Privacy Policy

Last updated: October 9, 2026

Dealer1 Solutions, operated by Shitenko Holdings Inc. (“we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number (optional), and password. If you register on behalf of a dealership, we also collect the dealership name and location information.

Vehicle & Business Data

As you use the Service, you may enter vehicle information (VINs, stock numbers, make, model, year), customer information associated with vehicles, estimates, inspection notes, service records, delivery schedules, and related operational data. This data belongs to you and your dealership.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, device information, browser type, and IP address.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or banking details on our servers. Stripe's privacy policy governs the handling of your payment information.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your transactions and manage your subscription
  • Send you transactional communications (account confirmations, invoices, security alerts)
  • Send you notifications related to your dealership operations (estimates, approvals, assignments)
  • Provide customer support
  • Analyze usage patterns to improve the Service
  • Detect, prevent, and address technical issues or security threats

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Within your dealership: Other users at your dealership can see vehicle data, estimates, and operational information based on their role permissions.
  • Service providers: We use third-party services (listed below) that process data on our behalf to operate the Service.
  • Legal requirements: We may disclose information if required by law, court order, or governmental authority.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

4. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase (powered by AWS). All data is encrypted in transit (TLS/SSL) and at rest. We implement row-level security policies to ensure that each dealership's data is completely isolated from other organizations. We maintain regular backups and follow industry-standard security practices.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services:

  • Supabase: Database hosting, authentication, and real-time data services
  • Stripe: Payment processing and subscription management
  • Twilio: SMS notifications for delivery updates and alerts
  • Vercel: Application hosting and content delivery
  • Resend: Email delivery and inbound email handling
  • Anthropic: Powers the Dealer1 Co-pilot AI assistant. When a user asks the Co-pilot for help, the relevant records and any files they attach are sent to Anthropic's API to generate a response
  • OpenAI: Powers smaller AI features such as note summaries and estimate descriptions

Optional integrations (Google or Microsoft mail, CDK, MarketCheck, CARFAX) only receive data when a dealership turns them on. The full, current list with locations is on our subprocessors page.

Each of these providers has their own privacy policy governing how they handle your data. Our AI providers process data under their commercial API terms, which do not permit using it to train their models. Before the Co-pilot sends typed messages or records to Anthropic, Dealer1 automatically removes full payment card numbers, social insurance / social security numbers and bank account details, and masks driver's licence numbers. Photos and documents are sent as attached, so staff should not attach images of payment cards, cheques or identity documents. These providers may process data in the United States.

6. Cookies & Tracking

We use essential cookies to maintain your authentication session and remember your preferences. We do not use third-party advertising cookies or cross-site tracking. Session cookies are automatically deleted when you close your browser or after they expire.

On our public website we run our own first-party analytics — no third-party analytics or advertising service is involved. Your browser stores a random visitor ID and, when you arrive from a link, where you came from (the referring site and any campaign tags in the link, such as utm_source). We use this to count page views, see which pages and buttons are used, and understand which articles and tools lead people to try Dealer1. If you sign up, this information is linked to your account so we can tell which of our content brought you. It is never sold or shared for advertising. You can clear it at any time by clearing your browser's site data, and private/incognito windows don't keep it.

7. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate personal data
  • Deletion: Request that we delete your personal data
  • Export: Request a machine-readable copy of your data
  • Restriction: Request that we limit processing of your data

To exercise any of these rights, contact us at info@dealer1solutions.com. We will respond within 30 days.

8. Canadian Privacy Rights

Dealer1 Solutions is operated by Shitenko Holdings Inc. from Canada. We are committed to complying with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

PIPEDA Compliance

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete personal information
  • Request deletion of your personal information, subject to legal and contractual obligations
  • Withdraw consent for the collection, use, or disclosure of your personal information

Service Providers Outside Canada

Some of our service providers store or process personal information outside Canada, mainly in the United States, where it may be accessible to courts and authorities under local law. You can ask our Privacy Officer about how these providers handle personal information at info@dealer1solutions.com.

Privacy Officer

Shitenko Holdings Inc. has designated a Privacy Officer who is accountable for our compliance with this policy and applicable privacy law, including responding to access requests and privacy complaints. Contact: info@dealer1solutions.com.

CASL Compliance

Our SMS and electronic messaging features comply with Canada's Anti-Spam Legislation (CASL). We require valid express or implied consent before sending any commercial electronic messages, including SMS communications. All messages include clear identification of the sender and an easy mechanism to unsubscribe. We honor all STOP and unsubscribe requests immediately.

Filing a Complaint

If you believe your privacy rights have been violated, you may contact us first at info@dealer1solutions.com. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Alberta, Canada, and the federal laws of Canada applicable therein, without regard to conflict of law principles.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Shitenko Holdings Inc. (d/b/a Dealer1 Solutions)

Email: info@dealer1solutions.com