Skip to content

Privacy Policy

Last Updated: August 28, 2026

1. Introduction

GAPInsuranceRefunds.com ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). Please read this privacy policy carefully.

Service Nature: GAPInsuranceRefunds.com is a document-preparation and claim-assistance service. We are not a law firm, insurance company, government agency, or financial institution. We do not provide legal, financial, insurance, tax, or claims-adjusting advice. We are not affiliated with or endorsed by any GAP administrator, insurer, lender, dealer, government agency (including CFPB, FTC, BBB, USPS), or state regulator.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Create an account (name, email address, password)
  • Use our refund calculator (vehicle information, loan details, contract dates)
  • Generate documents (contact information, account numbers)
  • Upload documents (GAP contracts, payoff letters, vehicle documents)
  • Contact us for support (email address, message content)

2.2 Automatically Collected Information

When you access the Service, we may automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, features used)
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Generate refund estimates and documents
  • Save your case information for future access
  • Communicate with you about the Service
  • Send you updates, security alerts, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and illegal activities
  • Comply with legal obligations

4. Information Sharing and Disclosure

No Sale of Personal Information: We do not sell, trade, or rent your personal information to third parties for marketing or advertising purposes. We do not share your information with data brokers, lead generators, or marketing companies.

We may share your information in the following situations:

4.1 GAP Providers and Claim Recipients

To process your GAP refund request, we share your personal information (including name, contact information, vehicle details, loan information, and GAP contract details) with your GAP provider, lender, dealer, servicer, or administrator as necessary to submit your claim. This sharing is essential to provide our service and process your refund request. You explicitly authorize this sharing when you submit a refund request through our service.

Specific Recipients: Your information may be shared with the following types of recipients:

  • GAP Providers: Companies that administer or insure your GAP coverage (e.g., Safe-Guard, EFG, JM&A, Assurant, Zurich, AmTrust)
  • Lenders/Servicers: Financial institutions that hold your auto loan (e.g., banks, credit unions, finance companies)
  • Dealers: Automotive dealerships where you purchased or financed your vehicle, if they administer GAP contracts
  • Claims Administrators: Third-party administrators that process GAP claims on behalf of providers

4.2 Service Providers

We may share information with third-party vendors, service providers, and contractors who perform services on our behalf, such as hosting, data analysis, payment processing (Stripe), customer service, email delivery (Resend), certified mail services (Lob), document generation, and analytics. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, and safety of GAPInsuranceRefunds.com, our users, or others.

4.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, user information may be transferred as part of the transaction.

5. Data Security and Document Protection

We implement reasonable administrative, technical, and physical security measures designed to protect the security of any personal information we process, including:

  • Encryption in Transit: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology
  • Encryption at Rest: Uploaded documents and sensitive data are stored encrypted in secure, access-controlled storage
  • Access Controls: Only you and authorized administrators can access your documents; we maintain role-based access controls
  • Automatic Redaction: SSN patterns and account numbers are automatically redacted from uploaded PDFs before storage when technically feasible
  • Secure URLs: Document access links are time-limited and require authentication; we never expose raw storage URLs publicly
  • Access Logging: We maintain logs of document access for security monitoring and breach investigation
  • Vendor Security: We only share data with vendors necessary to provide our services (hosting, email, certified mail, payment processing) under confidentiality obligations

Security Limitations: While we use industry-standard safeguards, no internet-based service can guarantee absolute security. We cannot ensure or warrant the security of information you transmit to us, and you do so at your own risk.

Breach Response: In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery, take immediate remedial action to contain the breach, and comply with all applicable legal notification requirements. We will investigate the breach, secure affected systems, rotate compromised credentials, preserve evidence, and provide appropriate remedies as required by law.

6. Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to provide our services, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

  • Active cases: Retained indefinitely while case is open
  • Closed cases: Retained for 7 years from service completion for legal/compliance purposes
  • Uploaded documents: Same retention as case data; deleted upon user request subject to legal requirements
  • Deleted accounts: Personal information anonymized or deleted within 30 days, subject to legal retention obligations

Your Deletion Rights: You may request deletion of your account, case data, and uploaded documents at any time by contacting us at privacy@gapinsurancerefunds.com. We will respond within 30 days. Note that we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance, dispute resolution).

