Privacy Policy

1. Overview

This Privacy Policy describes how DnD Solutions ("Company," "we," "us," or "our"), the operator of DealerSpace, collects, uses, stores, shares, and otherwise processes information in connection with your use of the DealerSpace platform and website ("Service"). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy in full, and you consent to the data practices described herein.

2. Information We Collect

We collect information across several categories depending on how you interact with the Service:

Account and Business Information

• Dealership or business name, address, and contact details
• Account owner name and email address
• Billing information and payment method data (processed via third-party payment processor; we do not store raw card data)
• Subscription tier and billing history
• Custom domain or subdomain associated with your storefront

Staff and User Account Data

• Full name and email address of platform users
• Encrypted and hashed passwords
• User roles and permission levels
• Login timestamps and session history
• IP addresses associated with account activity
• Device type, browser, and operating system

Dealership Operational Data

• Vehicle inventory records including VINs, make, model, year, trim, mileage, condition, pricing, and status
• Vehicle photos, documents, and attachments you upload
• Lead and customer records including names, email addresses, phone numbers, physical addresses, and inquiry details
• Deal records including financing details, trade-in information, and deal terms
• Task and project records created within the platform
• Notes, comments, and any other content you enter into the platform

Communications Data (Integration Tiers)

• Email content and metadata transmitted through the platform
• SMS and text message content and metadata (if SMS integration is active)
• Third-party integration access tokens and connected account credentials

Public Storefront Data

• Published inventory listings and associated media
• Dealership branding assets (logos, colors, images) uploaded by you
• Contact form submissions from visitors to your public storefront

AI Module Data (If Subscribed)

• Queries and prompts submitted to AI features
• AI-generated responses and outputs
• Data provided as context to AI models for analysis
• Vector embeddings generated from your data for AI retrieval

Automatically Collected Technical Data

• IP addresses and approximate geographic location
• Browser type, version, and operating system
• Device identifiers and hardware information
• Pages visited, features accessed, and session duration
• Clickstream and interaction data
• Error logs, crash reports, and diagnostic data
• API request logs and response metadata
• Cookies, session tokens, and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service and its features
• Process account registrations, subscriptions, and billing
• Authenticate users and maintain account security
• Respond to support requests, inquiries, and communications
• Enforce these Terms of Service and our Acceptable Use policy
• Monitor platform performance, detect errors, and improve the Service
• Conduct analytics and research to develop new features and products
• Send service-related notifications, billing communications, and product updates
• Send marketing and promotional communications (you may opt out of these)
• Train, improve, and develop machine learning models and AI systems
• Comply with applicable laws, regulations, and legal processes
• Exercise or defend legal rights and claims
• Any other purpose disclosed to you at the time of collection or for which you provide consent

4. Data Ownership and Our Rights

By using the Service, you grant DnD Solutions a perpetual, irrevocable, worldwide, royalty-free license to use, store, process, copy, modify, distribute, and create derivative works from any data, content, or information you submit to or generate through the Service ("Your Data"), for any purpose, including but not limited to operating the Service, improving our products, developing AI and machine learning models, and conducting business analytics.

We reserve the right to share, sell, license, or otherwise transfer Your Data to third parties, including but not limited to data brokers, analytics providers, business partners, and successors in interest, at our sole discretion. We will store Your Data for as long as we deem necessary for business, legal, or operational purposes, which may be indefinitely, even after your account is closed or your subscription is cancelled.

You acknowledge and agree that we are not obligated to return Your Data to you upon termination unless separately agreed in writing.

5. Data Sharing and Disclosure

We may share your information with:

• Service providers and subprocessors — Third parties that assist us in operating the Service, including cloud hosting (Vercel, Supabase), payment processors (Stripe), email delivery services, SMS providers, CDN providers, and analytics platforms. These parties process data on our behalf under their respective terms.
• AI and machine learning providers — Data may be transmitted to AI model providers (including but not limited to Google Gemini) for processing when you use AI-powered features.
• Third-party integrations — If you connect third-party services (e.g., CRMs, communication platforms, listing services), data may be shared with and processed by those services per their own privacy policies.
• Business transfers — In connection with any merger, acquisition, sale of assets, or other business transaction, Your Data may be transferred to a third party. You will be notified via the email on your account of any such change in ownership.
• Commercial data sharing and sale — As noted in Section 4, we reserve the right to sell or license your data to third parties for commercial purposes.
• Legal compliance — We may disclose data when required by law, subpoena, court order, or government authority, or when we believe disclosure is necessary to protect our rights or the safety of any person.

