Privacy Policy

Last Updated: November 2025

The privacy of our website visitors is important to us, and we are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, use our services, or interact with our content.

Please read this Policy carefully to understand our data handling practices. Because our website serves users worldwide while we operate from Europe, we have designed this Policy to comply with major data protection regulations including the GDPR (which protects users in the European Union and EEA), the CCPA and other U.S. state privacy laws (which protect users in California and other states), and the FTC Act (which governs advertising and affiliate relationships in the United States).

For information about our business model, affiliate relationships, and how we operate, please see our Advertiser Disclosure page. If you have questions about how we handle your data, please contact us using the information provided in the Contact Us section below.

Who We Are

Website: roadbuddy.ai

Email: [email protected]

RoadBuddy is an auto insurance comparison platform that provides referral links to third-party insurance quote aggregators. We do not collect insurance application information, function as an insurance provider or agent, or make underwriting decisions. When you click an affiliate link on our site, you are directed to an aggregator partner that handles your personal data during the quote process.

2. What Information We Collect

2.1 Information You Actively Provide

Email Subscriptions: When you subscribe to our mailing list to receive news and updates about car insurance topics, we collect:

  • Your email address
  • Date you subscribed
  • Your consent status for marketing communications
  • Any preferences you indicate about content topics

We only collect this information through opt-in forms. We do NOT use pre-checked consent boxes or assume consent.

Contact Forms: Should you contact us directly, we collect:

  • Your name
  • Email address
  • Message content
  • Any other information you voluntarily provide

2.2 Information Collected Automatically

Cookies and Similar Technologies: Like most websites, we use cookies and similar tracking technologies to understand how visitors interact with our site, including:

  • Session cookies (temporary, for basic functionality)
  • Persistent cookies (to remember your preferences)
  • Third-party cookies from analytics and advertising partners

Server Logs and Analytics: Our web server automatically collects:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each
  • Referrer information (where you came from)
  • Search queries used on our site

We use Google Analytics 4 (GA4), which complies with GDPR and CCPA standards.

Device Information: We may collect information about your device to optimize site performance and security:

  • Device type and model
  • Screen resolution
  • Geographic location (approximate, based on IP address)
  • Internet Service Provider (ISP)

2.3 Information from Third Parties

Affiliate Partners: When you click through our affiliate links to third-party websites, those partners may share limited information with us about:

  • Whether the click was successful
  • Whether a quote request was initiated
  • Whether a purchase occurred (for commission tracking only)

We do NOT receive personal data, such as names, phone numbers, or Social Security numbers, from these partners. We only receive aggregated performance data necessary to track affiliate commissions.

Social Media and Advertising Networks: If you visit us through social media or ads, we may receive limited information about the source of the campaign.

3. How We Use Your Information

3.1 Email Communications

  • Sending you news, updates, and educational content about auto insurance
  • Notifying you of changes to this Privacy Policy or our Terms of Use
  • Responding to your inquiries or requests
  • Complying with legal obligations

3.2 Site Optimization and Analytics

  • Understanding how visitors use our website
  • Improving site functionality, design, and user experience
  • Identifying and fixing technical issues
  • Analyzing traffic patterns and content performance
  • Creating statistical reports for internal use

3.3 Affiliate Purposes

  • Tracking which links you click
  • Attributing quote requests and purchases to our affiliate partners
  • Calculating commissions earned
  • Preventing fraud and duplicate submissions
  • Complying with affiliate program terms and conditions

3.4 Legal and Safety

  • Complying with legal obligations, court orders, or government requests
  • Protecting against fraud, security threats, or misuse
  • Enforcing our Terms of Use and other agreements
  • Protecting the rights, property, and safety of our company, users, and the public

3.5 What We Do NOT Use Your Data For

We do NOT use your personal data to:

  • Make automated decisions or profile you for underwriting purposes
  • Sell your personal data to third parties (aside from our affiliate partners)
  • Create detailed behavioral profiles about you
  • Track you across unrelated websites (though retargeting ads may follow you – see section 7)

4. Legal Basis for Processing (GDPR and CCPA)

For EU/EEA Residents (GDPR):

We process personal data based on the following legal grounds:

  • Consent: For marketing emails and certain cookies (you gave explicit, affirmative consent)
  • Legitimate Interest: For analytics, fraud prevention, and site security
  • Legal Obligation: To comply with applicable laws and regulations

You have the right to withdraw consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before withdrawal.

