Effective date: July 25, 2026 · Last updated: July 25, 2026
Investor Cars & Auto Salvage ("we," "us," "our") operates the CarSpecialist brand and the Title Track mobile application (the "App"). This policy explains what the App collects, why, how it is stored, and the choices you have. It applies to Title Track only; other CarSpecialist apps have their own policies.
Title Track helps salvage vehicle operations track a vehicle through eight lifecycle stages: Purchased, In Transit, Received, Teardown/Rebuild, Rebuild Inspection, Re-title Applied, Title Received, and Sold. You sign in with an email address and password to an account belonging to a "shop." Records are scoped to your shop, so only members of your shop can see your shop's data.
Your name, email address, and the shop your account belongs to. You provide this when your account is created.
Vehicle records, VINs, Copart or IAA auction lot numbers, lifecycle stage and dates, per-vehicle costs and total capital deployed, shop letterhead details used on generated documents, and any notes you add. Auction lot numbers and VINs are entered manually by you — the App does not log into or retrieve data from Copart, IAA, or any other auction site.
Photographs and uploaded files of vehicle titles, bills of sale, inspection sheets, and auction sheets that you choose to capture or upload. These may contain personal information printed on the documents themselves (for example, an owner or seller name on a title). You control what you capture.
Your password is never stored in readable form; it is hashed with bcrypt. Sessions are maintained server-side and expire.
Title Track does not collect your device model, operating system version, advertising identifiers, location, contacts, or any usage analytics or crash telemetry. There are no third-party advertising or tracking SDKs in the App.
The App requests access to your camera so you can photograph vehicle documents, and to your photo library so you can attach document images you already have. These permissions are used for that purpose only. The App does not browse, scan, or upload your photo library in the background — only the specific images you select or capture are used. You can decline or revoke either permission in iOS Settings; the rest of the App continues to work, and you can still enter records manually.
Images you capture or upload are processed with on-device optical character recognition (Tesseract.js) to extract text and match a document to the right vehicle. This text recognition runs on your device — the images are not sent to a third-party OCR service. For PDF uploads, the App reads the text already embedded in the PDF.
You may optionally enable Face ID or Touch ID to unlock the App. Biometric matching is performed entirely by iOS on your device. The App receives only a success or failure result. We never receive, see, or store your biometric data.
When you decode a VIN, the App sends that VIN to the NHTSA vPIC web service, a free public service operated by the United States National Highway Traffic Safety Administration, and receives back vehicle specification details such as make, model, and year. This means the VIN you enter is transmitted to a third party (NHTSA) for decoding. No account information, name, email, shop identity, photo, or document is sent with the request. NHTSA's handling of these requests is governed by its own privacy practices. If you do not want a VIN transmitted, do not use the decode function for that vehicle; you can enter vehicle details manually.
Your shop's records, photos, and documents are stored in a SQLite database on our server. Separation between shops is enforced at the application level: every query is scoped to the shop your account belongs to, so members of one shop cannot access another shop's records.
Security measures include passwords hashed with bcrypt, server-side sessions that expire, and encryption of data in transit using HTTPS/TLS. Administrative access to the server is limited to personnel who need it to operate and maintain the service.
No system is perfectly secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to enable biometric unlock.
We do not sell your data. We do not rent, trade, or share your personal or business data with anyone for advertising, marketing, or profiling purposes. There are no advertising networks or data brokers involved in Title Track.
Data leaves the App only in these cases:
We retain your account information and your shop's records for as long as your account remains active, because the lifecycle of a salvage vehicle and its title history is the purpose of the App. When you delete your account, your personal data is deleted as described in Section 11. Backups containing deleted data are overwritten in the normal backup rotation within 30 days.
You can delete your account from inside the App at any time:
This permanently deletes your account and your personal data. If you are the last remaining member of your shop, all of that shop's vehicles, photos, and documents are permanently deleted as well. Deletion cannot be undone.
If you prefer, you may instead email support@investorcars.com from the address on your account and we will delete your account and associated data.
You may request access to the personal information we hold about you, ask us to correct inaccurate information, or request deletion of your account and data. Depending on where you live, you may have additional rights under applicable law. To exercise any of these, email support@investorcars.com. We do not discriminate against you for exercising these rights.
Title Track is a business tool intended for use by employees and operators of salvage, rebuild, and auto businesses. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email support@investorcars.com and we will delete it.
We may update this policy from time to time. Material changes will be communicated in the App or by email to the address on your account. The "Last updated" date at the top of this page always reflects the most recent revision.
Investor Cars & Auto Salvage — CarSpecialist
Email: support@investorcars.com
Little Rock, Arkansas, USA