Privacy Policy

This Privacy Policy explains how CarPal Technologies LLC (“CarPal”, “we”, “us”, or “our”) collects, uses, and safeguards information in connection with DealerIQ (the “Service”), an operational workflow coordination platform built for automotive dealerships.

DealerIQ is designed to help dealership teams coordinate vehicle delivery scheduling, recon status, finance task tracking, and related operational signals. It is not a finance, lending, insurance, registration, or legal documentation platform, and it is not intended to serve as a system of record for sensitive customer documents.

We collect a limited amount of information necessary to operate the Service, following a principle of data minimization. The categories below describe what may be processed through DealerIQ.

Dealerships and their authorized users may enter operational information into the Service, including:

• vehicle records (stock number, VIN, year, make, model);
• basic customer reference information (name, scheduled delivery time);
• workflow notes, task statuses, checklist updates, and delivery readiness signals;
• employee names, roles, and assignments inside the dealership workspace.

Dealerships are responsible for what they choose to input. See “Sensitive Information Restrictions” below for what should not be uploaded.

When users interact with the Service, we may automatically collect operational metadata such as authentication events, session timestamps, IP addresses, browser/user-agent information, and application telemetry needed to keep the platform secure and functional.

We use information solely for operational purposes, including:

• providing and maintaining the Service;
• coordinating delivery readiness and workflow visibility across dealership teams;
• generating operational reminders, status updates, and audit logs;
• securing accounts and preventing abuse;
• improving reliability, usability, and platform performance.

DealerIQ may use AI-assisted features to surface workflow insights, reminders, bottleneck detection, and operational recommendations.

• AI-generated suggestions are advisory only.
• AI does not make legal, finance, lending, registration, employment, insurance, or compliance decisions.
• Dealership personnel remain responsible for all operational and business decisions.

We design DealerIQ to collect only the information needed for operational coordination. Dealerships are encouraged to limit the data entered into the Service to what is required for delivery readiness and workflow visibility.

DealerIQ is not intended to store sensitive financial, lending, insurance, or government identification information. Dealerships should avoid uploading:

• Social Security Numbers or other government IDs;
• banking, ACH, or payment account details;
• credit applications or lender documents;
• driver license images or scans;
• insurance policy documents containing personal identifiers;
• signed legal deal documents or other regulated paperwork.

DealerIQ is not the system of record for dealership legal documentation.

Access to information inside the Service is governed by role-based permissions configured by each dealership. Users may only access information authorized by their dealership role.

• Dealerships control their own user permissions.
• Dealership administrators are responsible for managing employee access, offboarding, and role assignments.

The Service records timestamps, task updates, status changes, audit log entries, and delivery progress signals so dealership teams can coordinate work and verify delivery readiness.

This functionality is intended for operational coordination, workflow transparency, and delivery readiness management — not for covert surveillance, individual productivity scoring, or employee monitoring.

We share information only with a limited set of operationally necessary service providers that help us run the Service, including providers for:

• cloud hosting and infrastructure;
• authentication and identity;
• application analytics and error monitoring;
• transactional messaging and notifications.

These providers are bound to use information only to deliver services to us.

CarPal Technologies LLC does not sell dealership customer data or end-user personal information. We do not rent or trade personal information for advertising purposes.

Operational data may be retained for a limited period for platform functionality, security, and audit purposes.

• Dealerships may request deletion of certain operational records.
• Archived or backup data may persist temporarily after deletion to support security, integrity, and disaster recovery.

We use commercially reasonable safeguards designed to protect information in the Service, including:

• encrypted connections (TLS) for data in transit;
• authentication and access controls;
• role-based permissions enforced at the workspace level;
• operational monitoring and audit logging.

No platform can guarantee absolute security. Dealerships and users share responsibility for protecting credentials and following good security practices.

DealerIQ uses cookies and similar session technologies to keep users signed in, maintain workspace context, remember preferences, and support core platform functionality. These are operational in nature and are not used for cross-site advertising.

Users should direct requests to update, correct, or remove their account information to their dealership administrator. Dealership administrators may contact CarPal for assistance with workspace-level requests where appropriate.

Dealerships retain ownership of the operational data they enter into the Service. CarPal processes that data on the Dealer’s behalf to deliver the Service in accordance with these terms.

DealerIQ is operated from the United States. If you access the Service from outside the United States, you understand that information may be processed and stored in the United States and other jurisdictions where our service providers operate.

DealerIQ is a business platform intended for use by dealership professionals. It is not directed to children, and we do not knowingly collect information from children under the age of 16.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying dealership administrators through the Service.

Questions about this Privacy Policy may be sent to privacy@carpaltech.com.