Privacy Policy

Last updated: June 26, 2026

Car Plug 559 ("we," "us," or "our") operates the Car Plug 559 website (the "Site") and related services that help display our used-car inventory in Fresno, California. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Site, you agree to the practices described in this policy. If you do not agree, please do not use the Site.

Instagram Post Data

Our app connects to our business Instagram account to keep vehicle listings on this Site up to date. Here is a plain summary of how we handle that data:

What we collect

From our own Instagram business account, we collect post data such as:

• Post captions and text
• Photos and other media attached to posts
• Post timestamps and Instagram post identifiers
• Public follower count for our account

We do not collect Instagram data from other users' accounts, private messages, or followers' personal profiles.

Why we collect it

We use Instagram post data solely to operate our inventory website. Specifically, we use it to:

• Import vehicle listings from our Instagram posts
• Display cars, photos, prices, and descriptions on this Site
• Mark vehicles as sold when indicated in a post caption
• Show basic business stats such as follower count

We do not share it

We do not sell, rent, license, or share Instagram post data with third parties for their own marketing, advertising, or data-broker purposes. Instagram post data is used only to display and manage inventory on our Site. It is stored on our servers and is not made available to other businesses, apps, or advertisers.

We do not transfer Instagram post data to third parties except where required to run the Site (for example, secure hosting storage) or where required by law. Any service providers we use process data only on our behalf to operate the Site and are not permitted to use Instagram post data for their own purposes.

1. Who This Policy Applies To

This policy covers:

• Visitors who browse our public inventory on the Site.
• Authorized administrators who sign in to manage inventory behind our admin area.
• Our business Instagram and Facebook accounts connected to our inventory sync tools. We do not offer public user accounts on the Site.

Purchases and customer conversations happen off the Site through Instagram Direct Messages or Facebook Messenger. Those platforms are operated by Meta Platforms, Inc. and are governed by Meta's own privacy policies.

2. Information We Collect

2.1 Public website visitors

We do not ask visitors to create an account, submit a contact form, or provide personal information to browse inventory. We do not use advertising trackers, analytics pixels, or third-party marketing cookies on the public Site.

When you visit the Site, standard web hosting and server logs may automatically record:

• IP address
• Browser type and device information
• Pages viewed and request timestamps
• Referring URL

We use this technical information only to operate, secure, and troubleshoot the Site. We do not build marketing profiles from public visitor traffic.

2.2 Admin users

If you are an authorized administrator, we collect and store:

• Email address (for login and account recovery)
• Hashed password (we do not store plain-text passwords)
• Session authentication data in a secure, httpOnly browser cookie
• Temporary one-time codes and related records when you request a password reset

2.3 Instagram and Facebook integration data

See the Instagram Post Datasection above for a summary of what we collect, why we collect it, and our sharing practices. In addition, our systems store access tokens needed to maintain the authorized connection to our Instagram business account through Meta's Instagram Graph API.

We do not use the Instagram API to collect personal information from other Instagram users, and we do not receive private Instagram messages through this integration.

2.4 Vehicle and business content

We store vehicle listing information displayed on the Site, including titles, prices, descriptions, photos, sale details, and related business settings (for example, location and inventory statistics).

3. How We Use Information

We use the information described above to:

• Display live used-car inventory on the Site
• Sync listings from our Instagram posts
• Operate and secure our admin tools
• Send password-reset messages to authorized administrators
• Maintain business statistics shown on the Site
• Protect against abuse, errors, and unauthorized access
• Comply with applicable law

We do not sell your personal information.

4. How We Share Information

Instagram post data is not shared with third parties for marketing, advertising, or resale. It is used only to display and manage inventory on our Site, as described in the Instagram Post Data section above.

Other information may be shared only in the following circumstances:

• Service providers that help us run the Site, such as hosting providers, email delivery services, database providers, and API providers listed below.
• Legal and safety reasons when required by law, court order, or to protect rights, safety, and security.
• Business transfers in connection with a merger, sale, or restructuring, subject to appropriate safeguards.

5. Third-Party Services

We rely on the following categories of third-party services:

• Meta (Instagram / Facebook)— to read our business account posts and profile metrics through the Instagram Graph API. Meta's policies apply to data handled on its platforms: Meta Privacy Policy.
• Google Gemini— to help structure vehicle details from our Instagram post captions during automated inventory sync. Caption text from our posts may be sent to Google's API for processing.
• Resend — to deliver password-reset emails to authorized administrators.
• Hosting and database providers — to store Site data and serve pages.

When you leave the Site to contact us on Instagram or Messenger, your communications are handled by Meta under its own terms and privacy practices.

6. Cookies and Similar Technologies

The public Site does not set tracking cookies for visitors. Authorized administrators receive a session cookie (cp_token) that is httpOnly, used only for authentication, and expires after a limited period. You can remove cookies through your browser settings, but admin login will not work without the session cookie.

7. Data Retention

We keep information only as long as reasonably necessary for the purposes described above:

• Vehicle listings and media are retained while relevant to our inventory operations.
• Sold vehicle records may be removed automatically after a short retention period.
• Admin account data is retained while the account remains active.
• Password-reset codes expire shortly after they are issued.
• Server logs are retained for a limited operational period.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted passwords, secure session cookies, and restricted admin access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Because we do not collect personal information from public visitors to operate the Site, most visitors do not need to submit a data access or deletion request to us for Site browsing.

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

Authorized administrators may contact us to update or delete an admin account.

If you believe we hold personal information about you or want to exercise a privacy right, contact us using the information in Section 12.

10. Data Deletion Requests

Website visitors: We do not maintain personal profiles for public visitors. If you only browsed the Site, there is generally no visitor account or personal data file for us to delete.

Instagram / Facebook users:Our app accesses our business account content through Meta's APIs. We do not store personal data obtained from other users' Instagram accounts. Messages you send us through Instagram or Messenger are handled by Meta. To manage or delete data on Meta's platforms, use Meta's settings and help resources.

Administrators: To request deletion of an admin account or related admin records, contact us using the details below.

11. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the Site after changes become effective means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request, contact Car Plug 559:

• Business name: Car Plug 559
• Location: Fresno, CA, United States
• Instagram: @carplug559
• Facebook Messenger: Message Car Plug 559

See also our Terms of Service.