Overview
DealerList AI ("we", "our") is inventory software for car dealerships. It helps dealership teams manage their vehicle inventory, generate listing copy, and publish vehicles to Facebook Marketplace. This policy explains what information we collect, why we collect it, and how it is handled — across both the web application and the Chrome extension.
Information we collect
Account information
When your dealership creates an account for you, we store your name, work email address, role (for example Salesperson or Sales Manager), and the dealership you belong to. Passwords are handled by our authentication provider and are never stored by us in plain text.
Vehicle inventory data
The core of the product: vehicle details (year, make, model, trim, VIN, mileage, price, colors, fuel type, body type) and vehicle photos. This data describes vehicles offered for sale by your dealership — it is business inventory, not personal information.
Activity records
We log inventory actions (for example, which team member added or listed a vehicle) so that dealership managers can see their team's activity. Salespeople see only their own activity.
Website content read by the Chrome extension
When you use the extension's capture feature on your dealership's inventory website, the extension reads the vehicle listing content of that page — text such as year, make, model, VIN, mileage and price, and the URLs of vehicle photos — so it can be imported into your DealerList AI inventory. This happens only when you actively use the capture feature, and only vehicle listing data is read.
What the Chrome extension does — and does not do
- It does read vehicle listings from dealership inventory pages when you use capture, save them to your DealerList AI account, and autofill the Facebook Marketplace vehicle listing form with a vehicle you select.
- It does store your signed-in session (name, email, and authentication tokens) locally in your browser's extension storage so you stay signed in.
- It does not publish anything automatically. The extension fills in the Marketplace form; you review the listing and click Publish yourself.
- It does not collect your browsing history, track the pages you visit, or read content from any site other than the dealership inventory pages you capture from and the Marketplace form it fills for you.
- It does not read your Facebook messages, friends, feed, or any other Facebook data. It only writes into the listing form.
- It does not load remote code. All extension code ships inside the extension package reviewed by the Chrome Web Store.
How we use information
- To operate the service: showing your dealership its inventory, keeping team activity attributed to the right person, and autofilling Marketplace listings.
- To generate listing copy: when you use the AI copywriter, the selected vehicle's details (never your personal account data) are sent to our AI provider to produce the listing title and description.
- To keep the service secure: authentication, session management, and role-based access control.
We do not sell or rent your data, use it for advertising, share it with data brokers, or use it for any purpose unrelated to running DealerList AI. We do not use your data to determine creditworthiness or for lending purposes.
Service providers
We rely on a small number of infrastructure providers to run the service: cloud application hosting, a managed database and authentication platform, and an AI model provider for listing-copy generation. Each receives only what is necessary to perform its function, and none are permitted to use your data for their own purposes.
Data retention
- Inventory and account data are retained while your dealership's account is active.
- To keep storage lean, extra gallery photos of vehicles marked Sold are automatically removed after 30 days; the main photo is kept so the record stays intact (and is restored if the sale is undone).
- When an account or dealership is deleted, its data is removed from the active system.
Security
All traffic between your browser, the extension, and our servers is encrypted with HTTPS. Authentication uses short-lived access tokens with silent renewal. Access to data is enforced server-side by role: salespeople can only see their own activity, and billing information is restricted to dealership administrators.
Your choices and rights
- You can sign out of the extension at any time, which clears the locally stored session.
- Uninstalling the extension removes all locally stored extension data.
- You may request access to, correction of, or deletion of your personal information by contacting us at the address below.
Changes to this policy
If we make material changes to this policy, we will update this page and revise the effective date above.
Contact
Questions about this policy or your data: support@owl360it.com