Privacy Policy

1. Scope of This Policy
1.1 Who This Policy Covers
This Policy applies to personal information we collect from or about dealership users, authorized client representatives, consulting clients, strategic partners, and B2B prospects in connection with the Services (including our software solutions, digital marketing execution, and business/marketing consulting engagements). The Services are offered exclusively to dealership businesses operating in the United States and Canada and are intended solely for business-to-business ("B2B") use. The Services are not directed to, intended for, or designed for direct use by individual end-consumers.

1.2 Geographic Scope
HyperDrive Marketing offers the Services primarily to dealership businesses located in the United States, with capacity to serve dealership businesses in Canada. The Services are not intended for, and are not offered to, users located in the European Union, the United Kingdom, the European Economic Area, or any other jurisdiction outside the United States and Canada. If you are located outside the United States or Canada, you must not access or use the Services.

1.3 Children's Privacy
The Services are strictly business-to-business and are not directed to, intended for, or designed for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from individuals under eighteen. If we become aware that we have collected personal information from anyone under eighteen, we will delete it promptly. If you believe we may have collected such information, please contact us at legal@hyperdriveme.com.

1.4 Third-Party Practices & Dealership Integrations
This Policy applies only to personal information collected by HyperDrive Marketing. It does not apply to information collected by any third-party website, application, integration, or dealership-provided portal (such as credit application tools, digital retailing software, or external CRM systems), even where our Services or consulting recommendations link to or interact with such third parties. Your interactions with third-party services are governed strictly by their respective privacy policies.

2. Information We Collect
We collect personal information directly from you, automatically through your use of the Services, and from limited third-party sources.

2.1 Information You Provide to Us

• Account and Contact Information: Your name, business email address, business phone number, dealership name, physical business address, job title/role, and authorized contact persons.

• Consulting & Strategic Inputs: Business records, dealership staff directory contacts, sales team rosters, strategy documents, marketing audits, performance data, and operational materials provided directly to us by client dealerships during advisory, consulting, onboarding, or strategy engagements.

• Billing and Payment Information: Billing name, billing address, and payment card/ACH details. Payment data is collected and processed directly by our third-party payment processor, Stripe, Inc. HyperDrive Marketing does not store full credit card numbers or sensitive banking credentials on its servers.

• Communications & Support: Any information provided when contacting us via email, chat, phone, strategic intake sessions, or support tickets, including the content of messages and attachments.

• Marketing Preferences: Subscription choices for product announcements, newsletters, industry insights, and promotional communications.
   

2.2 Information Collected Automatically (Digital Footprints)

• Device and Connection Data: IP address, browser type and version, operating system, dynamic page views, referring/exit URLs, time zone, and language settings.

• Usage Information: Pages and features accessed, time and duration of access, click patterns, and diagnostic logs.

• Cookies and Tracking Technologies: Details outlined in Section 5.
   

2.3 Information Generated Through AI Tools & Automated Platform Features
In the ordinary course of providing our software platform and automated lead tools, we process and store:

• AI Voicebot Call Recordings and Transcripts: Audio recordings of inbound telephone calls handled by our AI Voicebot, along with resulting text transcripts. These recordings and transcripts are generated on behalf of the dealership account holder so the dealership can review interactions with its leads and customers.

• AI Chatbot Transcripts: Text records of conversations conducted through our AI Chatbot and digital messaging tools.

• Analytics & Performance Metrics: Aggregated data regarding consulting recommendations, campaign activity, lead engagement, and inventory interactions.
   

2.4 Information from Third Parties

• Stripe, Inc.: Payment status, transaction IDs, and billing confirmations.

• Infrastructure & CRM Partners: Data synced via authorized third-party integrations (e.g., HubSpot, AWS, Google Cloud).

• Public Directories & Verification Services: Publicly available records used to confirm dealership standing and business details.
   

2.5 Sensitive Personal Information
HyperDrive Marketing does not knowingly collect Social Security numbers, government identification numbers, financial account credentials, credit scores, biometric data, precise geolocation, or health records from dealership users, consulting clients, or car-buyer leads. You should not submit such information to the Services.

3. How We Use Information
We use personal information for the following business purposes:

3.1 Platform Operation, Consulting & Service Delivery

• Delivering strategic advisory services, conducting marketing performance audits, implementing consulting recommendations, and providing ongoing agency account support.

