Privacy policy

This policy explains what Bavarian Evolution LLC (“Bavarian Evo”, “we”) collects through bavarianevo.com, why, who it goes to, how long it is kept, and the choices you have.

Effective October 20, 2026

What we collect, and why

• Car inquiries. When you ask about a car on the run list or in our inventory: your name and phone number, and if you give them, your email, your maximum bid or offer, and a note. We use them to call you about the car and, for an auction car, to bid for you.
• Transport quotes. The pickup and delivery ZIP codes, the VIN and the vehicle details decoded from it, the trailer type and whether the car runs. A quote needs no name or contact details.
• Transport bookings. Your phone number, and for the pickup and the delivery: the business name if any, address, contact name and title, phone numbers, email, dates and notes. We use them to arrange the move with a carrier and to confirm it with you.
• AutoCheck reports. The VIN and your email address, to produce the report, take payment and email you the PDF.
• Total Loss Market Valuation Report. Your name and email; the car's VIN, model, year, body, gearbox, color, trim and mileage; the ZIP code and state where it was garaged; the date of the loss; and, if you give them, the insurer's name, the claim number, the insurer's offer, and the car's condition, options and service history. We use them to prepare your report, deliver it and email it to you.
• BMW VIN decoder. The VIN you enter, to look up how the car was built.
• Facebook Marketplace messages. If you message us about a car on Facebook, our automatic reply keeps a record of the conversation, your Facebook name and the listing, so that it answers each conversation only once. Facebook's own privacy policy covers the conversation itself.
• Collected automatically. Your IP address, which we use to limit how often the forms can be used and keep only as a one-way scrambled code (a hash) where a limit lasts longer than a few minutes; the approximate city, region and country our host works out from it, which we record with transport quotes and bookings; and page views, counted by Vercel Web Analytics without cookies.

Who we share it with

We share personal information only with the services that run this site and deliver what you ask for:

• Vercel hosts the site, keeps its server logs and counts page views (Vercel Web Analytics), including which car model, generation and state are chosen in the valuation tools.
• Upstash stores the records of reports and purchases.
• Cloudflare runs the check that you are a person on the AutoCheck and valuation report forms (Turnstile), carries form submissions to our office computer, and routes email sent to our domain.
• Resend sends our email: your reports, and our own notices of your requests.
• Twilio texts us when you send an inquiry, a transport request or a booking, including your name and phone number.
• PayPal takes payment for AutoCheck and valuation reports. You pay on PayPal's site, and we never see your card or bank details. PayPal receives the order details, such as the VIN or the report number.
• Super Dispatch, the carrier marketplace we use to price transport and to send bookings to carriers, receives the vehicle, the route and, for a booking, the pickup and delivery details you give.
• Anthropic writes the text of your valuation report from the details you give, including your name, the insurer's name and the claim number. Your email address is not sent.
• Auto.dev finds dealer listings of comparable cars for the valuation report, from the ZIP code and the car's make, model and years.
• AutoCheck (Experian) receives the VIN of a report you order.
• NHTSA, the U.S. government's vehicle safety agency, decodes the VIN you enter for a transport quote.
• bimmer.work supplies the build data the BMW VIN decoder shows, looked up by VIN.

Inquiries, transport requests and bookings are also kept on our own office computer. We do not sell personal information, and we do not share it for advertising. The site carries no advertising or social media tracking: no Google Analytics, no Meta Pixel and nothing like them, and no third party collects information through it about your activity on other websites.

Cookies and storage in your browser

• be_vid: a random code that lets us count several quotes or inquiries from one browser as one visitor. Kept 1 year.
• be_autocheck: links your AutoCheck purchases to your browser, so you can reopen a report you paid for. Kept 1 year.
• be_vreport: a random code set when you start a valuation report. Kept 1 year.
• be_admin and be_owner: used only by our own staff.
• Local storage: your choice of light or dark theme; your AutoCheck purchase (the VIN, your email and the purchase number), so a paid report can be reopened; and your valuation report form, including your name, email and claim number, so it is not lost before you pay. The form is cleared once you pay. Local storage stays on your device, and you can clear it in your browser's settings.

None of these is used for advertising or to follow you to other websites.

How long we keep it

• An unpaid valuation report is deleted after 7 days, and an unpaid AutoCheck report after 7 days.
• A copy of an email waiting to be sent is deleted once it is sent, or after 24 hours.
• The scrambled IP codes used to limit the forms are kept from 1 minute to 2 days.
• The BMW VIN decoder keeps a log of its last 2,000 lookups (the VIN, a short code made from your IP address, and the result) and keeps a car's decoded build data, by VIN, for 1 year.
• Paid reports and purchase records, including AutoCheck purchase records with the VIN and your email, inquiries, and transport quotes and bookings have no set deletion date, so that we can reissue a report or answer a question about your order. We delete them when you ask, unless the law requires us to keep them.
• Server logs are kept for as long as Vercel keeps them.

Your California privacy rights

If you live in California, the California Consumer Privacy Act gives you the right to:

• Know what personal information we have collected about you, where it came from, why we collected it and who we shared it with, and to get a copy of it.
• Delete the personal information we have collected from you, with the exceptions the law allows.
• Correct personal information about you that is inaccurate.
• Opt out of the sale or sharing of your personal information. We do not sell or share personal information, and have not done so in the past 12 months.
• Not be discriminated against for using any of these rights. We will not deny you service, charge you a different price or give you a different level of service because you used them.

To make a request, email privacy@bavarianevo.com or call or text 442-437-8396. We will confirm that we received it within 10 days and answer within 45 days. So that we give information only to the person it belongs to, we may ask you to confirm details of your request, such as the email address or VIN you used. Someone you authorize may also make a request for you.

Do Not Track

The site works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal. It does not track you across other websites or sell or share your information, so there is nothing for those signals to turn off.

Children

The site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

When we change this policy, we will post the new version on this page with a new effective date.

Contact us

Bavarian Evolution LLC
Email: privacy@bavarianevo.com
Phone: 442-437-8396 (call or text)