6. Data Security

We implement commercially reasonable technical and organizational security measures to protect Your Data from unauthorized access, alteration, disclosure, or destruction. These measures include multi-tenant data isolation using row-level security, encrypted data transmission (TLS), hashed credential storage, and access controls.

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and disclaim any liability for unauthorized access resulting from circumstances beyond our reasonable control. You are responsible for maintaining the security of your account credentials.

7. Cookies and Tracking Technologies

We use cookies, session tokens, and similar tracking technologies to maintain your authenticated session, remember your preferences, analyze platform usage, and support security features. By using the Service, you consent to our use of these technologies. You may configure your browser to refuse cookies, but doing so may impair your ability to use the Service.

8. Data Retention

We retain Your Data for as long as your account is active and for as long thereafter as we determine is necessary or useful for business, legal, tax, audit, or operational purposes. This may mean your data is retained indefinitely even after account closure. Anonymized or aggregated data derived from your usage may be retained and used without limitation.

9. Data Deletion Requests

If you wish to request deletion of your personal data and account, you must submit a written request via email to dan@dndsolutions.com. Deletion requests submitted through any other channel will not be considered effective until confirmed in writing by us.

We will use commercially reasonable efforts to acknowledge your request within one (1) standard business week and to complete the deletion process within thirty (30) business days of receipt. Please note:

• Data deletion may not be possible for data we are required to retain for legal, tax, fraud prevention, or regulatory compliance purposes.
• Anonymized or aggregated data derived from your account that does not identify you as an individual may be retained indefinitely.
• Data that has been shared with or sold to third parties prior to your deletion request is subject to those third parties' data practices, which are outside our control.
• Submitting a deletion request does not automatically cancel your subscription — cancellation must be requested separately per the process described in our Terms of Service.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act ("CCPA") regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions. See Section 9 for our deletion request process.
• Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information to third parties. To exercise this right, email us at dan@dndsolutions.com with the subject line "Do Not Sell My Personal Information." We will process your request within 15 business days.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA rights request, contact us at dan@dndsolutions.com. We may need to verify your identity before processing your request.

11. Children's Privacy

The Service is intended for use by businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

12. Third-Party Services

The Service integrates with and relies upon various third-party services. Your use of third-party integrations or connected services is also governed by those parties' own terms and privacy policies. We are not responsible for the data practices of any third party. Current third-party services that may process your data include, but are not limited to: Supabase (database infrastructure), Vercel (hosting), Stripe (payments), Google (AI services), and communication providers.

13. Marketing Communications and Opt-Out

We may send you promotional emails, product updates, and marketing communications from us or our third-party partners. You may opt out of receiving promotional emails at any time by following the unsubscribe instructions in the email or by contacting us at dan@dndsolutions.com. Please note that opting out of promotional communications does not remove you from transactional or service-related communications (billing notices, account updates, security alerts), which we may continue to send regardless of your marketing preferences.

We may from time to time disclose your contact information to direct marketing companies for marketing purposes. If you wish to opt out of having your information shared with third-party direct marketers, contact us at dan@dndsolutions.com with the subject line "Direct Marketing Opt-Out."

We may also seek to update your information in our records through third-party services that provide updated contact details, and we may use this information to enhance our services or marketing efforts.

14. Changes to This Policy

We reserve the right to update or replace this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the most recent revision. We may notify you of material changes via email or in-platform notice where practicable. Your continued use of the Service after any modification constitutes your acceptance of the revised Policy.

15. Contact Us

For privacy-related inquiries, data deletion requests, or any questions regarding this Policy, please contact us at: dan@dndsolutions.com