Privacy Policy

Easy Sell Auto is operated by Easy Sell Auto Inc. ("we", "us", "our"). We provide AI-powered software and services for automotive dealerships — including inventory syndication, AI-generated listing content, sales reporting, and AI tools that assist with buyer engagement (such as voice and messaging assistants). This policy explains what information we collect when you use our service, why we collect it, and what we do with it.

From dealerships and their staff

• Account details — name, email, dealership name, role.
• Authentication credentials — passwords (hashed), magic-link tokens, rep API keys (hashed).
• Dealership inventory — vehicle data sourced from your DMS or inventory feed (year, make, model, VIN, price, descriptions). Vehicle photos are fetched from your CDN at posting time and forwarded to Facebook; we do not retain photo files on our servers.
• Billing information — handled by Stripe; we receive your customer ID, subscription status, and invoice records, but we never see or store card numbers.

Automatically

• Usage data — listings posted, errors encountered, login timestamps, and which rep marked a vehicle sold and when (used for sales reporting).
• Diagnostics — browser type, extension version, and basic error telemetry to fix bugs.

From buyer interactions (when AI add-ons are enabled)

Where you enable our optional AI voice or messaging assistants, those tools may process buyer-supplied information — phone numbers, names, message content, and audio recordings — for the purpose of routing or replying to inquiries about your inventory. This data is processed only to operate the feature for your dealership and is retained on the same schedule as other dealership data unless a shorter retention is required by law.

• Operate the dashboard, extension, and posting workflow.
• Authenticate users and protect accounts from unauthorized access.
• Process payments and prevent billing fraud.
• Send service notifications, invoices, and support replies.
• Improve the product — diagnose bugs, measure feature usage, prioritize fixes.
• Comply with legal obligations (tax records, lawful requests from authorities).

We do not sell your data, share it with advertisers, or use dealer inventory or rep activity to train AI models.

We rely on a small number of vendors to run the service. Each receives only the data they need:

• Supabase — database + authentication hosting.
• Vercel — application hosting + analytics.
• Stripe — payment processing + invoicing.
• Resend — transactional email delivery.
• Anthropic — AI-generated listing descriptions (only the vehicle facts needed to write the description).

Primary storage is in North American data centers operated by Supabase and Vercel. Some processors (Stripe, Anthropic, Resend) may process data outside of Canada under their own terms.

• Account + dealership data — for the life of your subscription, plus up to 90 days after cancellation, so you can reactivate without losing your setup.
• Vehicle + listing data — refreshed continuously from your inventory feed; historical listings retained for up to 12 months for reporting.
• Billing records — kept for 7 years to meet tax and accounting requirements.
• Diagnostic logs — purged after 30 days.

You can request access to, correction of, or deletion of your personal information at any time by emailing us. Where required by law (including under Alberta's PIPA, Canada's PIPEDA, and the EU's GDPR for visitors in Europe), we respond within statutory timelines and free of charge.

We use industry-standard practices: encrypted connections (TLS), hashed passwords and API keys, row-level security on the database, and least-privilege access for our team. No system is perfect — if we ever suffer a breach affecting your data, we will notify you and the relevant authorities as required.

Easy Sell Auto is a business tool. It is not intended for and is not directed at anyone under the age of 18. We do not knowingly collect data from minors.

We may update this policy as the service evolves. Material changes will be announced via email to account owners at least 14 days before they take effect. The "last updated" date at the top always reflects the current version.