• Authenticating software users, securing client accounts, and fulfilling contractual obligations under Master Services Agreements or Statements of Work.

• Processing transactions, managing recurring fees, and delivering invoices via Stripe.

• Provisioning, operating, and troubleshooting customer support and account management pipelines.
   

3.2 AI Tool Customization & Account Training
Consistent with our terms, we process Dealership Data (including inventory details, pricing, and business metadata) to configure and fine-tune our AI Tools for your account. We do not use customer personal information that flows through our Services or consulting engagements to train general-purpose, public AI models operating outside your account.

3.3 Voice Recordings & Phone Compliance
Audio recordings and transcripts of calls answered by our AI Voicebot are maintained to:

• Enable the dealership account holder to review and reference customer interactions.

• Validate and optimize transcript accuracy and AI response quality.

• Investigate technical support, audit compliance, and quality assurance matters.

 
CRITICAL LEGAL NOTICE ON CALL RECORDING COMPLIANCE:
The AI Voicebot answers calls placed to telephone numbers operated by or assigned to the dealership account holder. The dealership account holder is solely responsible for providing all legally required notices (e.g., automated call recording announcements) and obtaining all required consents from all parties to such calls under federal, state, provincial, and local laws (including all-party and single-party consent recording statutes). HyperDrive Marketing’s provision of technical recording tools does not constitute legal advice and does not fulfill the dealership’s statutory compliance obligations.

3.4 B2B & Client Communications

• Sending operational updates, strategic project alerts, security notices, policy modifications, and invoicing statements.

• Directing promotional communications, thought leadership, and business outreach regarding HyperDrive Marketing solutions and advisory services (opt-out available anytime).

• Executing opt-in direct marketing email campaigns on behalf of dealership clients targeted at their prospective leads.
   

3.5 Platform Improvement & Aggregated Data

• Monitoring system traffic, assessing consulting frameworks, and optimizing platform performance.

• Developing aggregated, de-identified metrics for benchmarking, industry research, and solution refinement. Aggregated data does not identify any business or individual and may be retained without restriction.
   

4. How We Share Information
We do not sell or rent personal information to third parties, nor do we share personal information with third parties for their independent marketing purposes. We share data only under the following conditions:

4.1 Service Providers and Subprocessors
We share information with trusted third-party vendors who perform infrastructural, technical, or specialized operational functions under strict contractual obligations of confidentiality and data security:

• Payment Processing: Stripe, Inc.

• Cloud Infrastructure & Hosting: Amazon Web Services (AWS), Google Cloud Platform (GCP).

• Customer Relationship Management (CRM): HubSpot, Inc.

• AI Technology Vendors: Third-party large language model (LLM) and voice processing providers that power our platform features.

• Professional Advisors: Attorneys, auditors, tax specialists, and financial consultants bound by legal duties of confidentiality.
   

4.2 Legal and Safety Disclosures
We disclose information if required in good faith to:

• Comply with applicable law, court orders, subpoenas, or lawful government demands.

• Enforce our Terms of Service, Master Services Agreements, or defend against legal claims.

• Investigate potential fraud, security breaches, or technical vulnerabilities.
   

4.3 Business Transfers
In the event of a merger, acquisition, corporate reorganization, bankruptcy, or asset sale involving DealerFlow, LLC, personal information may be transferred as part of the business assets, subject to standard confidentiality protections.

4.4 No Sale or Sharing for Behavioral Advertising
We do not sell personal information, nor do we share personal information with third parties for cross-context behavioral advertising under US state privacy laws.

5. Cookies and Analytics Technologies
We deploy cookies, pixels, and web tracking scripts to manage site security, analyze performance, and optimize our B2B outreach:

• Strictly Necessary Cookies: Essential for page navigation, platform authentication, and site functionality.

• Analytics Tools (e.g., Google Analytics): Collect aggregated metrics on visitor movement, referral sources, and platform interaction.

• Advertising Pixels (e.g., Meta Pixel): Measure cross-platform campaign conversion and B2B engagement.

• Heatmapping Tools: Analyze aggregated page movement to improve software UI/UX and advisory landing pages.

• Consent Management (e.g., Usercentrics): Captures and records visitor cookie preferences.

Visitors can control cookie parameters via browser settings or through our site’s consent banner.

