Privacy policy

1. Who we are

Fairmark is operated by an individual, not a company, based in the Republic of Türkiye. In this policy, "we" and "us" mean Fairmark (operated by Eren Menteşe). We decide how the personal information described here is used, so we are its controller. You can reach us at support@fairmarkvalue.com.

2. We do not sell or share your personal information

We do not sell personal information. We do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not use advertising cookies, tracking pixels or third-party analytics, and we do not sell leads to lawyers, insurers or anyone else. We count visits with our own cookie-free statistics, described in section 7; they stay with us. Because we do not sell or share, there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request, which we already meet.

3. What we collect and why

We do not ask for your Social Security number, driver's license, policy number, bank details or health information, and you do not need to give them. You can cover or remove details such as your policy number before you upload a report. If your claim involves an injury, please leave medical details out.

4. Uploaded reports and how they are read

When you upload a report, the file goes to our server and to the Google Gemini API, on Google's paid tier, only so the numbers can be extracted. We do not store the file. We send the extracted numbers back to your browser so you can check and correct them.

Google processes the file under its Gemini API terms for paid services. Those terms do not allow Google to use it to improve its products or train its models. Google logs prompts and responses for a limited period to detect abuse and meet legal requirements, as its terms describe.

5. The market scan in the total-loss kit

After you buy the Total Loss Dispute Kit, we run a scan for comparable cars for sale near you. To do that, we send a description of the vehicle (such as year, make, model, trim, drivetrain and mileage) and your ZIP code to the Gemini API with Grounding with Google Search. We do not send your name or claim number for the scan.

When we use Grounding with Google Search, Google stores the prompt (the vehicle description and ZIP code) and the result for 30 days to produce the results and search suggestions, and may use them to debug and test the systems behind that feature, as its Gemini API terms describe. We cannot delete that copy.

As Google requires, the kit shows Google's search suggestions next to the results. If you click one, it opens Google Search, and Google's privacy policy applies there.

6. What stays in your browser

When you run a check, your answers go to our server, which computes the result. The server returns the result inside a signed token so it can be verified later without a database. Your results, letter drafts and kits are then saved in your own browser's local storage. We do not keep them in a database.

The token is signed, not encrypted. It contains the answers you gave, such as your name, VIN and claim number, and anyone who has a copy of it can read them. It is kept in your browser and is sent back to our server only when you unlock or restore a kit.

This means anyone who uses the same browser profile can see your results. To delete them, clear this site's data in your browser settings. If you lose a kit, you can restore it with your order id and the email you used at checkout; we check both with Paddle before we rebuild it.

We do not set advertising or analytics cookies, and our usage statistics do not use cookies or your browser's storage. When you open checkout, Paddle's checkout window loads and Paddle may use cookies or similar tools it needs to take your payment, under its own privacy notice.

7. Usage statistics and crawler logs

We run our own simple statistics so we can see which pages people read and where the tools get stuck. They are first-party: they run on our own server and database, with no analytics company, no tracking pixels and no cookies. We do not use them to follow you across other sites, we do not combine them with data from anyone else, and we do not sell or share them.

For each page view or action, we store:

• the page address, without anything after a "?" or "#", and the time;
• the name of the site that linked to us, if you came from another site (for example google.com), but not the full address;
• your country, as our hosting provider reports it from your IP address, and whether you use a phone, tablet or computer;
• for some actions, a few coarse details, such as which product you are using, your state, the type of claim and a rounded range of the result (for example a gap of $1,500 to $3,000). Never your name, email, VIN, claim number, exact amounts or the contents of a report;
• a visitor code that lets us count one person once per day. It is made by scrambling (hashing) your IP address and browser type together with the date, a secret key and a random value that we create each day, then shortening the result. The random value is deleted when the day ends, and copies in our database host's backups expire within 30 days. From then on, nobody, including us, can work out which IP address a code came from; before that, it would take both the random value and our secret key. The same browser gets a new, unrelated code every day. We do not store the IP address itself with these statistics.

Automated visitors such as search engines are left out of these statistics. Separately, we keep a log of visits by search and AI crawlers (for example Googlebot, Bingbot, GPTBot or ClaudeBot): the crawler's name, the page and the time. It helps us see how search engines and AI assistants read the site, and it holds nothing about people.

We also record the number of words processed (tokens), the cost and the duration of each AI call, so we can keep costs in check. Those records hold no part of your report, your answers or the results.

Usage statistics and crawler logs are deleted automatically after 400 days.

8. Payments

Paddle is the merchant of record for every order. Paddle collects your payment and billing details, handles sales tax or VAT and sends your receipt. Paddle handles that information under its own privacy policy. We never see your card details. From Paddle we receive the order id, your email and your country.

Waitlist for kits

While a kit is not on sale yet, you can ask us to email you when it is. If you do, we store your email address, which kit you asked about and, if your check had one, your state, with the date you signed up. We use them only to send you one email when that kit is available. They do not go on a marketing or newsletter list, and we do not sell or share them. Your browser also notes that you signed up, without your email address, so the form does not ask again.

We delete your entry once we have sent that email, or 180 days after you signed up if the kit is still not on sale. To be removed sooner, email support@fairmarkvalue.com.

