Privacy Policy

3.0 Dealership and Customer Data

Dealer Data One stores and processes data belonging to your dealership. Depending on the systems you connect, this may include:

• Sales, inventory, and vehicle records
• Lead and CRM records, including consumer contact information
• Service, F&I, and fixed-operations records
• Marketing, advertising, and website performance data
• Business listing and reputation data

Collectively, this is referred to in this policy as Dealership Data. Dealership Data includes personal information relating to your customers and prospects where your connected systems contain it.

Your dealership owns its Dealership Data. Dealer Data One does not acquire ownership of it by storing, processing, or analyzing it. We hold it to provide the Services you have asked us to provide, and for no other purpose.

We do not sell Dealership Data. We do not sell, rent, or license it for money or other valuable consideration. We do not provide it to data brokers or aggregators. We do not combine it with other customers' data to build benchmarks, market reports, or products sold to third parties. We do not use it to train shared, public, or generalized AI models.

You may request export or deletion of your Dealership Data at any time, without providing a reason and without waiting for your subscription to end. See Section 10.

3.5 Cookies and Similar Technologies

We use cookies and similar technologies on our website and within the Services for the following purposes:

• Strictly necessary — authentication, session management, security, and load balancing. These cannot be disabled without breaking the Services.
• Analytics — understanding how visitors find and use our website and product. We use Google Analytics and Google Tag Manager for this purpose.
• Business visitor identification — we use third-party services, including Apollo.io and Happierleads, that attempt to identify the business or organization associated with a website visit so that our team can follow up with businesses that have shown interest in our product. These services may process IP addresses and device identifiers and may match them against their own databases.
• Preferences — remembering settings such as your dashboard layout or selected rooftop.

These technologies apply to visitors to our marketing website. They are separate from, and do not process, the Dealership Data held within the Control Center platform.

Most browsers let you refuse or delete cookies through their settings. Disabling strictly necessary cookies will prevent you from signing in. Our website honors the Global Privacy Control (GPC) signal where transmitted.

5.1 Google User Data — Limited Use

Dealer Data One's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, with respect to data obtained through Google APIs — including Google Analytics, Google Ads, Google Business Profile, and Google Search Console:

• We use the data only to provide or improve user-facing features that are prominent in the Services, and only in ways users have consented to.
• We do not transfer the data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets — and in that last case, only with notice to affected users.
• We do not use the data to serve advertising, including retargeting, personalized advertising, or interest-based advertising.
• We do not allow humans to read the data unless we have obtained the user's affirmative agreement to view specific data, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and de-identified for internal operations.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine learning models.

10.1 Retention

We retain Dealership Data for as long as your account is active, and afterward only as long as necessary to meet contractual or legal obligations. We do not retain Dealership Data indefinitely for our own purposes.

10.2 Export on request

You may request a full export of your Dealership Data at any time, for any reason or no reason, at no charge. Exports are provided in a structured, machine-readable format (CSV or JSON). We will fulfill export requests within thirty (30) days of a verified request. You do not need to be cancelling to request an export, and requesting one does not affect your subscription.

10.3 Deletion on request

You may request deletion of your Dealership Data at any time. We will delete it from our active production systems within thirty (30) days of a verified request and confirm in writing when deletion is complete. Two narrow exceptions apply, and they are the only ones:

• Backups. Encrypted backups are retained on a rolling schedule and are overwritten in the normal course. Data in backups is not restored to active systems, is not accessible to our staff for operational use, and is purged within ninety (90) days of the deletion request.
• Legal obligation. Where a law, regulation, subpoena, or litigation hold requires us to retain specific records, we will retain only what is required, only for as long as required, and will tell you that we have done so and why.

We do not treat potential future usefulness as grounds to retain data after a deletion request.

10.4 On termination

When your subscription ends, you have sixty (60) days to request an export before deletion begins. After that window, Dealership Data is deleted on the schedule described in Section 10.3. We will not withhold your data over a billing dispute.

10.5 Consumer requests received by your dealership

Where your customers exercise rights against your dealership under applicable privacy law, we will assist you in locating, exporting, or deleting that individual's records within our systems, at no additional charge.

10.6 How to make a request

Submit export or deletion requests to legal@dealerdata.one from an email address associated with an authorized account administrator. We may take reasonable steps to verify identity and authority before acting, and will not use verification as a means of delay.

We do not sell personal data for money or other valuable consideration. Certain disclosures described in Sections 3.5 and 11.1 may constitute “sharing” or a “sale” as those terms are defined under some state privacy laws. Your rights in respect of those disclosures are described in Section 13.1.

11.2 Text Messaging (SMS) and Mobile Information

If you provide your mobile phone number and consent to receive text messages from Dealer Data One, we use that number only to contact you about your inquiry, demo requests, scheduling, account notifications, and customer support. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or reply HELP for assistance. Consent to receive text messages is not a condition of any purchase.

We do not share or sell consumer personal information, including mobile phone numbers, to third parties or affiliates for marketing or lead generation purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared only with service providers that help us deliver our messaging services (such as our messaging platform), and those providers may use it solely to provide that service.

Mobile phone numbers and SMS opt-in data collected through our website forms are never included in the advertising platform measurement uploads described in Section 11.1.

To stop receiving text messages, reply STOP to any message or contact us at legal@dealerdata.one.

13.1 U.S. State Privacy Rights

Depending on your state of residence, you may have the right to:

• Know what personal information we collect, use, and disclose
• Request access to, or a copy of, that information
• Request correction or deletion of that information
• Opt out of the “sale” or “sharing” of that information for targeted advertising
• Not be discriminated against for exercising any of these rights

Opt out of sale or sharing. To opt out of the business visitor identification described in Section 3.5, contact legal@dealerdata.one with the subject line “Do Not Sell or Share.” We will process the request within thirty (30) days and confirm in writing. We also honor the Global Privacy Control (GPC) signal as a valid opt-out request where transmitted by your browser.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may ask for written proof of the agent's authority.

If you are a customer of a dealership that uses our Services, your relationship is with that dealership, which controls your information. We will refer your request to them and will assist them in fulfilling it. You may also contact us directly at the address above and we will help route the request.