Privacy Policy

Last updated: October 17, 2026

Draft — this document is pending review by U.S. legal counsel and may change before launch.

This Privacy Policy explains how Commercial American (“we”, “us”) collects, uses and shares personal information when you use commercialamerican.com (the “Service”), a marketplace that connects buyers and sellers of commercial vehicles in the United States.

Information we collect

  • Account information: name, e-mail address, password (stored only as a secure hash by our authentication provider), phone number, city, state and ZIP Code, and the type of account you choose.
  • Dealer information: business name, legal name, business address, phone, website, logo and, if you provide them for verification, dealer license number and EIN. EIN, legal name and street address are not shown publicly.
  • Listing information: vehicle details, photos, price, location and the contact details you choose to show. A VIN is kept private unless you choose to display it.
  • Communications: messages, photos, videos and audio exchanged through on-site chat, information requests, reports and support requests.
  • Technical information: IP address, device and browser information and essential cookies required to keep you signed in and protect the Service. Hosting providers keep standard server logs for security.

Photos you upload are re-encoded in your browser before upload, which removes embedded metadata such as GPS location.

How we use information

  • To provide the marketplace: publish listings, show dealer profiles, deliver messages and information requests to sellers.
  • To keep the Service safe: moderate listings, verify dealers, prevent fraud, spam and abuse, and enforce our Terms.
  • To communicate with you about your account, listings and requests, and — only if you opt in — occasional product updates.
  • To comply with legal obligations and respond to lawful requests.

How information is shared

  • With other users: listing details and the contact details you choose to show are public. When you message a dealer or request information, the dealer and its authorized staff receive your name, contact details and message.
  • With service providers that host and operate the Service for us under contract (for example, cloud database, authentication, file storage and website hosting providers located in the United States).
  • For legal reasons: to comply with law, protect rights and safety, or investigate fraud.
  • Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.

We do not sell personal information and we do not share it for cross-context behavioral (targeted) advertising. The Service does not display third-party advertising.

Cookies

We use only essential cookies and similar storage needed for sign-in, security and remembering basic preferences. See our Cookie Policy.

Retention

We keep account and listing information while your account is active. When you delete your account, we delete your profile, listings, photos, saved vehicles and messages, except records we must keep for legal, security or fraud-prevention purposes. Removed listing photos are deleted from storage.

Your rights and choices

Depending on your state of residence (for example California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may have the right to know, access, correct and delete personal information, to obtain a portable copy, and to opt out of sale, sharing or targeted advertising. You can download your data and delete your account from Profile & Privacy, or submit a request at Your Privacy Choices. We respond within 45 days, may verify your identity, and will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our response. We honor Global Privacy Control signals.

Security

We use encryption in transit (HTTPS), access controls enforced in the database (row-level security), role-based permissions for dealer staff and administrators, and audit logs of administrative actions. No method of transmission or storage is 100% secure.

Children

The Service is intended for adults and businesses. We do not knowingly collect personal information from children under 16.

Changes and contact

We will post changes to this Policy on this page and update the date above. Questions: support@commercialamerican.com or Contact Us.