6. Data Retention Schedule
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including software operation, consulting deliverables, accounting, and legal requirements:

• Account, Consulting, and Dealership Data: Retained for the duration of your active software or consulting engagement, plus ninety (90) days following agreement termination or cancellation, during which you may request a data export. After 90 days, Dealership Data and consulting workpapers containing personal identifiers are permanently deleted or anonymized.

• AI Voicebot Recordings and Transcripts: Accessible during your active subscription lifecycle and subject to the standard 90-day post-termination deletion schedule.

• Billing, Payment, and Tax Records: Retained for seven (7) years pursuant to applicable state and federal tax codes.

• Marketing Subscriptions: Retained until you unsubscribe or submit a deletion request.

• Support Tickets & Strategic Communications: Retained for three (3) years from ticket or project closure.

• Analytics and Server Logs: Retained for up to twenty-six (26) months.
   

7. Telecommunications, SMS, and Mobile Carrier Compliance (A2P 10DLC)

7.1 Operational & Marketing Messaging
By utilizing the Services, scheduling a consulting engagement, or registering an account, you consent to receive operational communications via email, platform alerts, or text messaging regarding project milestones, security alerts, account verification, and billing.

7.2 Carrier Protection Guarantee (A2P 10DLC)
Phone numbers, text messaging originator opt-in data, and SMS consent records will NOT be sold, rented, shared, or disclosed to any third parties, vendors, affiliates, or outside entities for marketing or promotional purposes under any circumstances. All SMS data sharing excludes mobile carrier opt-in data and consent details.

7.3 SMS Program Terms
When opting in to text messaging communications powered by HyperDrive Marketing:

• Message frequency varies based on engagement scope and platform settings.

• Message and data rates may apply.

• Reply STOP at any time to opt out of future text messages.

• Reply HELP for assistance or email legal@hyperdriveme.com.
   

8. Your Privacy Rights & Choices

8.1 Unified Rights
HyperDrive Marketing voluntarily extends standard consumer privacy rights to all authorized dealership representatives, consulting contacts, and business clients across the United States and Canada, including:

• Right to Know / Access: Request details on data categories collected, business purposes, and recipients.

• Right to Correct: Request correction of inaccurate account or business records.

• Right to Delete: Request erasure of personal data, subject to legal and contractual recordkeeping exemptions.

• Right to Data Portability: Request an export of your personal information in a structured, machine-readable format.

• Right to Non-Discrimination: We will not discriminate against any user or client for exercising privacy rights.
   

8.2 Submitting Requests
To exercise your privacy rights, email legal@hyperdriveme.com. We will verify and process your request within forty-five (45) days.

8.3 State and Canadian Disclosures

• US Residents: Formulated to comply with CCPA/CPRA (California), Tennessee Information Protection Act, VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and equivalent state frameworks.

• Canadian Residents: Processed pursuant to the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy standards. You may contact the Office of the Privacy Commissioner of Canada if dissatisfied with our response.
   

9. International Data Transfers
DealerFlow, LLC is established in the United States, and data is hosted primarily on US servers operated by AWS and Google Cloud. If you access the Services or engage our consulting practice from Canada or elsewhere, you consent to the transfer, storage, and processing of your information in the United States.

10. Security & Data Protection
We enforce administrative, technical, and physical safeguards designed to defend your software data and consulting records, including:

• Encryption in transit (TLS 1.2+ / HTTPS) and encryption at rest.

• Strict role-based access controls and multi-factor authentication (MFA) for platform and internal document repositories.

• Environment isolation across cloud infrastructure (AWS / GCP).

• Continuous monitoring and intrusion detection systems.

While we implement industry-standard safeguards, no electronic transmission or storage system is 100% secure. In the event of a confirmed data breach impacting your records, we will notify you in accordance with applicable legal deadlines.

11. Updates to This Policy
We may amend this Policy periodically to reflect evolving technology, legal standards, or business practices. For material updates, we will provide at least thirty (30) days' prior written notice via email or in-platform notice. Non-material changes take effect upon posting with an updated "Last Updated" timestamp.

12. Contact Information
For privacy rights requests, legal notices, or compliance questions regarding DealerFlow, LLC, HyperDrive Marketing software, or our consulting engagements:
DealerFlow, LLC d/b/a HyperDrive Marketing
2612 Copeland St, Suite A
Knoxville, TN 37917
United States
Email: legal@hyperdriveme.com