Privacy Policy

What personal information LienYard collects, how we use and share it, and the rights and choices you have.

Effective date: July 15, 2026LienYard

This policy explains what personal information LienYard (operated by Harper AI, Inc.) collects, why, and the choices you have. It is written to meet California’s privacy laws (CCPA/CPRA and CalOPPA); if you are a California resident you have specific rights described below.

Information we collect

  • Account information: your email address when you sign in or request a magic link, and your business details (yard name, TDLR license number, address, phone).
  • Payment information: handled by Stripe. We receive transaction records (what you bought, when, the amount) but never your card number.
  • Vehicle files and motor vehicle records: information you enter about vehicles in your care, including owner and lienholder names and addresses from searches you run under your own TDLR license. These records are protected by the Driver’s Privacy Protection Act; the section below governs them.
  • Analytics & cookies: usage data collected with PostHog (pages viewed, device and browser info, interaction events). We use first-party cookies for sign-in sessions and analytics. We do not run third-party advertising trackers, and we do not use session recording or replay anywhere in the product.

Motor vehicle records (DPPA)

Owner and lienholder records entered by our customers are used solely to generate that customer’s statutory notices, letters, and title paperwork. We act as the customer’s service provider for those records. We never sell them, never share them beyond the mail and infrastructure providers needed to produce and send the customer’s own notices, never use them for marketing, and never display them publicly. Each record is stored with provenance (who entered it, when, and from which source). Records are retained with the vehicle file for 5 years, aligned with DPPA record-keeping duties, then purged.

How we use information

  • To provide the service: sign-in, deadline tracking, letter generation, support.
  • To operate and improve the product (analytics, debugging, abuse prevention).
  • To send transactional email (sign-in links, receipts, deadline notices you asked for).
  • We do not sell or share your personal information, and we do not sell or share the motor vehicle records our customers enter.

Who we share it with

Service providers acting for us, under contract:

  • Stripe — payment processing.
  • Resend — email delivery.
  • Lob — certified-mail printing and dispatch, when you mail a letter through the service.
  • PostHog — product analytics (no session recording).
  • Google Cloud — hosting and infrastructure.
  • Upstash — rate limiting.

We may also disclose information if required by law, or as part of a corporate transaction (with this policy continuing to apply).

Your California privacy rights

You have the right to:

  • Know what personal information we collect and how we use it.
  • Delete the personal information we hold about you.
  • Correct inaccurate personal information.
  • Not be discriminated against for exercising any of these rights.

To exercise any right, email privacy@lienyard.com. We will verify the request against the email or records involved and respond within the statutory window. Note that motor vehicle records inside a customer’s vehicle files carry their own federal retention duties; where those duties apply, deletion follows the retention window described above.

Global Privacy Control and “Do Not Track”

We do not sell or share personal information, so the CCPA opt-out right has nothing to operate on here. If your browser sends a Global Privacy Control signal, we honor it as a request not to sell or share your information, which is already our standing practice. Because there is no common standard for browser “Do Not Track” signals we do not respond to DNT.

Retention

  • Account and transaction records: while your account is active and as required for tax and accounting.
  • Motor vehicle records and generated letters/packets: with the vehicle file for 5 years, then purged.
  • Analytics events: per PostHog’s standard retention.

Contact

Privacy questions: privacy@lienyard.com. LienYard is a product of Harper AI, Inc. · Contact: legal@lienyard.com