For California Residents (CCPA):

We collect and use personal data as permitted under the California Consumer Privacy Act. You have the right to:

  • Know what personal data we collect
  • Delete the personal data we have collected
  • Opt out of the “sale or sharing” of personal data

Note: We do not “sell” personal data in the traditional sense. However, sharing data with our affiliate partners for tracking and commission purposes may constitute “sharing” under CCPA. You can opt out of this sharing (see section 9).

For Other U.S. State Privacy Laws:

If you reside in a state with its own privacy law (e.g., Colorado, Connecticut, Utah, Virginia), we comply with those laws as well.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

Essential Cookies

  • Site functionality and security
  • Session management
  • GDPR/consent cookie tracking
  • Not optional; required for site operation

Analytics Cookies

  • Google Analytics 4 to understand user behavior
  • Measure traffic, page performance, and engagement
  • Help us improve the user experience

Advertising Cookies

  • Third-party networks like Google Ads and Facebook
  • Enable retargeting so you may see our ads on other websites
  • Help us measure ad performance

Preference Cookies

  • Remember your choices (if applicable)
  • Language, layout, or content preferences

5.2 Consent and Cookie Control

For EU/EEA Residents: We do NOT set non-essential cookies without your explicit, affirmative consent. When you first visit our site, you will see a clear cookie consent banner asking you to accept or reject different categories of cookies. Your choices are:

  • Accept all cookies
  • Reject non-essential cookies (only essential and analytics allowed)
  • Manage preferences (customize which cookies you accept)

Your consent choice is stored in a consent cookie. You can change your preferences at any time via a link at the bottom of each page.

For U.S. Residents: We set certain cookies by default to optimize your experience. You can disable cookies through your browser settings, though some site functionality may be limited.

5.3 Third-Party Cookies

The following third-party services set cookies on our site:

You can opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout or by using Google’s browser add-on.

6. Affiliate Link Disclosure

6.1 How Our Affiliate Program Works

Our website contains links to insurance quote aggregators and comparison tools. When you click these links, we may earn a commission if you:

  • Request a quote
  • Sign up for a service
  • Complete another qualifying action

This commission is paid by our affiliate partners, not by you. You will not be charged any additional fees for clicking these links.

6.2 Clear Disclosure

In compliance with FTC guidelines and similar regulations, we clearly disclose our affiliate relationships. You will see notices near affiliate links stating:

  • “We earn a commission when you click this link and receive a quote.”
  • Or similar language, making the commercial relationship clear

These disclosures are placed close to the link itself and are clearly visible. We do not hide affiliate information on separate pages or behind extensive scrolling.

6.3 Our Editorial Independence

Our editorial content on insurance providers, coverage types, and industry information is created independently and is not influenced by affiliate relationships or potential commissions. Our reviews and comparisons are based on research, data analysis, and industry knowledge.

We may earn commissions through affiliate links to insurance aggregators and, in some cases, directly from insurance providers. These affiliate relationships do not influence our editorial assessments. All affiliate links are clearly disclosed near the link itself.

7. Third-Party Services and Data Sharing

7.1 Affiliate Partners

When you click an affiliate link and visit the services, you leave our website and enter their site. Your interaction with them is governed by THEIR privacy policies, not ours.

We share the following limited information with affiliate partners:

  • Your click attribution (which link you clicked)
  • Basic conversion data (whether a quote was requested)
  • Commission-related information only

We do NOT share with them:

  • Your full name or contact details (unless you enter them directly on their site)
  • Your browsing history outside their platform
  • Financial information beyond what you voluntarily provide

You should review their privacy policies before submitting personal information.

7.2 Email Service Provider

We use an email marketing service to send newsletters and updates. This service processes your email address on our behalf. The service provider is contractually bound to protect your data and is only permitted to use your email for our communications.

If you unsubscribe from our mailing list, your email will be removed from marketing sends immediately. Transactional emails (confirmations, policy updates) may continue if required by law.

7.3 Analytics and Advertising Partners

  • Google Analytics 4 – Processes aggregated usage data to generate reports
  • Google Ads – Enables display advertising and retargeting
  • Facebook – May show you our ads based on your visit to our site
  • Other Ad Networks – May serve ads on other websites you visit

All these services are contractually required to comply with GDPR, CCPA, and similar laws.

7.4 Legal and Compliance Disclosures

We may disclose your personal data when required by law, court order, or government request. This includes:

  • Law enforcement requests
  • Tax authority inquiries
  • Fraud investigations
  • Compliance with financial regulations

We will not voluntarily sell your data to data brokers or unrelated third parties.