Vendor Data: We share data with service providers (hosting, email, certified mail, payment processing) only as necessary to provide our services. These vendors are contractually obligated to protect your information and use it only for specified purposes. We do not sell personal information to third parties.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access your personal information
  • Correct inaccurate personal information
  • Delete your personal information
  • Opt-out of marketing communications
  • Data portability
  • Withdraw consent (where processing is based on consent)

To exercise these rights, please contact us at privacy@gapinsurancerefunds.com.

8. Cookies and Tracking

We use cookies and similar tracking technologies to collect and use personal information, including to serve interest-based advertising. You can control cookies through your browser settings, but disabling cookies may limit your use of certain features of the Service.

8.1 What Are Cookies

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and provide information to the owner of the site.

8.2 How We Use Cookies

We use cookies to:

  • Enable core website functionality (authentication, session management)
  • Remember your preferences and settings
  • Understand how you use our website (analytics)
  • Improve user experience and website performance
  • Save your case information between sessions

8.3 Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly (authentication, security, load balancing).

Analytics Cookies: Help us understand how visitors interact with our website (page views, session duration, bounce rate).

Functionality Cookies: Allow the website to remember choices you make and provide enhanced features.

8.4 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can view, delete, or block cookies. Please note that blocking cookies may impact your ability to use certain features of our website.

Browser settings: Chrome: Settings → Privacy and Security → Cookies | Firefox: Options → Privacy & Security → Cookies | Safari: Preferences → Privacy → Cookies | Edge: Settings → Privacy → Cookies

9. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using the Service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page with an updated "Last Updated" date
  • Sending an email notification to your registered email address (for significant changes)
  • Displaying a notice on our website or application

Your continued use of the Service after any changes constitutes acceptance of the new Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.

12. Data Protection Officer

We have designated a Data Protection Officer responsible for overseeing our data protection strategy and compliance. You may contact our Data Protection Officer at:

13. Sensitive Information and Document Upload Guidelines

Minimization of Sensitive Data Collection: We only collect sensitive information that is necessary to process your GAP refund claim. We do not request full Social Security Numbers (SSNs) unless specifically required by your GAP provider's documented requirements. When SSN is required, we only collect the last four digits unless the provider explicitly requires more.

Government-Issued ID: Photo identification (driver's license, state ID, passport) is optional supporting documentation only unless your provider's directory requirements explicitly require identity verification. Only upload ID if your provider specifically requires it.

Document Redaction Guidance: Before uploading documents, please redact the following unless specifically required by your provider:

  • Full Social Security Numbers (keep last 4 digits if needed)
  • Full bank account numbers (keep last 4 digits if needed)
  • Tax documents not directly related to your GAP claim
  • Medical records or health information
  • Barcodes, QR codes, or magnetic stripes not relevant to your claim
  • Unrelated personal information (dates of birth, phone numbers, etc.)

Keep Visible: VIN, your name, provider name, contract/account number (partial is fine), payoff amount, contract dates, and other claim-relevant information should remain visible for processing.

Prohibited Uploads: Do not upload full SSNs, complete bank account numbers, tax returns, medical records, or unrelated personal information unless specifically required for your claim. Our system may detect and warn you about sensitive patterns in uploaded files.

Uploaded documents are encrypted in transit and at rest, stored in secure access-controlled systems, and only accessible to you and authorized administrators for claim processing purposes.

14. Consumer Rights Notice (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of personal information we collect, use, and disclose
  • Right to Delete: Request deletion of personal information we collected from you
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt-out of the sale or sharing of personal information (we do not sell personal information)
  • Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

To exercise these rights, contact us at privacy@gapinsurancerefunds.com. We will respond within 45 days as required by law.

15. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Obtain confirmation of processing and access to your personal data
  • Right to Rectification: Have inaccurate personal data corrected
  • Right to Erasure: Request deletion of personal data under certain circumstances
  • Right to Restriction: Request restriction of processing under certain circumstances
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is consent-based)

To exercise these rights, contact us at privacy@gapinsurancerefunds.com. You also have the right to lodge a complaint with your local data protection authority.

16. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services (including GAP providers, lenders, regulatory agencies, and payment processors). This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the practices of third parties.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

We take your privacy seriously and will respond to all inquiries within 5 business days.

© 2026 GAPInsuranceRefunds.com. All rights reserved.