This Privacy Policy explains how DealerPost Pro (“DealerPost Pro,” “we,” “us”) collects, uses, shares, and protects information when you visit our website, create an account, or use our service (the “Service”). By using the Service, you agree to the practices described below.
1. Information We Collect
1.1 Dealer Account Information
When you register or use the Service as a dealer, we collect information you provide, including:
- Name, email address, password (stored hashed), dealership name, phone number, and business address;
- Billing information (card data is collected and stored by Stripe, our payment processor — we do not store full card numbers);
- Authentication tokens and account settings;
- Credentials or tokens you voluntarily connect (e.g., Facebook Page access tokens, Google Maps Place IDs).
1.2 Dealer Content
You upload or generate content through the Service, including:
- Vehicle inventory data (VIN, make/model/year, price, photos, descriptions, URLs to third-party listings);
- Post copy, captions, translations, and photo overlays;
- Logos and branding assets;
- Customer comments and direct messages received through connected platforms (for example, Facebook comments and Messenger conversations handled by Smart Inbox).
1.3 End-Customer Information (processed on behalf of dealers)
When your customers interact with posts, comments, or messages published through the Service, we may process:
- Public profile data exposed by the platform (name, public profile picture);
- Message content and timestamps;
- Phone numbers or email addresses the customer voluntarily shares in a conversation;
- Vehicle interest signals the dealer records.
We process this information solely on the dealer’s instructions, to provide the Service.
1.4 Automatically Collected Data
- Device and browser information, IP address, approximate location derived from IP;
- Log data (pages visited, feature usage, errors, timestamps);
- Cookies and similar technologies used for authentication, session management, and basic analytics.
2. How We Use Information
- To provide, operate, and maintain the Service;
- To generate AI output (post copy, translations, photo text, Smart Inbox reply suggestions) using our third-party AI sub-processor;
- To process payments, manage subscriptions, and send billing-related notices;
- To authenticate users, prevent fraud and abuse, enforce our Terms of Service, and secure the platform;
- To respond to support inquiries and communicate service updates;
- To monitor performance, understand how the Service is used, and improve it (aggregated/anonymized analytics, including masked session replays — see Section 7);
- To comply with legal obligations and respond to lawful requests.
We do not use customer content or end-customer messages to train AI models. Our AI sub-processor (Anthropic) likewise does not use API inputs or outputs to train its models by default under its commercial terms.
3. Legal Bases (EU/UK users, if applicable)
Where the GDPR applies, we rely on the following legal bases: contract performance (delivering the Service); legitimate interests (security, abuse prevention, improvement); legal obligation (billing records); and consent, where required.
4. How We Share Information
We share information only as described below. We do not sell personal information.
4.1 Sub-Processors
We share information with the following third-party vendors who process data on our behalf under contract:
| Vendor | Purpose | Data |
|---|---|---|
| Anthropic PBC | AI model inference (post copy, translations, inbox replies) | Prompt inputs containing vehicle and conversation content |
| Stripe, Inc. | Subscription billing and payment processing | Name, email, payment method, billing address |
| Cloudflare, Inc. (R2) | Object storage for photos and media | Images, videos, overlays |
| Supabase, Inc. | Authentication and database hosting | Account credentials, dealer data, application records |
| Meta Platforms, Inc. | Publishing posts, receiving comments/DMs (when you connect your Page) | Page tokens, post content, public comment data |
| Google LLC | Places and Maps data for dealer address/hours | Place ID, limited location lookup data |
| Sentry (Functional Software, Inc.) | Error monitoring and diagnostics | Crash reports, user identifiers, stack traces |
| Microsoft Corporation (Clarity) | Usage analytics, session replay, and heatmaps to improve the Service | Interaction data (clicks, scrolls, page views), device/browser info; on-screen text and inputs are masked |
| Creatomate | Video rendering | Source images, text, render metadata |
A current list of sub-processors is available upon request at privacy@dealerpostpro.com.
4.2 Between Dealers and Their Customers
Content you publish (Facebook posts, Marketplace listings, replies sent through Smart Inbox) is visible or delivered to the platform or recipient you select. We do not control the retention or visibility of content once it leaves our platform.
4.3 Legal & Safety
We may disclose information to comply with law, respond to valid legal process, protect the rights, property, or safety of DealerPost Pro, our users, or the public, or investigate fraud or abuse.
4.4 Business Transfers
If we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction. We will notify affected parties as required by law.
5. Data Retention
- Account and billing data — retained for the life of your account and for a reasonable period thereafter to comply with tax, accounting, and legal obligations.
- Posts, inventory, and media — retained until you delete them or close your account; deleted items may persist in encrypted backups for a limited period.
- Smart Inbox conversation history — retained for up to 90 days, unless earlier deletion is requested or required.
- Logs and error diagnostics — typically retained for 30–90 days.
