--- title: 'Privacy Policy — JOY Automart' description: 'How JOY Automart collects, uses, shares, retains and protects personal, business, vehicle and usage information, including ASK ONI and AI agent access. Last updated 1 October 2026.' canonical: 'https://www.joyautomart.com/privacy' last_updated: '2026-10-13' keywords: 'JOY Automart privacy policy, personal data, data retention, ASK ONI, account deletion' --- # Privacy Policy > How JOY Automart collects, uses, shares, retains and protects personal, business, vehicle and usage information, including ASK ONI and AI agent access. Last updated 1 October 2026. Last updated 1 October 2026. This policy explains how JOY Automart handles personal, business, vehicle and usage information across JOY Auto Exchange and the wider JOY Automart platform. ## 1. Information we collect Account information: name, email, phone number, profile details, credentials and account status. Vehicle information: make, model, year, mileage, registration details, chassis or VIN information, condition declarations, images, inspection evidence, diagnostic information and transaction history. Ownership and verification information: documents or evidence required to verify identity, ownership, selling authority, dealer, workshop, vendor or business status. Commerce information: listings, valuations, import or sourcing requests, offers, orders, invoices, payment or settlement status, delivery information and support records. Usage and security information: pages visited, search queries, device/browser information, session data, login activity and security events. ## 2. How we use information We use information to operate accounts, connect vehicle journeys, provide marketplace, inspection, sourcing and commerce services, verify eligibility or ownership, prevent fraud, secure the platform, communicate transactional updates, improve catalogue and service quality, maintain audit records and comply with applicable obligations. ## 3. AI processing Information may be processed by JOY Automart systems that provide search, matching, diagnostic, valuation, sourcing, risk or workflow assistance. Required human approvals remain separate from advisory AI output. We apply access controls so operational, dealer, workshop and customer records remain separated according to their authorised purpose. ASK ONI. When you ask ONI, our AI assistant on the website and in the JOY Automart app, JOY sends your question and up to the last six messages of that conversation to the AI model provider that writes the answer, currently Anthropic. To research a question, ONI also sends the first 300 characters of your question to Google's web search and reads public web pages, and a vehicle identification number (VIN) in your messages is looked up in the US NHTSA vehicle database. JOY does not add your name, email address, phone number or saved vehicle to what is sent. If you start a question from a part or vehicle page it may mention that vehicle, and you can change it before you send it. Everything you type is sent, so do not type passwords, card or bank details or ID numbers. The app asks for your agreement before your first question, sends nothing if you say no, and lets you withdraw your agreement at any time. These providers handle what they receive under their own terms. You can report any ONI answer that is wrong, unsafe or offensive from the app. A report keeps that answer and the question it answered, with card numbers and similar details removed, for up to 180 days if you were signed in and 30 days if you were not, so that we can review it. A report you sent while signed in is deleted with your account. ## 4. AI agents and the JOY Automart connector AI assistants such as ChatGPT, Claude or Gemini can connect to JOY Automart through our connector at www.joyautomart.com/mcp. Without an agent key the connector only reads public catalogue, vehicle and buying information. For each request we record the tool used, any search text, the assistant platform (from its software identifier), whether it succeeded and how long it took. Your network address is stored only as a salted, shortened fingerprint (a pseudonym, not your address) used to count distinct callers and enforce rate limits. These records are deleted automatically after 90 days. With an agent key you create at /account/ai-agents, your assistant can act for your account within the permissions and BDT spending limits you choose: it can send parts requests, place cash-on-delivery or trade-credit orders, and read your order status. We store the key only as a fingerprint, together with its name, permissions, limits, expiry and when it was last used, and we record the total of each agent order against your limits. Orders and parts requests made by your agent are processed like your own and marked as placed by your AI agent. Your assistant's provider (for example OpenAI, Anthropic or Google) receives whatever you share with the assistant and what our connector returns to it, under that provider's own privacy terms. We do not receive your conversations with the assistant. Agent checkout. Some AI shopping agents can check out for you through a standard agent checkout interface instead of the connector, but only with your agent key. When an agent starts a checkout we keep the delivery name, phone number and address it sends, with the buyer's email address, names and order notes, for up to 30 days from the day the checkout is opened (a short-lived copy that protects against repeated requests is deleted after about 48 hours), and we place the order and count its total against your limits exactly as for any agent order. Deleting your account erases these records and your agent keys. You can revoke an agent key at any time at /account/ai-agents; it stops working immediately. JOY Automart can also revoke keys or pause agent access for security reasons. Card payments are never made by an agent: you pay on joyautomart.com yourself. ## 5. Sharing We do not sell your personal data. We may share information that is necessary to complete a requested service with authorised dealers, workshops, inspection providers, logistics, payment, finance, technology or transactional service providers, and with authorities where legally required. We limit sharing to the relevant purpose and account permissions. If you sell a car through JOY Auto Exchange, your name appears as the seller on the public listing JOY publishes for it. ## 6. Cookies, local storage and sessions We use session and browser storage where required for authentication, preferences and continuity of an active workflow. Auto Exchange sale-journey identifiers are kept separately from ordinary vehicle browsing so viewing another vehicle cannot overwrite a seller's linked transaction. ## 7. Retention We retain account, transaction, vehicle, inspection, audit and compliance records for as long as reasonably required for the service, security, dispute, tax, audit, legal or regulatory purpose for which the information is held. Some records are kept for a fixed time: ONI answer reports for up to 180 days (30 days when sent without signing in), agent checkout records for up to 30 days, and connector request records for 90 days. ## 8. Security We use measures including TLS in transit, session controls, role-based access, separation of customer and operational identities, restricted transaction access and controlled handling of sensitive records. No method of storage or transmission can be guaranteed to be completely secure. ## 9. Your choices and contact You can delete your account yourself in the JOY Automart app (Account, then Delete account), or ask us to on the account deletion page at /account-deletion, which also lists what is deleted and what we keep. You may also request access or correction of your personal information, and may request deletion where applicable and where retention is not required for a transaction, security, audit or legal obligation. Contact privacy@joyautomart.com for privacy requests. ## Sitemap - [Agent-readable sitemap](https://www.joyautomart.com/sitemap.md): every public JOY Automart route, grouped by area. - [XML sitemap](https://www.joyautomart.com/sitemap.xml): crawler sitemap with last-modified dates. ## Related - [JOY Automart homepage](https://www.joyautomart.com/): The Automotive Intelligence Company. - [HTML version of this page](https://www.joyautomart.com/privacy): the same content rendered for browsers. - [Agent-readable sitemap](https://www.joyautomart.com/sitemap.md): every public route in Markdown. - [llms.txt](https://www.joyautomart.com/llms.txt): concise discovery document for language models. ## Boundaries Public discovery resources are read-only and grant no operational authority. Owner and Admin routes, privileged agents, write operations, deployments, financial actions and customer records require authentication and JOY Governance authorization.