Privacy Policy

We collect the following categories of information:

• Dealer account information — business name, contact name, email address, phone number, billing information.
• Customer and lead data processed on Dealer’s behalf — names, contact details, vehicle interests, and communications submitted through Dealer’s website or CRM. This data is provided by Dealer and processed on their behalf.
• Usage analytics — how Dealer staff interact with the admin panel, features used, and performance metrics. Used to improve the service.
• Cookies and session data — standard session cookies to keep users logged in. No third-party advertising cookies.

We use information we collect to:

• Provide and operate the LotPilot platform and all its features
• Process AI-powered features including chat, lead scoring, and follow-up generation
• Send service communications, billing notifications, and product updates
• Improve the platform through aggregated, anonymized analytics
• Provide customer support

We do not use your data for advertising or sell it to third parties for their own use.

LotPilot processes end-customer data (leads, contacts, deals) as a data processor acting on behalf of the Dealer, who is the data controller. This means Dealer determines the purpose and means of processing their customers’ data; LotPilot processes it only as instructed to provide the service.

We do not sell, rent, or share Dealer customer data with third parties for their own commercial purposes.

Customer interactions processed through LotPilot’s AI features — including AI sales chat, description generation, and follow-up drafting — are sent to the Claude API by Anthropic for processing.

Per Anthropic’s API data use policy, conversations submitted via the API are not used to train Anthropic’s AI models. Please refer to Anthropic’s Privacy Policy for the most current information.

LotPilot integrates with third-party services to provide core functionality. Each provider has its own privacy policy:

Dealer data is stored on secure servers hosted on Hetzner (Germany and/or US) and served via Vercel (US). Each dealer’s EspoCRM instance is logically isolated — one dealer cannot access another’s data. Backups are performed regularly.

Dealer account and business data is retained for the duration of the active subscription. Upon cancellation:

• Data remains accessible for export for 30 days following the subscription end date.
• After the 30-day window, data is scheduled for deletion and permanently removed within 60 days.

Dealers are encouraged to use the Data Export feature in Settings before cancelling to retain a copy of their records.

Dealers using LotPilot to communicate with their own customers are responsible for:

• Maintaining their own privacy policy toward end customers that discloses use of the LotPilot platform
• Obtaining appropriate consent before sending SMS or email marketing communications, as required by TCPA, CAN-SPAM, and applicable state law
• Complying with all applicable laws regarding the collection and use of customer data

We implement reasonable security measures including:

• TLS encryption for all data in transit
• Access controls limiting data access to authorized personnel
• Regular automated backups
• Isolated per-dealer data environments

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

Dealers may request to access, correct, or delete their account and business data at any time by contacting us at david@aiandwebservices.com. Data export is also available directly from the admin panel under Settings → Data & Privacy.

LotPilot is a B2B platform intended for use by automotive dealership businesses and their staff. It is not directed at children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will provide at least 30 days’ advance notice of material changes via email to the registered account address. Continued use of LotPilot after the effective date of changes constitutes acceptance.

For privacy questions or data requests, contact us at: