Privacy Policy

Last updated: March 1, 2026

SmartLots Pro ("we," "our," or "us") operates the SmartLots Pro mobile application and admin portal (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

When your employer creates an account for you, we collect your email address and a hashed password. Account creation is performed by authorized dealership administrators.

Vehicle Data

When you create a ticket in the app, you may provide vehicle information including VIN, make, model, year, license plate number, and photographs of the vehicle. This data is collected on behalf of the dealership that employs you.

Location & Parking Data

We record which dealership location a vehicle is parked at, movement history between locations, and parking status. This is operational data used to manage dealership inventory.

Device Information

We may collect device type, operating system version, and unique device identifiers for the purpose of delivering the Service and troubleshooting technical issues.

Camera & Photos

The app requests access to your device's camera to photograph vehicles during the ticketing process. Photos are uploaded to secure cloud storage and associated with the relevant vehicle ticket. We do not access your personal photo library — only photos taken within the app are collected.

2. How We Use Your Information

  • To provide and maintain the Service
  • To authenticate your identity and manage your account
  • To store and display vehicle ticket data and photos
  • To track vehicle locations within dealership premises
  • To send transactional emails (password resets, account setup)
  • To improve and optimize the Service
  • To comply with legal obligations

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data in the following circumstances:

  • With your employer: Dealership administrators can view all ticket data, vehicle photos, and account information for users within their organization.
  • Service providers: We use third-party services (Supabase for database and authentication, Vercel for hosting, Mailgun for email, Mapbox for mapping) that process data on our behalf under strict confidentiality agreements.
  • Legal requirements: We may disclose information if required by law, regulation, or legal process.

4. Data Storage & Security

Your data is stored in secure cloud infrastructure provided by Supabase (PostgreSQL database with Row Level Security) and Supabase Storage (encrypted at rest). We implement industry-standard security measures including:

  • Encrypted data transmission (TLS/HTTPS)
  • Row Level Security policies restricting data access by role
  • Hashed passwords (never stored in plain text)
  • Role-based access control (Super Admin, Admin, User)

5. Data Retention

We retain your account data for as long as your employer maintains an active subscription. Vehicle ticket data and photos are retained according to your employer's retention policies. When an account is deleted, we soft-delete the record and may retain anonymized data for analytics purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability

To exercise these rights, contact your dealership administrator or email us at support@smartlotpro.com.

7. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: