PRIVACY POLICY
Who we are
D&D Auto Management runs an invitation-only vehicle review service for dealerships. This policy covers this website, the invitation request form and the private dealership workspace. Questions about it can go to devon@ddautomanagement.com.
What we collect
- Invitation requests. Your name, dealership, work email and, if you choose, phone number, city and state, monthly vehicle volume and a message.
- Dealership accounts. The dealership name, the account holder’s name and email, a password (stored by our authentication provider, never readable by us), the date you accepted the membership terms, and your membership and billing status.
- Vehicle submissions. VINs, vehicle details, mileage, condition ratings and notes, asking prices, photos, messages with your reviewer, and the reviews and reports we produce.
- Payments. Card and bank details are entered on Stripe’s checkout and held by Stripe. We receive only the subscription status, plan and invoice records, not full card or account numbers.
- Technical data. Your IP address is used briefly to limit repeated sign-in and form attempts, and our hosting provider keeps standard request logs.
How we use it
- To respond to invitation requests and set up dealership workspaces.
- To review vehicles, return listing recommendations and produce reports.
- To send service emails: invitations, password resets, review updates, request receipts and billing notices.
- To take membership payments and manage billing.
- To keep accounts secure and prevent misuse.
We don’t sell your information, and we don’t use it for advertising.
Cookies and storage
The public website doesn’t use advertising or analytics cookies. When you sign in to your workspace, your session is kept in your browser’s local storage so you stay signed in; signing out removes it. Stripe sets its own cookies on its checkout and billing pages.
Who processes it
We use a small number of service providers, who handle data only to run the service for us:
- Supabase: database, file storage for vehicle photos, and sign-in.
- Vercel: website and application hosting.
- Stripe: membership payments, invoices and the billing portal.
- Resend: delivery of service emails.
- NHTSA vPIC: VIN lookups. Only the VIN is sent, to fill in year, make and model.
These providers may store data in the United States or other countries.
Who can see your vehicles
Your submissions, photos and reports are available only to your dealership and the D&D Auto Management review team. Other dealerships cannot browse or open them. Photos are served through private, expiring links.
How long we keep it
Account, vehicle and report records are kept while your dealership is a member, and afterwards only as long as needed for records, billing and legal obligations. Invitation requests are kept until we no longer need them to follow up. You can ask us to delete your information at any time.
Your choices
You can ask to see, correct or delete the personal information we hold about you by emailing devon@ddautomanagement.com. Depending on where you live, you may have further rights under local law; we’ll honour them. We won’t treat you differently for making a request.
Security
Data is encrypted in transit, access is checked on every request, and staff access is limited to the review team. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires.
Children
This service is for businesses and isn’t directed at anyone under 18.
Changes
If we change this policy, we’ll update the date above. Significant changes will be emailed to member dealerships. See also our membership terms.