Privacy
Privacy Policy
This policy explains how ProAutoSites handles information for platform visitors, dealership users, and shoppers using dealer websites powered by the platform.
Last updated August 29, 2026
Information we collect
We collect account and dealership information needed to provide the service, information submitted through website and control-panel forms, billing and subscription references from payment providers, support communications, and limited technical data such as IP address, browser, login activity, and security events.
The free dealer website scorecard collects the submitted dealership website, contact details, optional Google Business Profile link, optional dealer-reported website cost and contract position, consent and campaign attribution. It stores the observed public-page evidence and report. A one-way request-source hash is used briefly for abuse prevention; the scorecard does not store the submitter's raw IP address.
Dealer websites may collect shopper contact details, vehicle interests, appointment requests, trade-in information, and estimate-only finance preferences on behalf of the dealership. Protected credit data is handled only through configured licensed providers and is not intended for ordinary website forms.
When an authorized dealership user creates a test drive in the mobile app, the dealership may scan the driver's license PDF417 barcode and photograph the license front. The complete decoded barcode fields and image are temporarily stored for the dealership's test-drive incident needs.
How information is used
Information is used to operate websites and control panels, manage inventory and leads, deliver requested communications, process subscriptions, provision services, prevent fraud, maintain security, provide support, and comply with legal obligations.
Analytics and advertising measurement
When a ProAutoSites.com visitor accepts optional measurement, we use Google Analytics and Google Tag Manager to understand public-page visits, referral sources, campaign parameters, form interactions, accepted demo or contact requests, and other configured conversion events. This may include page URLs, referrers, browser and device information, approximate location derived by the provider, and first-party event identifiers. Ordinary analytics events are not intended to include message text, finance details, or other sensitive form contents.
With the same optional choice, we may use the Meta Pixel and Meta Conversions API to understand whether an advertisement led to a landing-page visit, form interaction, valid dealership lead, qualified opportunity, scheduled or attended demo, or subscription. This may use Meta browser and click identifiers, attribution parameters, IP address, browser information, and normalized contact details. Contact details are SHA-256 hashed before they are placed in the server-side delivery queue.
We use these outcomes to distinguish form submissions from genuine dealership opportunities and improve marketing measurement. If optional measurement is declined, Google Analytics, Google Tag Manager, and the Meta Pixel are not loaded, and CRM outcomes for that contact are not sent to optional advertising measurement providers.
Your choices and requests
ProAutoSites.com and dealer-site visitors can decline optional analytics or advertising measurement from the privacy banner and can use unsubscribe or preference links where provided. You may request access, correction, deletion, or communication opt-out assistance. Identity verification or a legal exception may be required before a request is completed.
Retention
Information is retained only as long as needed for service delivery, security, contractual, tax, legal, and dispute-resolution purposes. Dealership retention policies may vary. Legal holds can temporarily prevent deletion. Backup copies age out through controlled backup-retention schedules.
Dealer scorecard request-source hashes are cleared after 7 days. Scorecard contact, attribution, optional commercial details, and internal notes are anonymized when the report retention period expires (90 days by default).
Temporary test-drive driver-license barcode data and front images are encrypted, excluded from mobile offline storage, and deleted during the next scheduled daily retention purge.
Security
We use access controls, encryption for protected integration credentials and compliance records, multi-factor authentication, session management, tenant isolation, audit logging, backups, monitoring, and incident procedures. No online service can guarantee absolute security.
Contact
Use the contact form for privacy questions or requests. Include the relevant dealership name when the request concerns a dealer website.