Legal

Privacy Policy

Effective date: May 13, 2026

1. Overview

AnyPartsHub ("we," "us," or "our") is operated by ALL IN ONE BUSINESS SOLUTIONS LLC and runs anypartshub.com. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and your rights regarding that information. By using our Service, you agree to the collection and use of information as described here.

We do not sell your personal data to third parties. Information you provide is used solely to operate the marketplace and connect buyers with sellers.

2. Information We Collect

2.1 Information you provide

Account registration: name, email address, phone number, password (stored as a bcrypt hash).
Part requests: vehicle type, make, model, year, part descriptions, ZIP code, contact preferences, and optionally up to three photos.
Seller profile: business name, business description, service area (ZIP code or state), vehicle types, brands handled, and part categories.
Messages and responses: text content of seller responses and buyer–seller message threads within the platform.
Payment information: billing details collected and processed by Stripe. AnyPartsHub never stores raw card numbers or full payment credentials on our servers.

2.2 Information collected automatically

Log data: IP address, browser type, pages visited, and timestamps when you access our Service.
Cookies and sessions: we use session cookies required for authentication (NextAuth.js). No third-party advertising cookies are set.
Device information: browser user-agent and screen resolution for debugging and analytics purposes.

2.3 Information from third parties

Google OAuth: if you sign in with Google, we receive your name and email address from Google.
Stripe: we receive payment status, subscription state, and billing email from Stripe webhooks.

3. How We Use Your Information

We use collected information to:

Create and manage your account and authenticate your identity;
Match buyer requests with appropriate sellers using ZIP code, vehicle type, brand, and part category filters;
Deliver buyer contact information (name, email, phone) to matched sellers — this is core to the Service;
Send transactional emails: request confirmations, new-lead notifications, seller verification updates, password resets, and subscription alerts (via SendGrid);
Send optional SMS notifications to sellers who have enabled them (via Twilio);
Process subscription payments and billing through Stripe;
Store request photos on Cloudflare R2 and serve them to matched sellers;
Detect and prevent fraud, spam, and abuse;
Improve the Service through aggregated, anonymized analytics.

4. How We Share Your Information

4.1 With matched sellers

When you submit a part request, your name, email address, phone number, ZIP code, and vehicle/part details are shared with sellers who match your request. This sharing is the primary function of the Service and is necessary to connect you with sellers who can help.

4.2 With service providers

We share data with third-party providers who process it on our behalf:

Stripe — payment processing and subscription management
SendGrid — transactional email delivery
Twilio — SMS notifications (sellers only, if enabled)
Cloudflare R2 — photo storage for part requests
Google — OAuth authentication (if you choose to sign in with Google)

Each provider is bound by their own privacy policies and data processing agreements.

4.3 Legal requirements

We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business transfers

If AnyPartsHub is acquired, merged, or transfers substantially all of its assets, user information may be transferred as part of that transaction. We will notify registered users by email before their data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your account information for as long as your account is active. Part requests and associated photos are retained for 90 days after the request expires, then deleted. You may request deletion of your account and associated data at any time (see Section 8).

Transaction records (subscription history, payment receipts) may be retained longer to comply with financial and tax regulations.

6. Cookies

AnyPartsHub uses cookies strictly necessary to operate the Service:

Session cookie — maintains your authenticated session (set by NextAuth.js). Expires when you sign out or after 30 days of inactivity.
CSRF token — protects form submissions from cross-site request forgery.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from signing in.

7. Security

We implement industry-standard security measures including HTTPS encryption for all data in transit, bcrypt password hashing (cost factor 12), and access controls that limit data access to authorized personnel. Seller dashboard data is accessible only to the authenticated seller account; buyer request details are accessible only to the requesting buyer and matched sellers.

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you;
Correction — request that inaccurate data be corrected (you can update most profile fields directly in account settings);
Deletion — request deletion of your account and personal data (subject to legal retention requirements);
Portability — request your data in a machine-readable format;
Opt-out of emails — unsubscribe from non-essential emails via the unsubscribe link in any email we send. You cannot opt out of transactional emails (e.g., password reset, subscription receipts) while your account is active.

To exercise any of these rights, email privacy@anypartshub.com. We will respond within 30 days.

9. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information is collected and how it is used, to request deletion of your personal information, and to opt out of the sale of personal information. AnyPartsHub does not sell personal information as defined by the CCPA. To exercise your CCPA rights, contact us at privacy@anypartshub.com.

10. Children's Privacy

The Service is not directed to persons under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

11. Links to Third-Party Sites

Our Service may contain links to external websites (e.g., Stripe billing portal, Google OAuth). This Privacy Policy applies only to AnyPartsHub. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users by email at least 14 days before material changes take effect and will update the effective date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions or concerns about this Privacy Policy? privacy@anypartshub.com

Read our Terms of Service →