Privacy Policy

Dealer1 Solutions, operated by Shitenko Holdings Inc. (“we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number (optional), and password. If you register on behalf of a dealership, we also collect the dealership name and location information.

Vehicle & Business Data

As you use the Service, you may enter vehicle information (VINs, stock numbers, make, model, year), customer information associated with vehicles, estimates, inspection notes, service records, delivery schedules, and related operational data. This data belongs to you and your dealership.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, device information, browser type, and IP address.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or banking details on our servers. Stripe's privacy policy governs the handling of your payment information.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your transactions and manage your subscription
• Send you transactional communications (account confirmations, invoices, security alerts)
• Send you notifications related to your dealership operations (estimates, approvals, assignments)
• Provide customer support
• Analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues or security threats

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Within your dealership: Other users at your dealership can see vehicle data, estimates, and operational information based on their role permissions.
• Service providers: We use third-party services (listed below) that process data on our behalf to operate the Service.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

4. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase (powered by AWS). All data is encrypted in transit (TLS/SSL) and at rest. We implement row-level security policies to ensure that each dealership's data is completely isolated from other organizations. We maintain regular backups and follow industry-standard security practices.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services:

• Supabase: Database hosting, authentication, and real-time data services
• Stripe: Payment processing and subscription management
• Twilio: SMS notifications for delivery updates and alerts
• Vercel: Application hosting and content delivery

Each of these providers has their own privacy policy governing how they handle your data.

6. Cookies & Tracking

We use essential cookies to maintain your authentication session and remember your preferences. We do not use third-party advertising cookies or cross-site tracking. Session cookies are automatically deleted when you close your browser or after they expire.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate personal data
• Deletion: Request that we delete your personal data
• Export: Request a machine-readable copy of your data
• Restriction: Request that we limit processing of your data

To exercise any of these rights, contact us at info@dealer1solutions.com. We will respond within 30 days.

8. Canadian Privacy Rights

Dealer1 Solutions is operated by Shitenko Holdings Inc. from Canada. We are committed to complying with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

PIPEDA Compliance

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of your personal information, subject to legal and contractual obligations
• Withdraw consent for the collection, use, or disclosure of your personal information

CASL Compliance

Our SMS and electronic messaging features comply with Canada's Anti-Spam Legislation (CASL). We require valid express or implied consent before sending any commercial electronic messages, including SMS communications. All messages include clear identification of the sender and an easy mechanism to unsubscribe. We honor all STOP and unsubscribe requests immediately.

Filing a Complaint

If you believe your privacy rights have been violated, you may contact us first at info@dealer1solutions.com. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Alberta, Canada, and the federal laws of Canada applicable therein, without regard to conflict of law principles.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: