Privacy Policy

About your dealership.The email address you sign in with, your lot’s name, postal address, phone number, opening hours, website and the policies you write for us to quote. Billing status and plan. Nothing about the dealership is collected that you did not type.

About your customers. Whatever the enquiry contains — usually a name, an email address, a phone number and the vehicle they asked about — together with the messages in the conversation: what they wrote, what we replied in your name, and when each happened.

Operational records. Sign-in times, whether a message was delivered or bounced, and error logs. We do not use advertising cookies or third-party analytics.

To answer your customers, which is the service. To show you the conversation we had on your behalf. To bill you. To keep the service working and secure, and to help you when you ask.

We look at conversations to check the quality of the replies and when you raise a problem. That means a person reading a real customer’s message, so we say it plainly rather than burying it. We do not sell any of it and we do not use it to advertise to anyone.

Your customers’ data is yours. You decide why it is collected and what happens to it, which makes you the data controller. We process it on your instructions to provide the service, which makes us your data processor under the GDPR and equivalent laws.

In practice:

— If one of your customers asks you for a copy of their data, or asks you to delete it, tell us and we will do it. — If a customer asks us directly, we will point them to you, because it is not ours to hand over. — We will not use your customers’ data for any purpose of our own beyond running and securing the service. — If we are compelled by law to disclose something, we will tell you unless we are forbidden to.

For your own account data — your email address, your lot’s details, your billing — we are the controller, and the lawful basis is performing our contract with you.

These are our sub-processors. Each is under contract to process the data only to provide their service to us. We will update this page before adding another.

For as long as your account is open. Closing your account from the Account page deletes your lot, every lead, every message, every inbound address and your sign-in, and we keep no copy.

Two exceptions, both narrow. An email address or phone number that has replied STOP is kept on a do-not-contact list, because forgetting it would mean messaging somebody who asked us not to. And encrypted backups roll off on their own schedule — they are not reached into, and nothing is restored from them except to recover the service after a failure.

Ask us for a copy of everything we hold for your dealership and we will send it. See the Terms for how an account with a billing history is closed.

Traffic is encrypted in transit. The database is not reachable from the public internet. Sign-in is by a single-use emailed link or, if you set one, a password stored only as a bcrypt hash — we cannot read it, and a stolen copy of the table does not give anyone your password. Backups are encrypted before they leave the machine. Access to production is limited to the people who run the service.

If a breach affects your data, we will tell you without undue delay and with what we know — including what we do not yet know.

The database and the worker that answers leads are in Germany. The web application runs in the EU. Our email, model and messaging providers process data in the EU and the United States.

Where data leaves the EEA or the UK, the transfer is covered by the European Commission’s Standard Contractual Clauses (and the UK Addendum where it applies) in our agreements with those providers.

Data-protection questions, a request from one of your customers, or anything else about this policy: support@getlotkeeper.com.