Privacy Policy

LotIQ, Inc. (“LotIQ,” “we,” “us,” or “our”) operates a software platform that helps used car dealerships manage their operations, including inventory, customer relationships, sales, and communications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, visit our websites, or interact with communications sent through our service.

This policy applies to dealership personnel who use the LotIQ platform (“Users”) and to consumers who interact with dealerships through LotIQ-powered forms, messages, or other touchpoints (“Consumers”).

2.1 Information You Provide

• Account Information: Name, email address, phone number, and job title when dealership personnel create an account.
• Consumer Application Data: Name, address, phone number, email, and other details submitted through dealership onboarding or application forms.
• Financial Information: Income details, employment information, and other financial data submitted for verification purposes, as directed by the dealership.
• Communications: Messages exchanged between dealership representatives and consumers through our messaging features (SMS, WhatsApp).
• Vehicle Information: VINs, pricing, mileage, photos, and other inventory data entered by dealership personnel.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on the platform, and other interaction data.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session cookies for authentication and analytics cookies for improving our service. See Section 8 for details.

2.3 Information from Third Parties

• Vehicle Valuation Data: Market pricing and condition data from services like Manheim and JD Power, requested by dealership personnel.
• Credit and Verification Data: Reports obtained through authorized third-party providers at the consumer’s and dealership’s request.

• Provide and Operate the Platform: Manage accounts, process applications, facilitate communications between dealerships and consumers, and support dealership operations.
• Communications: Send transactional messages (e.g., verification links, appointment reminders) and facilitate dealership-to-consumer messaging, with consumer consent.
• Improve Our Services: Analyze usage patterns to enhance features, fix bugs, and develop new functionality.
• Security and Fraud Prevention: Detect and prevent unauthorized access, abuse, and fraudulent activity.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

When consumers submit an application through a LotIQ-powered form, they are asked to provide express written consent to receive calls or text messages from the dealership. This consent is:

• Voluntary: Consent is not a condition of purchase or service.
• Recorded: We capture the consent timestamp, IP address, and method (web form) for compliance purposes.
• Revocable: Consumers may reply STOP to any message to immediately opt out of future messages.
• Transparent: The consent checkbox clearly describes the types of messages the consumer may receive.

Standard message and data rates may apply. For help, consumers may reply HELP to any message to receive support information.

We do not sell your personal information. We may share it with:

• Dealership Partners: Consumer application data is shared with the specific dealership to which the consumer applied. Each dealership is responsible for their own use of consumer data in accordance with applicable laws.
• Service Providers: Third-party vendors who assist in operating our platform (hosting, communication delivery, analytics, payment processing) under contractual obligations to protect your data.
• Third-Party Integrations: Valuation providers, credit bureaus, and other services activated by dealership personnel. Data is shared only as directed by the dealership.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.

We implement industry-standard security measures to protect your information:

• Encryption of sensitive data at rest and in transit (TLS 1.2+).
• PII encryption for sensitive fields such as Social Security Numbers using AES-256 encryption.
• Row-level security (RLS) ensuring strict multi-tenant data isolation between dealerships.
• Role-based access controls (RBAC) limiting data access to authorized personnel.
• Regular security assessments and monitoring.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. When data is no longer needed:

• Account data is retained while the account is active and for a reasonable period thereafter.
• Consumer application data is retained by the dealership in accordance with their retention policies and applicable law.
• Communication records are retained per the dealership’s configuration and applicable regulatory requirements.
• Usage analytics are retained in aggregate, de-identified form.

We use the following types of cookies:

• Essential Cookies: Required for authentication and core platform functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how the platform is used so we can improve it. These collect aggregated, anonymized data.

We do not use advertising or cross-site tracking cookies.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Opt-Out of Communications: Reply STOP to any text message or contact us to opt out.
• Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at privacy@lot-iq.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared.
• Right to delete personal information.
• Right to opt out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination for exercising your rights.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. We will notify Users of material changes via email or through the platform. The “Last updated” date at the top of this page indicates when the policy was last revised.

If you have questions about this Privacy Policy or our data practices, please contact us: