Consumer Privacy Notice | Dealr Policies

You’re seeing this notice because the business you’re transacting with (for example, a vehicle dealership or service center; this notice calls it “the business”) uses software from Dealr, Inc. (including its Dealer Title Solutions service) to run parts of your transaction. That includes things like payment pages, electronic document signing, credit applications, and deal paperwork.

This notice covers only the pages and services Dealr hosts. The business’s own websites and practices are covered by its own privacy notice.

The short version

The business (and, for financing, your lender) is responsible for your information. Dealr is the technology provider and processes your information on the business’s behalf and at its direction.
We use your information to complete your transaction and support the business’s services. We also use limited information to keep these systems secure, prevent fraud, and improve how accurately our tools read and check documents — using de-identified information and, for the document-reading tools, copies of transaction documents — under contracts that restrict how we do this. We do not sell your information, use it to advertise to you, or use it for our own marketing.
Questions about your information, or requests to access or delete it, should go to the business. We support it in responding.

What we process on these pages

Depending on what your transaction involves:

contact and identity details (name, address, date of birth, driver’s license number, citizenship status);
Social Security number (for credit applications and certain title/registration filings);
financial, employment, and residence details for credit applications (employer, position, and time on the job, current and previous; gross income and other income sources; housing type, monthly housing payment, and landlord or mortgage company; current and previous addresses and time at each; marital status; number of dependents; and references you list);
vehicle and deal information (VIN, price, trade-in, financing terms);
payment details (bank account or card), processed through secure payment providers;
documents you upload or sign (such as proof of income, residence, identity, or insurance), and the signature records that make e-signatures valid (time, IP address, consent); and
device and connection data used to keep these pages secure against fraud and abuse; and
records of how you use these pages (session replay and product analytics), with the text you type masked and sensitive fields excluded.

Notice at collection

Here is the same information in the form California law requires at the point of collection (see Cal. Code Regs. tit. 11, §7012(e)):

What we collect	Why we collect it	How long we keep it	Do we sell or share it?
Contact and identity details — name, address, email, phone number, date of birth	To identify you, prepare your paperwork, and communicate with you about your transaction	For as long as your transaction record must be kept under the business’s and our legal retention obligations (title and registration records carry multi-year retention laws), then deleted	No
Sensitive personal information — Social Security number; driver’s license or state ID number; citizenship status; bank account or payment card details	Only for the credit applications you submit, the payments you authorize, and the title/registration filings that legally require them	Kept with the transaction records they belong to, under the same legal retention criteria. Payment card details are processed by our secure payment providers	No
Financial, employment, and residence information — employer, position, and time on the job (current and previous); gross income and other income sources; housing type, monthly housing payment, and landlord or mortgage company; current and previous addresses and time at each; marital status; number of dependents; names and contact details of references you list	To complete the credit applications you submit and send them to the lenders the business chooses, and to prepare your deal paperwork	Same retention criteria as your transaction records	No
Vehicle and deal information — VIN, price, trade-in, financing terms	To prepare, sign, and file your deal documents and the government filings your transaction requires. We also create de-identified, aggregated statistics (such as average days-to-sale) that do not identify you or your transaction	Same retention criteria as your transaction records	No
Page-use records — session replay and product analytics of how you use these pages (clicks, scrolling, page views). The text you type is masked, and Social Security number, driver’s license or state ID number, bank account and payment card details, income, and citizenship status are excluded entirely	To find and fix problems and improve these pages	3 months	No
Documents, signature records, and device data — documents you upload or sign (such as proof of income, residence, identity, or insurance); the audit data that makes e-signatures valid (time, IP address, consent); and the device and connection data used to keep these pages secure	To make your electronic signatures legally valid, to keep the records the law requires, to secure these pages against fraud and abuse, and to improve the accuracy of the document-reading tools used in these services (see How it’s used)	For as long as the signed documents must remain verifiable under applicable law, then deleted; security records are kept only as long as needed for fraud prevention; document copies used to improve the document-reading tools are kept only while needed for that purpose	No

We do not sell your personal information and do not share it for cross-context behavioral advertising, as those terms are defined by California law. This is true for every category above. These same categories, purposes, and retention details appear in the Consumer transaction surfaces section (Section 8) of our Privacy Policy.

The business’s own privacy notice: available from the business, and linked on these pages where the business has provided it. This notice is provided on behalf of, and as authorized by, the business (Schedule A §A-10 of our agreement with the business), which is responsible for the information collected on these pages other than the limited records Dealr keeps for its own legal and security purposes, described below. This notice covers information collected through the pages and services Dealr operates. The business’s broader privacy practices, including what it does with your information after your transaction, are governed by the business’s own privacy policy, which you can request from the business.

