Privacy Policy
Last updated: September 23, 2026
Squeezed (“we,” “us”) makes research-backed Buyer Guides for used vehicles, on squeezed.app and in our mobile app. This policy covers both. It explains what we collect, why, who helps us process it, what can become public, and how to get it deleted.
The short version
We collect what it takes to research a car for you: your account, the car you describe, and anything you choose to add (notes, photos, checklist answers).
We never sell your personal information, and we don’t run advertising trackers or share your data for targeted ads.
To write a report, we send the car’s details, your notes and any photos to research language models. We don’t send your name or email.
Reports are private unless you share one, or we publish it as an example guide. Either way, your name and email are never shown and the VIN is masked.
You can delete your account and everything in it yourself, from your Dashboard, at any time.
What we collect
Things you give us:
Account. Your email address and name, and a user ID, through our sign-in provider Clerk. If you sign in with Google, Clerk receives your basic Google profile. We never see or store your password.
The car. Year, make, model, trim, engine, mileage, asking price, VIN, title status, seller type, your ZIP code, and anything you type into the notes field (many people paste the listing text). All of it is stored with the report.
Photos. Photos you upload of a car, for photo inspection or during the in-person walkaround. We re-encode every photo when it arrives, which removes embedded metadata such as GPS location and camera details.
Checklist and outcomes. Your answers to the in-person inspection checklist, whether you bought the car if you tell us, and any feedback or refund requests you send.
Payments. When you buy credits, Stripe handles the payment. We receive the purchase amount, a Stripe reference and your email address. We never see or store your card details.
Car Finder. If you ask for your Car Finder results by email, the email address you enter.
Things collected automatically:
Usage. Pages viewed, buttons used and general device and browser information, through Google Analytics and PostHog, plus PostHog session recordings of how the site is used, with anything you type into forms masked. We use this to see which parts of the product work. We don’t attach your name or email to it.
How you found us. When you first arrive, we note the site that sent you (just the site and page, never the query string it carried) and any campaign tags in the link, to the day. We save this with your account when you sign up.
Free-report abuse prevention. Each account’s first report is free. To stop that being claimed over and over, when you claim it we record a random browser ID cookie and a one-way cryptographic hash of your IP address. We store the hash, never your IP address.
Server and security logs. Our hosting and network providers log requests, including IP addresses, to run and protect the service. We also use IP addresses briefly, in memory, to rate-limit abuse.
How we use it
To research and write your Buyer Guide, price it, and show you recalls and complaints for that car.
To run your account: sign-in, credits, purchases, refunds and support.
To email you about your reports and account, and occasionally about getting more out of Squeezed (see Email).
To improve report accuracy. We review generated reports for quality, and car details help us correct our vehicle data.
To prevent fraud and abuse, including repeat free-report claims.
To comply with the law and enforce our Terms.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
How reports are researched
Reports are written by large language models, reached through OpenRouter, which passes each request to a model provider (for example OpenAI, Anthropic, Google or xAI). For each report they receive the car’s details, your ZIP code, your notes and any photos you uploaded. They do not receive your name, email address or account ID.
Anything you type into the notes field goes to these providers as written, so please don’t include personal details such as phone numbers or addresses. The same applies to photos: if a photo shows a person or a document, the model sees it too.
We also look up the car in public data sources, such as the U.S. National Highway Traffic Safety Administration’s recall database. Those lookups contain only vehicle information.
What can become public
Reports you share. A report is private until you switch on sharing. A shared report can be opened by anyone with the link. It shows the car and the findings (including photos attached to that report), but never your name or email, and the VIN is partly masked. Switch sharing off and the link stops working.
Sample guides. We may choose reports to publish on Squeezed as example Buyer Guides, which search engines can index. They follow the same rules: the car, the findings and any photos attached to that report, never your name or email, and a masked VIN. If you’d rather a report of yours not be published, set it to private or email [email protected] and we’ll take it down.
Seller certificates. If you create a certificate to help sell your car, it is public and shows the car, its score and a masked VIN.
VIN decoder. Our free VIN decoder publishes a page for each VIN decoded, showing the vehicle’s factory specifications. These pages contain no information about you or who looked the VIN up.
Who processes your data
We use a small set of providers to run Squeezed. Each receives only what its job needs, under terms that restrict them from using it for their own purposes.
Clerk. Sign-in and account management.
OpenRouter and the model providers it routes to. Report research, pricing and photo analysis. See How reports are researched.
Stripe. Payment processing.
Brevo. Sending email, and keeping the contact record those emails need.
Google Analytics and PostHog. Product analytics.
Railway. Application hosting and our database.
Cloudflare. Network delivery and protection against attacks.
We may also disclose information if the law requires it, to protect the safety or rights of our users or the public, or as part of a merger or sale of the business, in which case this policy would continue to apply to your data.
We send emails you need, such as “your report is ready.” We also send a small number of lifecycle emails, for example a tip after your first report or a note when your credits run out. Every non-essential email has an unsubscribe link, and unsubscribing is permanent: we keep a record of your address on our suppression list precisely so we never email it again, even if you later delete your account.
How long we keep it
Account data, reports, photos, checklist answers and credit history: until you delete the report or your account.
Photos uploaded but never attached to a report: they expire after 6 hours and are deleted in routine cleanup.
Analytics data: kept according to Google Analytics and PostHog retention settings.
Unsubscribe records: kept indefinitely, so we honor your choice.
Payment records: Stripe keeps its own records of your payments, as payment law requires.
Security
All traffic is encrypted in transit (HTTPS). Passwords and sign-in are handled entirely by Clerk, and card details entirely by Stripe, so neither ever touches our servers. Access to production data is limited to the people who run Squeezed. No system is perfectly secure; if a breach ever affects your personal information, we will tell you as the law requires.
Your rights and choices
Wherever you live, you can:
Delete. Delete your account from your Dashboard. This erases your reports, photos, checklist answers, feedback and credit history, removes your contact record from our email provider, and closes your sign-in account. It cannot be undone.
Access and export. Ask for a copy of the personal information we hold about you.
Correct. Ask us to fix anything inaccurate.
Unsubscribe. Stop non-essential emails with the link in any of them.
Limit analytics. Block analytics cookies in your browser, or use Google’s Analytics opt-out browser add-on.
For anything other than deletion, email [email protected] from the address on your account. We answer within 30 days, and we won’t treat you differently for using any of these rights. Residents of California and other U.S. states with privacy laws have these rights too; we don’t sell or share personal information, so there is nothing to opt out of there.
Children
Squeezed is for people buying cars and is not directed at children. We don’t knowingly collect personal information from anyone under 13. If you believe a child has given us information, email [email protected] and we will delete it.
Where your data lives
Squeezed is run from the United States and our database is hosted there. If you use Squeezed from another country, your information is transferred to and processed in the United States.
Changes to this policy
When we change what we collect or who processes it, we update this page and the date at the top. For material changes, we tell you by email or in the app before they take effect.
Contact
Questions, requests or concerns about your privacy: [email protected].