Legal

    Privacy Policy

    Last updated: September 29, 2026 (document uploads added)

    1. Who is responsible for your data

    DMV.ai is operated by Wise Prince LLC, 13319 Poway Road, Unit 444, Poway, CA 92064. Wise Prince LLC is the data controller for the personal information described in this policy. When DMV.ai Incorporated completes its formation, it will become the controller as successor. Contact: legal@dmv.ai.

    This policy describes the data the current DMV.ai build actually collects and the vendors that process it. Where a practice is not established, we say so rather than describing an intended one.

    2. Information we collect

    • Account information — if you create an account, your name, email address, sign-in credentials, and optional preferred state.
    • Saved progress — if you are signed in, checklist and guide progress you choose to save so you can return to it.
    • Business contact and qualification fields you type into the demo request, government application, title-services, or contact form — name, work email, organization, role, organization type, operating states, volume and timeline if provided, use case, subject, and message.
    • Practice test results you choose to send — only if you submit the optional form after a practice test: your name, email, state, score and the answer you picked for each question. Otherwise practice answers stay in your browser.
    • Chat content — questions you ask the assistant while signed in may be stored with your account so you can revisit them. Guest chat is kept only in your browser's memory for the session and is not stored on our servers.
    • Attribution values present in the page URL (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid, msclkid), stored in your browser and attached to a submission.
    • Landing path and referrer recorded with a submission.
    • Anonymous state and task counts — when you open a state guide or choose a state and task on the Documents page, we record only the state, the task, which page it was, the time, and a random browser ID that isn't linked to your name or account. We use these counts to see which states and tasks people need most. We never record typed questions, document contents, form answers, or vehicle details with them.
    • Local browser storage used by your browser to remember attribution values, guest sessions, and any documents you explicitly save on your device.

    Documents you keep on your device. Files you open in the Documents workspace are read locally in your browser. They are not uploaded to our servers or sent to the assistant. If you choose to save a document there, it is stored only in that browser, encrypted, and you can delete it at any time.

    Documents you choose to send us. If you are signed in and use "Send a document to DMV.ai", and tick the agreement box, we receive and store that file (PDF or image, up to 15 MB) together with its name, size, a digital fingerprint (SHA-256), the state and task you picked, the time, and a signed receipt number. These files can contain sensitive details such as names, addresses, dates of birth, license, ID or vehicle numbers. We use them only to help you with your paperwork: our assistant Ava reads the file and writes a short summary, and authorized DMV.ai staff may view it. Files and their records are deleted automatically 30 days after upload, and you can delete them sooner from the same page. We send you a receipt by email and as a downloadable PDF; the receipt does not contain the document itself. Sending a document to us does not submit it to any government agency.

    Apart from the document upload described above, do not submit VINs, license plates, driver-license or Social Security numbers, dates of birth, payment or insurance details, credentials, or document contents through forms or chat. Submissions that appear to contain them are rejected before they are stored or emailed.

    3. Why we use it and our legal bases

    • To create and maintain your account and restore your saved progress (performance of our agreement with you).
    • To store, read and help you with documents you choose to send us, and to issue your receipt (your consent, which you can withdraw by deleting the document).
    • To record and respond to an inquiry you submit (performance of our agreement / legitimate interests).
    • To understand which channel an inquiry came from (legitimate interests).
    • To detect and prevent abuse, fraud, and security incidents (legitimate interests / legal obligation).
    • To improve the Service, including reviewing poorly rated assistant answers (legitimate interests).

    We do not sell personal information, and we do not share it for cross-context behavioral advertising.

    4. Vendors that process data

    • Lovable Cloud (hosting, database, authentication, and server functions) — where accounts, saved progress, and submissions are stored and processed.
    • AI model providers — process the text of your questions to generate answers; sensitive motor-vehicle data typed into chat is rejected before anything is sent to a model. Documents you choose to send us are passed to an AI provider only so Ava can read them, under settings where the provider does not keep the data or use it for training.
    • Email delivery providers — deliver inquiry notifications, sender confirmations, welcome emails and document receipts.
    • Google Fonts — web fonts are requested from fonts.googleapis.com and fonts.gstatic.com, which receive your IP address as part of that request.
    • Paddle.com (Merchant of Record) — when you make a purchase, Paddle processes the sale, payment, tax compliance, and invoicing as our reseller and Merchant of Record. Payment data you enter at checkout is collected by Paddle under its own privacy terms, not by us.

    We may also share information with professional advisers (legal, accounting) and with authorities where required by law.

    No advertising network, ad-measurement tag, conversion pixel, remarketing tag, session replay, or IP-geolocation vendor is loaded on any page of this build. Google AdSense, DoubleClick, and ipapi.co are disabled site-wide, and any script left behind by an earlier cached build is removed when the page loads. We have not made a consent or geography decision, so no replacement tracker has been added. To suggest which state's rules apply, Ava may use the approximate region our own hosting attaches to your request and asks you to confirm it. If you tap "Use my location", your device's coordinates are used once to find your state and are never stored or logged; only the state you confirm is remembered on your device.

    5. Retention

    Account and saved-progress data is kept while your account is active. Documents you send us, and their records, are deleted automatically 30 days after upload, or sooner if you delete them. Receipt emails you have received stay in your inbox. Business inquiry records are kept until they are no longer needed for the inquiry or until you ask us to delete them. When data is no longer needed, we delete or anonymize it.

    6. Security

    We use appropriate technical and organizational measures, including encryption in transit, access controls, and row-level access rules in our database. No method of transmission or storage is perfectly secure, but we work to protect your information.

    7. Your rights

    Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise any of these, send a request through the contact page and choose the Privacy topic, or email legal@dmv.ai. We will respond within the time required by applicable law. You can clear your own browser session data at any time by clearing site data or using the reset option in the chat interface.

    If you are in the EEA or UK, you also have the right to lodge a complaint with your supervisory authority. Your data may be processed in the United States; where required, we rely on appropriate safeguards for international transfers.

    8. Cookies

    We use only essential browser storage needed to operate the Service (sign-in sessions, your preferences, and attribution values described above). We do not use analytics or marketing cookies.

    9. Children's privacy

    The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have, contact us through the contact page.

    10. Changes

    We may update this policy. Material changes will be noted here with a new date.