Privacy Policy

KYTConnect, Inc. ("KYTConnect," "we," "our," or "us") provides a digital vehicle title management platform that integrates with state motor vehicle systems. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, platform, APIs, and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

We collect information in the following categories:

Account Information. When you create an account, we collect your name, email address, phone number, organization name, and job title. Government agency users may also provide an agency identifier or employee ID.

Vehicle Title Data. Through your use of the platform, we process vehicle identification numbers (VINs), title numbers, owner names, lien information, registration data, and other title-related records as provided by integrated state systems.

Identity Verification Data. To comply with state regulations, we may collect driver's license numbers, state-issued ID information, and verification results from state motor vehicle databases. This data is used solely for identity verification and is not retained beyond the verification window.

Payment Information. If you subscribe to a paid plan, our third-party payment processor collects billing details including credit card numbers and billing addresses. We do not store full payment card numbers on our servers.

Usage Data. We automatically collect information about how you interact with our Services, including IP addresses, browser type, device identifiers, pages visited, features used, timestamps, and referring URLs.

Communications. When you contact us via email, our contact form, or support channels, we retain the content of those communications along with your contact details.

We use collected information for the following purposes:

Service Delivery. To provide, maintain, and improve the KYTConnect platform, including processing title transactions, verifying vehicle records, and facilitating title transfers between parties.

Identity and Fraud Prevention. To verify user identities as required by state motor vehicle regulations, detect fraudulent title activity, and maintain the integrity of title records.

Account Management. To manage your account, process payments, send service-related notifications, and provide customer support.

Security and Compliance. To maintain audit logs, monitor for unauthorized access, comply with legal obligations, and respond to law enforcement requests as required by applicable law.

Analytics and Improvement. To analyze usage patterns, diagnose technical issues, and improve the functionality and performance of our Services. We use aggregated, de-identified data for these purposes whenever possible.

Communications. To send you important updates about the Services, respond to your inquiries, and, with your consent, send marketing communications about new features or offerings.

We do not sell your personal information to third parties. We share information only in the following circumstances:

State Motor Vehicle Agencies. Vehicle title data is shared with state motor vehicle systems (such as Kentucky's county clerk offices and MVL) as necessary to process title transactions. This sharing is governed by our data-sharing agreements with each state agency.

Service Providers. We engage trusted third-party providers for hosting, payment processing, email delivery, analytics, and customer support. These providers are contractually obligated to use your data only as directed by us and in accordance with this Privacy Policy.

Legal Compliance. We may disclose information when required by law, subpoena, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described here.

With Your Consent. We may share information for purposes not described in this policy with your explicit consent.

We implement industry-standard security measures to protect your information:

Encryption. All data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3. Encryption keys are managed through a dedicated key management service with automatic 90-day rotation.

Access Controls. We enforce role-based access controls, multi-factor authentication for administrative access, and principle of least privilege across our infrastructure.

Monitoring. Our systems are continuously monitored for unauthorized access attempts. All access to title records is logged in an immutable audit trail.

Infrastructure. Our platform runs on SOC 2 Type II certified cloud infrastructure with network segmentation, intrusion detection, and regular vulnerability assessments.

Incident Response. We maintain a documented incident response plan. In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with applicable law.

For more details about our security practices, visit our Security page.

We retain your information for as long as your account is active or as needed to provide you with our Services. Specific retention periods are as follows:

Account Data. Retained for the duration of your account. Upon account deletion, personal data is purged from active systems within 30 days. Backup copies are removed within 90 days.

Vehicle Title Records. Title transaction records are retained in accordance with state record-keeping requirements, which typically require a minimum retention period of 5-7 years depending on the jurisdiction.

Audit Logs. Access and transaction logs are retained for a minimum of 7 years to meet compliance obligations.

Identity Verification Data. Verification results are retained for the minimum period required by applicable regulations. Source documents (e.g., license images) are deleted within 24 hours of successful verification.

Usage Data. Aggregated analytics data is retained indefinitely. Individual usage records are purged after 24 months.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access. You may request a copy of the personal information we hold about you.

Correction. You may request correction of inaccurate or incomplete personal information.

Deletion. You may request deletion of your personal information, subject to legal retention requirements. Note that vehicle title records maintained on behalf of state agencies may be subject to separate retention rules.

Portability. You may request a copy of your data in a structured, machine-readable format.

Objection. You may object to certain processing activities, including direct marketing communications.

Withdrawal of Consent. Where processing is based on your consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at privacy@kytconnect.ky.gov. We will respond to verified requests within 30 days.

We use cookies and similar technologies to operate our Services:

Essential Cookies. Required for authentication, session management, and security. These cannot be disabled while using the platform.

Analytics Cookies. Used to understand how our Services are used and to improve performance. You may opt out of analytics cookies through your browser settings or our cookie preference center.

We do not use advertising cookies or tracking pixels. We do not participate in ad networks or cross-site tracking programs.

KYTConnect processes vehicle title data on behalf of state motor vehicle agencies. When acting as a data processor for government agencies:

Government Data Agreements. Our handling of state agency data is governed by specific data-sharing and processing agreements with each agency, which may impose additional requirements beyond this Privacy Policy.

CJIS Compliance. Where applicable, we adhere to Criminal Justice Information Services (CJIS) Security Policy requirements for the handling of criminal justice information.

Public Records. Certain vehicle title information may be considered a public record under state law. The availability of such records is determined by the applicable state's public records statutes, not by this Privacy Policy.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@kytconnect.ky.gov.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we will also provide notice via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

KYTConnect, Inc. 300 Mero Street Frankfort, KY 40601

Email: privacy@kytconnect.ky.gov Phone: (502) 564-1257

For security-related concerns, contact security@kytconnect.ky.gov.