Privacy policy

DealerPal Ltd is the controller for personal data about dealer account users. Where a dealer stores data about their own customers in DealerPal (for example, invoices or leads), the dealer is the controller and we process that data on their behalf.

Contact us about privacy at info@dealerpal.co.uk.

• Account data: name, email address, phone number, role and the dealership you belong to.
• Dealership data: vehicle stock, photos, videos, prices, jobs, invoices and other records you create.
• Connected social accounts: when you connect a Facebook Page, Instagram professional account, TikTok account or YouTube channel, we receive the account or Page ID, display name, profile picture, the permissions you granted, and access tokens that let us publish on your behalf. For TikTok we also receive the creator settings TikTok requires us to show before posting, such as available privacy options.
• Social content: captions, images, videos, schedules, and the IDs, links and status of posts we publish for you.
• Usage and device data: log data, error reports and performance measurements used to run and secure the service.

We do not read your personal profile, private messages, followers, comments or insights from any social platform.

• To provide DealerPal: managing stock, producing documents and creating content you ask for (performance of a contract).
• To publish or schedule posts to the social accounts you connect, only after you review and confirm each post (performance of a contract).
• To secure the service, prevent abuse, fix faults and measure usage and costs (legitimate interests).
• To meet legal and accounting obligations (legal obligation).

We never sell personal data, use it for advertising profiles, or use data received from Meta, TikTok or Google for any purpose other than publishing the content you approve.

When you ask DealerPal to draft captions, narration or videos, we send the relevant vehicle details, photos or recordings to AI service providers to generate the content. Providers act as our processors and may not use this data to train their models. You review every draft before it is published.

• Infrastructure and hosting providers, including Google Cloud and Firebase.
• AI providers that generate text, speech, transcription and music for content you request.
• Meta, TikTok and Google (YouTube), when you publish to their platforms. Content you publish is then governed by their own terms and privacy policies.
• Professional advisers and authorities where required by law.

Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum to protect it.

Access tokens are encrypted and stored only on our servers; they are never sent to your browser or device. We request only the permissions needed to publish content you approve. You can disconnect an account at any time in Settings → Integrations, which deletes its tokens immediately. You can also remove DealerPal's access from within Facebook, Instagram, TikTok or Google account settings.

DealerPal uses YouTube API Services to upload videos to the YouTube channel you connect. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke DealerPal's access at any time from your Google security settings. When you do, or when you disconnect YouTube in DealerPal, we delete the tokens and channel details we received from Google.

• Access tokens: until you disconnect the account, the platform revokes access, or your DealerPal account closes.
• Draft content and generated media: until you delete it, or 90 days after the vehicle is sold or removed.
• Records of published posts: for as long as your DealerPal account is active, so you can see what was published and where.
• Account and dealership records: for the life of the account, then as long as legally required (for example, six years for financial records).

You can ask to access, correct, delete or export your personal data, or object to or restrict how we use it. See data deletion for how to remove social account data. Contact info@dealerpal.co.uk to make any request; we respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

We use only the cookies and browser storage needed to sign you in, keep you signed in and remember interface preferences. We do not use advertising cookies.

DealerPal is a business service for adults and is not directed at anyone under 18.

We will update the date above when this policy changes and tell account holders about significant changes.