8. Data Security

8.1 How We Protect Your Data

  • Encryption: Sensitive data is encrypted in transit (SSL/TLS) and at rest
  • Access Controls: Only authorized staff can access personal data
  • Firewalls and Monitoring: Our systems are protected by firewalls and monitored for intrusions
  • Regular Updates: We maintain current security patches and software
  • Training: Our team receives data protection and security training

8.2 Your Responsibility

While we implement industry-standard security measures, no system is entirely secure. You are responsible for:

  • Keeping your password confidential
  • Not sharing your email login with others
  • Logging out of email accounts on shared devices
  • Reporting suspicious activity to us immediately

8.3 Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

  • Email Subscriber Lists: Retained until you unsubscribe or request deletion
  • Cookies: Session cookies expire when you close your browser; persistent cookies expire after 12-24 months
  • Analytics Data: Retained for up to 26 months for reporting purposes
  • Affiliate Data: Retained for 7 years for accounting and tax compliance
  • Contact Form Submissions: Retained for 3 years or as required by law

If you request deletion of your data, we will remove it within 30 days, except where retention is required by law.

9. Your Privacy Rights

9.1 Rights for EU/EEA Residents (GDPR)

You have the following rights:

Right to Access: Request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification: Request corrections if your data is inaccurate or incomplete.

Right to Erasure (“Right to be Forgotten”): Request deletion of your data, subject to certain exceptions (like legal obligations).

Right to Restrict Processing: Ask us to limit how we use your data while we resolve a dispute or pending request.

Right to Data Portability: Request a copy of your data in a structured, portable format (e.g., CSV file) to transfer to another service.

Right to Object: Object to our processing of your data, including for direct marketing purposes.

Right to Withdraw Consent: Withdraw consent for marketing emails or non-essential cookies at any time.

Right Not to Be Subject to Automated Decision-Making: We do not use automated profiling to make decisions affecting your legal rights.

To exercise any of these rights, contact us at [email protected] with “Privacy Request” in the subject line. We will respond within 30 days.

9.2 Rights for California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

Know: Request what personal data we collect, how we use it, and whom we share it with.

Delete: Request deletion of personal data we have collected, subject to exceptions.

Opt-Out: Opt out of the “sale or sharing” of personal data for targeted advertising.

Correct: Ask us to correct inaccurate data.

Limit Use: Request that we limit how we use sensitive personal information.

Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To make a request, email [email protected] with “CCPA Request” in the subject line. You may be asked to verify your identity for security purposes.

9.3 How to Unsubscribe from Marketing

Every marketing email includes an “Unsubscribe” link at the bottom. Click it, and your email will be removed from our mailing list immediately. You can also contact us directly to unsubscribe.

Unsubscribing from marketing will not affect transactional or legal notifications we may be obligated to send.

10. International Data Transfers

10.1 Data Transfers to the U.S.

Because our primary user base is in the United States and we may use U.S.-based services (like Google Analytics), your personal data may be transferred to the United States or other countries outside the EEA.

The United States does not have data protection laws equivalent to GDPR. However, we only transfer data to third parties that:

  • Have agreed to Standard Contractual Clauses (SCCs) with the EU
  • Are certified under Privacy Shield or similar frameworks
  • Otherwise comply with applicable data transfer regulations

10.2 Your Consent

By using our website, EU residents consent to the transfer of personal data to the United States for processing as described in this Policy.

11. Children’s Privacy

Our website is not directed to children under age 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will immediately delete it and take steps to prevent further collection.

For parents who believe a child has submitted information to us, contact us immediately at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top
  • Post the new Policy on this page
  • For significant changes, notify you via email if we have your contact information

Your continued use of our website after updates constitutes acceptance of the revised Policy. We encourage you to review this Policy regularly.

13. Contact Us

If you have questions about this Privacy Policy, your personal data, or how we handle your privacy, contact us:

Email: [email protected]

For EU Residents: If you are not satisfied with our response to your privacy concern, you have the right to complain to your local Data Protection Authority.

For California Residents: If you have unresolved concerns, you may contact the California Attorney General’s office.

14. Additional Information for Specific Regions

U.S. State Privacy Laws

In addition to GDPR and CCPA, we comply with privacy laws in states including:

  • Colorado (CPA)
  • Connecticut (CTDPA)
  • Utah (UCPA)
  • Virginia (VMPPA)
  • And other emerging state privacy laws

These laws generally provide similar rights to access, delete, and opt out. Requests should be directed to [email protected] with the state name in the subject line.