- Cancelled accounts — data is retained briefly after cancellation to allow reactivation or export, then deleted on a rolling basis.
Shorter or longer retention may apply where required by law or for legitimate dispute-resolution purposes.
6. Your Privacy Rights
6.1 California Residents (CCPA/CPRA)
California residents have the right to:
- Know what personal information we collect, use, and share;
- Request access to or a copy of that information;
- Request correction of inaccurate information;
- Request deletion of personal information;
- Limit the use of sensitive personal information;
- Opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information for cross-context behavioral advertising);
- Be free from discrimination for exercising these rights.
To exercise these rights, email privacy@dealerpostpro.com. We will respond within 45 days (with a possible 45-day extension). We may verify your identity before responding. You may designate an authorized agent to make a request on your behalf.
If you are an end customer of a dealer that uses DealerPost Pro, and your request concerns your interaction with that dealership’s content or communications, please contact the dealer directly. The dealer is the “business” that controls that data. We will cooperate with the dealer to help respond to your request.
6.2 Other U.S. State Rights
Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others as they come into force) have comparable rights. Contact privacy@dealerpostpro.com to exercise them.
6.3 EU/UK Residents (GDPR)
Where the GDPR applies, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. We do not currently target the EU/UK; contact us if you believe a request applies to you.
7. Cookies & Tracking
We use cookies and local storage to:
- Keep you signed in (authentication session);
- Remember account preferences (theme, UI settings, dealer profile cache);
- Maintain CSRF and security tokens;
- Collect basic operational analytics.
Session replay and heatmaps. On our production application we use Microsoft Clarity, a usage-analytics tool that records how the interface is used (clicks, scrolls, page navigation) and reconstructs anonymized session replays and heatmaps so we can find and fix usability problems. Text you type and on-screen content are masked in these recordings. Clarity uses cookies and similar technologies as described in Microsoft’s Privacy Statement. We use this data solely to improve the Service — not for advertising.
We do not use third-party advertising cookies or cross-site tracking pixels on the application, and we do not permit our analytics providers to use data collected from the Service for their own advertising purposes. You can block cookies in your browser, but this may affect the Service’s functionality.
8. Security
We apply reasonable administrative, technical, and physical safeguards, including:
- TLS in transit and at-rest encryption for storage and backups;
- Encryption of sensitive tokens (for example, Facebook Page access tokens) at the application layer;
- Access controls that scope every database query to the owning dealer;
- Rate limiting, bot protection, and continuous error monitoring.
No system is perfectly secure. In the event of a data breach, we will notify affected parties as required by applicable law.
9. Children’s Privacy
The Service is intended for business users aged 18 or older and is not directed to children under 13 (or under 16 in jurisdictions where that higher age applies). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@dealerpostpro.com and we will delete it.
10. International Transfers
DealerPost Pro and some of its sub-processors are located in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored, and processed in the U.S. and other jurisdictions where our sub-processors operate.
11. Third-Party Links & Platforms
The Service links to and integrates with third-party platforms (Meta/Facebook, Instagram, Google, Stripe, and others). Their privacy practices are governed by their own policies. We are not responsible for their content or practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last Updated” date, and, for material changes, provide additional notice (email or in-app banner). Your continued use of the Service after the effective date constitutes acceptance.
13. Facebook Data Deletion
DealerPost Pro connects to Facebook Pages on behalf of licensed motor-vehicle dealers. If you have authorized DealerPost Pro to access a Facebook Page and you want us to delete the data we have received from Facebook about you (including Page access tokens, public comment and message content we have stored, and any associated metadata), you can request deletion by one of the methods below.
13.1 Disconnect from Facebook
The fastest way to stop all future data collection is to revoke DealerPost Pro’s access directly from Facebook:
- Go to Facebook Settings → Business Integrations.
- Locate DealerPost Pro in the list.
- Click Remove to revoke the access token.
Once the token is revoked, we can no longer retrieve new data from your Page.
13.2 Request Deletion of Stored Data
To have previously stored Facebook-derived data deleted from our systems, send an email to privacy@dealerpostpro.com with the subject line “Facebook Data Deletion Request” and include:
- The Facebook Page name and ID (if known);
- The dealership or account the Page was connected to;
- The email address associated with your DealerPost Pro account, if any.
We will confirm the request within 5 business days and complete deletion within 30 days, subject to legal retention obligations. Deletion includes:
- Stored Page access tokens (encrypted at rest);
- Inbox records of comments and Messenger conversations we received from your Page;
- Any cached public profile data of users who interacted with your Page through our Service.
Content that you or your customers published directly on Facebook remains under Meta’s control and must be deleted through Facebook’s own tools. Aggregated/anonymized analytics and records required for tax, billing, or legal compliance may be retained as permitted by law.
14. Contact Us
Privacy questions and rights requests: privacy@dealerpostpro.com
Support: support@dealerpostpro.com
Legal notices: legal@dealerpostpro.com