9. Service providers

We use a small number of providers to run the service. Each gets only what it needs.

• Cloudflare hosts the site, our server code and our database. Your requests, including your IP address, pass through Cloudflare and appear in its hosting logs. The database holds the usage statistics and crawler logs described in section 7, the order records Paddle sends us, the waitlist described in section 8, and rate-limit counters. A rate-limit counter is keyed by IP address (for IPv6, only the network part) or order id and holds no other personal information.
• Google (Gemini API) reads uploaded reports and runs the market scan, as described above.
• Paddle processes payments and refunds as merchant of record.
• Cloudflare Turnstile, when we turn it on, checks that a request comes from a person and not a bot. Our server sends Cloudflare the token from that check and your IP address for that purpose.
• NHTSA vPIC, a free public service of the US Department of Transportation. If you enter a VIN, our server sends the VIN alone to it to look up the vehicle's year, make and model.

We do not give personal information to anyone else, except where the law requires it, for example in response to a valid legal order.

10. How long we keep information

• Uploaded files: not stored by us. They are processed in memory and discarded when the request ends. Google's abuse-monitoring logs are described above.
• Market-scan prompts and results at Google: 30 days.
• Results, drafts and kits: in your browser until you clear them. We do not keep a copy.
• Rate-limit counters: expire automatically, usually within an hour or a day. The count of restores for each order is kept so the limit on restores holds.
• Usage statistics and crawler logs: 400 days, then deleted automatically.
• Waitlist entries: deleted once we send the email you asked for, or after 180 days.
• Hosting logs: kept by Cloudflare for a limited period under its log retention settings, then deleted.
• Order records: kept by Paddle as its terms and tax laws require.
• Emails with us: kept as long as needed to answer you and handle any refund, then deleted.

11. Security

The site uses HTTPS. Tokens are signed so they cannot be changed without detection; they are not encrypted. We keep the data we hold to a minimum, so there is little to expose. No method of transmission or storage is perfectly secure, and we cannot promise that information will never be accessed without permission. Because your results live in your browser, keep your device and browser profile protected.

12. Your privacy rights in the United States

Residents of California (under the CCPA, as amended by the CPRA) and of other states with similar laws have rights over their personal information. In the past 12 months we collected the categories below. We used them for the purposes in section 3, and we disclosed them only to the providers in section 9 so they can run the service for us.

We do not collect sensitive personal information as California law defines it, such as Social Security, driver's license or financial account numbers. We offer the rights below to everyone, whether or not a state law requires it:

• Know and access: ask what personal information we have about you, where it came from, why we use it and who receives it.
• Delete: ask us to delete personal information we hold about you.
• Correct: ask us to fix information that is wrong.
• Opt out of sale or sharing: we do not sell or share, so there is nothing to opt out of.
• Limit use of sensitive information: we do not collect sensitive personal information to infer characteristics about you, and we do not use any information to profile you.
• No discrimination: you will not be charged more or treated differently for using these rights.

To make a request, email support@fairmarkvalue.com. We confirm that we received it within 10 business days and answer within 45 days. If we need more time, we tell you why, and we take no more than another 45 days.

To verify that a request is yours, we match the order id and checkout email against Paddle's record, or ask you to reply from the email address the request is about. We do not ask for more than we need, and we use what you send only to verify the request. An authorized agent may ask for you with your signed permission; we may ask you to confirm it directly. Since most of your data lives in your browser, you can also delete it yourself at any time by clearing this site's data.

13. Rights for people outside the United States

If you are in the European Union, the United Kingdom or another place with similar laws (such as the GDPR or UK GDPR), you have the right to access, correct and delete your personal information, to restrict or object to how we use it, to receive a copy in a portable form, and to withdraw any consent you gave.

Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), Article 11 gives you the right to:

• learn whether we process personal data about you, and ask for information about it;
• learn why we process it and whether we use it for that purpose;
• know the third parties, in Türkiye or abroad, to whom it is transferred;
• ask us to correct it if it is incomplete or wrong, and to delete or destroy it;
• ask us to tell the third parties who received it about a correction or deletion;
• object to a result that goes against you and comes only from automated analysis of your data;
• claim compensation if unlawful processing causes you a loss.

We use your information to provide the service you ask for, including the check and any kit you buy. We also rely on our legitimate interest in keeping the service secure and preventing abuse, for example through rate limiting, and in understanding how the site is used through the cookie-free statistics in section 7. We do not make decisions about you by automated means that have legal or similarly significant effects; the checks produce figures for you to review.

To use any of these rights, email support@fairmarkvalue.com. We answer within 30 days, free of charge. You may also complain to the data protection authority where you live; in Türkiye, that is the Personal Data Protection Authority (KVKK).

14. Children

The service is not for people under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us information, email us and we will delete it.

15. International transfers

We operate from Türkiye. Our providers process data in the United States and other countries. When information moves between countries, we rely on the safeguards our providers offer, such as standard contractual clauses.

16. Changes to this policy

We will update this page when our practices change and change the date at the top. If we ever want to use personal information in a new way that needs your consent, we will ask first.

17. Contact

Questions or requests: support@fairmarkvalue.com. You can also read our terms of service.