Privacy Policy

This Privacy Policy explains how DealerOS handles information in connection with the Service. It applies to account holders, their users, and the records they manage in DealerOS.

We collect the following categories of information:

• Personal information — name, email, phone, and role of account users.
• Company information — dealership name, address, tax details, and branches.
• Customer information — records you create about your dealership’s customers.
• Vehicle information — inventory, specifications, history, and documents.
• Financial information — sales, payments, and billing details (we never store full card numbers; payments are handled by our provider).
• Usage analytics — how the Service is used, to improve features and reliability.
• Cookies — small files used for sessions, preferences, and analytics (see our Cookie Policy).
• Device information — browser, operating system, and device type.
• Log data — IP address, access times, and actions, recorded for security and audit purposes.

We use information to:

• Provide, operate, secure, and improve the Service.
• Authenticate users and enforce role-based permissions.
• Process subscriptions, billing, and payments.
• Maintain audit logs and detect or prevent fraud and abuse.
• Communicate with you about your account, security, and service updates.

Data is stored with reputable cloud infrastructure providers. Information is encrypted in transit (TLS) and protected at rest. Passwords are hashed using a strong, salted algorithm and never stored in plain text. Access is governed by role-based permissions and multi-tenant isolation. See our Data Processing & Security Policy for details.

Subject to applicable law, you may request access to, correction of, or deletion of personal information, and you may object to or restrict certain processing. Requests can be made to our support team and will be handled in accordance with applicable regulations.

We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Upon account termination, business data is retained for a limited grace period to allow reactivation and export, after which it is deleted or anonymised in line with our retention schedule and legal requirements.

Your information may be processed in countries other than your own. Where information is transferred internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.

Privacy questions can be sent to support@dealeros.com.