Privacy
This describes what happens to the information you give us and to the information your customers give you.
What we collect when you sign up
The dealership’s name, the web address you asked for, your name, your email address and, if you give one, your phone number. We also record the IP address and browser the request came from, which is the only signal we would have if somebody abused the signup form.
Payment is handled by Stripe on their own page. We receive an identifier for your customer record and your subscription, and never your card number.
What your customers’ information is used for
A shopper who fills in a form on your website becomes a lead in your inbox. That information is yours: it is stored against your dealership only, and no other dealership on this platform can see it.
People are matched on email address or phone number so that the same person contacting you twice is one record rather than two. That is also what makes an opt-out stick — somebody who asks not to be contacted is marked once and stays marked, rather than being reachable through a second record you did not know about.
Who can see what
Every table is separated by dealership at the database level, and the rules are written in terms of who you are rather than in terms of which query was run — so a mistake in our code returns your own data or nothing, never somebody else’s.
Platform staff are deliberately not given a permanent back door into dealership data. Reaching a dealership’s records requires an explicit, recorded grant, and the record of it cannot be removed by the person using it.
The public view of your website is served by a small set of read-only database functions that take a hostname and can only ever return that dealership’s published vehicles. There is no path from a public page to anything else.
Where it lives
In a managed Postgres database and object store in the United States, and on a server we operate. Backups are held by the database provider.
How long we keep it
For as long as your account exists. A signup attempt that never becomes a dealership is kept as a record that money did or did not change hands. Ask us to delete something and we will, unless we are required to keep it for accounting.
Cookies
The dealership websites we host set no tracking or advertising cookies. Signing in to the back office sets a session cookie, which is what keeps you signed in and does nothing else.