Privacy Policy
Last updated: September 11, 2026
This policy explains what LotDesk collects, why, and the choices you have. It applies to the LotDesk website and application. LotDesk is a business tool: most personal data in the Service is entered by dealerships about their own customers, and for that data the dealership is the controller and LotDesk is the processor acting on its instructions.
What we collect
- Account data: name, email, dealership name and address, role, password (hashed).
- Dealership data you enter: vehicles, photos, customers, deals, payments schedules and notes.
- Billing data: handled by Stripe; we store only plan, status and Stripe identifiers, never card numbers.
- Usage and technical data: log entries, IP address, browser type, pages and features used, error reports. Analytics run only with your consent (cookie banner).
Why we use it
- To provide and secure the Service, including authentication and fraud prevention.
- To bill subscriptions and send transactional email (invites, password reset, receipts, trial notices).
- To improve the product based on aggregated usage.
- To comply with legal obligations.
Who we share it with
Only processors needed to run the Service: hosting (Railway, Vercel), photo storage (Cloudflare R2), payments (Stripe), transactional email (Resend), vehicle data providers when you request a VIN decode or history report, marketplaces when you enable a listing feed, and AI providers when you request a generated description (vehicle specs only, never customer data). We do not sell personal data and do not share it for advertising.
Retention
Account and dealership data are kept while your account is active and for 30 days after closure to allow export; backups are rotated within 30 days after that. Billing records are kept as required by tax law.
Your rights
You can access, correct, export or delete your data from the app or by writing to support@lotdesk.app. Residents of California and other states with privacy laws may also request details of the categories of data we process and opt out of analytics at any time via the cookie banner. We answer within 30 days. If you are a customer of a dealership that uses LotDesk, contact that dealership first; we will assist them.
Security
Data is encrypted in transit (TLS) and at rest by our hosting providers; access is limited per dealership (multi-tenant isolation) and by role; passwords are hashed. No system is perfectly secure; we notify affected customers of breaches as required by law.
Cookies
We use strictly necessary cookies to keep you signed in. Analytics cookies are set only after you accept them in the banner and can be withdrawn there.
Changes and contact
We announce material changes by email or in the app. Questions: support@lotdesk.app.