How it’s used

We use your information:

to process payments you authorize;
to prepare, sign, and file your documents, including title and registration filings with state and county agencies;
to submit credit applications to the lenders the business sends them to;
to keep records the business and the law require; and
to find and fix problems on these pages and improve them, using session replay and product analytics (FullStory). Recording masks the text you type and excludes Social Security number, driver’s license or state ID number, bank account and payment card details, income, and citizenship status entirely; recordings are kept for 3 months.

Dealr does not decide whether you get financing, does not set your rates or terms, and does not create credit scores or credit reports about you. Those decisions are made by the business and the lenders it works with. Title and registration information is submitted to state and county agencies as the law requires. We handle it under the rules those agencies impose.

We check your documents for errors as part of completing your transaction. To keep these services accurate, we improve them in two ways. First, we use de-identified information — with personal details like names, Social Security numbers, and addresses removed — to improve the accuracy and security of those checks and of these services. Second, we use copies of transaction documents to teach the document-reading tools that recognize document types and read fields from them; those copies can include the personal details shown on the documents, are used only to make the document tools accurate, are kept only while needed for that purpose, and are never used for advertising, never sold, and never shared for others’ use. We also create de-identified, aggregated statistics, such as average days-to-sale, that do not identify you or your transaction. We may use these statistics in our products and services (including features we charge for), share them with others, or publish them, but always only in that aggregated form with personal details removed. We never try to re-identify them. These statistics cannot be used to identify you or to target advertising to you.

Who receives it

Only the parties needed for your transaction:

the business;
lenders/financial institutions you apply to;
state and county agencies for title, registration, and tax filings; and
the service providers that operate these pages under contracts restricting their use of your data. These are hosting, payment processing, document processing and e-signature, address validation, session replay and product analytics, and the security and anti-fraud tools that help protect these pages.

We also share information where needed: with the vendors that send the emails and text messages these services generate; with our professional advisors; to detect and prevent fraud or security threats; if Dealr is ever part of a corporate transaction such as a merger or acquisition (your information stays subject to the same protections); and as the law requires. We never give your information to anyone for their own advertising or marketing.

Financial privacy

If you’re applying for financing, federal financial-privacy law (the Gramm-Leach-Bliley Act) covers that information. The business and lender provide their own required privacy notices about it, and the choices in those notices come from them.

Security and retention

We protect this information with encryption in transit and at rest, access controls, and a security program audited annually (SOC 2 Type II). These pages also use anti-fraud and security tools that process device and connection data to protect these pages against fraud and abuse. The providers of these tools may also use that data to maintain and improve their own security services. We keep transaction records as long as the business’s and our legal obligations require (title and registration records carry multi-year retention laws), then delete them.

Saving an application on your device. If you start a finance application, you can choose to save your progress in your web browser. Nothing is saved unless you choose to save it. The saved copy stays in your browser on that device only. It is separate from the information you submit to the business and Dealr when you complete the application, and it is removed automatically when you submit the application or when it expires. Your Social Security number is never included in the saved copy (it is part of the application you submit; see the table above). Anyone else who uses the same browser profile on that device could open the saved copy, so avoid saving your progress on a shared or public device. To remove a saved copy sooner, clear your browser’s stored site data for the application page.

Your choices and rights

For most information on these pages, the business decides how it is used. Under U.S. state privacy laws it is generally the “controller” or “business” for that information. So privacy-rights requests (access, deletion, correction) should go to the business. If you contact us instead at privacy@dealr.cloud, we will tell you which business was involved and how to reach it. Our contracts with these businesses require us to forward your request to the business involved. For the limited records we keep for our own legal and security purposes (such as e-signature audit logs and fraud-prevention records), you can send requests to us directly at privacy@dealr.cloud. If you believe your information was compromised, contact us and the business right away.

Electronic signatures

Before signing electronically you’ll be asked to consent to electronic records and signatures. The consent screen explains system requirements, how to get paper copies, and how to withdraw consent. Withdrawing consent doesn’t cancel documents you already signed.

Changes to this notice

We update this notice when our practices or the law change. The effective date above tells you which version you are reading. If we make a material change to how we handle your information, we will post the updated notice on these pages before the change takes effect.

Contact: Dealr, Inc., 1050 Eagle Dr., Loveland, CO 80537 · privacy@dealr.cloud · 720-772-7706