Privacy Policy

Who we are

Ez Auto Refi LLC (“we”, “us”) operates ezautorefi.com. We are a lead-generation service, not a lender. We collect an auto-refinance application from you and transmit it to one lending partner, iLending (Fleet Financial, Inc. dba iLending, 7257 S Tucson Way, Englewood, CO 80112). The lender makes all credit decisions and sets all rates and terms. We are paid by the lender for each application we submit, and we never charge you a fee. Once your application is transmitted, the lender’s own privacy policy governs what it does with your information.

What we collect

• Contact details: your name, email address, and phone number.
• Where you live: your residence address, state, and ZIP code.
• Identity: your date of birth and Social Security number.
• Other personal details the lender requires: gender, marital status, mother’s maiden name, military status, and residency status.
• Employment and income: your employment status, employer and position, time on the job, monthly income, any other income, and a previous employer if you are new to your job.
• Housing: whether you own or rent, what you pay, time at your address, and a previous address if you moved recently.
• Your vehicle: the VIN, year, make, model, mileage, and how you use it.
• Your current loan: the lender, balance, payoff amount, payment, rate, and term.
• Co-borrower details, if you add one — the same categories, about that person.
• Consent records: the exact disclosure text you were shown, a content hash of it, the name you typed, the date and time, your IP address, your browser user agent, and your session identifier.
• How you reached us: the page you landed on, the campaign parameters and click identifiers carried by the link you followed, and a first-party cookie named ezauto_vid that connects your visit to your application. That cookie lasts no longer than 90 days, is hashed before we store it, and is not used to track you across other websites.

How we use it

• To check that we can serve applicants in your state.
• To run the soft credit check you give us written instruction to run.
• To prepare your application and transmit it to the lender.
• To contact you about your application, where you have consented, and to keep evidence of the consents you gave.
• To measure our advertising in aggregate, and to prevent fraud and meet our legal obligations.

The consents we record

We ask for each of these separately, and we record each one.

• Our contact consent — permission for us to call, text, or email you about your application.
• E-SIGN consent — your agreement to receive disclosures and to sign electronically.
• Lender contact consent — prior express written consent under the Telephone Consumer Protection Act for iLending to contact you, including by automated call or text. This one is optional and is not a condition of using the service.
• Credit-check instruction — your written instruction under the Fair Credit Reporting Act for us to obtain a credit report about you. The check is performed by iSoftpull using Experian, TransUnion, and/or Equifax. It is a soft inquiry and does not affect your credit score.

Who we share it with

The lender. We share the information you provided with iLending so it can decide on your application. We do not share the credit data returned by the prequalification check with the lender unless you give a separate, later consent for that.

Service providers acting for us. Vercel hosts the application, Neon runs the database, Resend sends transactional email, Cloudflare provides our DNS and the Turnstile bot check on the form, and iSoftpull performs the soft credit check.

Legal. We disclose information where the law requires it, or to protect our rights.

We do not sell your personal information.

Social Security numbers

Your Social Security number is encrypted at rest with AES-256-GCM. We delete the full number 30 days after your application is submitted, and 30 days after an unfinished application goes inactive. We keep the last four digits and a keyed hash receipt, which lets us match your record later without holding the number. Your date of birth is also encrypted at rest.

How long we keep it

We keep application data for as long as we need it to service your application and to meet our legal obligations. We keep consent evidence for at least five years: it is what proves what you were shown and what you agreed to.

How we protect it

Sensitive fields are encrypted at rest, and everything travels over an encrypted connection. Our internal console is access-controlled. The application form is protected by a Cloudflare Turnstile bot check. We treat your nonpublic personal information under the privacy and safeguards rules of the Gramm-Leach-Bliley Act.

Your choices

• You can stop our contact at any time: reply STOP to a text, or email or call us using the details below.
• You can revoke the optional lender contact consent at any time: reply STOP to a text from the lender.
• You can ask us for a copy of your information, or ask us to delete it. We will do so except where we are required to keep it — consent evidence, in particular, we must retain.

Where we operate

This service is not offered to residents of every state. The states we do not currently serve are listed on our Licensing & Disclosures page, and we do not accept applications from residents of those states.

Children

This site is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18.

Changes to this policy

If we change this policy, we will change the effective date at the top of this page.

Contact us

Email support@ezautorefi.com or call (929) 460-2044, Mon–Fri 9–6 ET.

Mailing address: 111 Town Square Pl, Ste 1238, Jersey City, NJ 07310