypted device storage for authentication tokens, and per-build API keys to limit who can communicate with our backend. No system is perfectly secure, but we work continuously to protect your data.

7. Retention

We retain account data for as long as your app login is active. After you delete your app login, we retain a minimal audit trail (action timestamps, anonymized) for fraud prevention and legal compliance for up to 2 years, then delete it.

8. International Users

The Services are operated from the United States. If you access them from outside the U.S., your information will be transferred to, stored, and processed in the U.S.

9. Third-Party Privacy Policies

This Privacy Policy does not apply to other advertisers or websites that link to or from our Services. We advise you to consult their respective Privacy Policies for more detailed information on their data practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy at this URL and update the “Last updated” date above. Material changes will be communicated to you in the App or by email.

11. Contact Us

If you have any questions about this Privacy Policy, please contact:

Empire Auto Protect, LLC
Email: support@empireautoprotect.com
Phone: (888) 345-0084