Privacy Policy

We collect the following categories of information:

• Dealer account information — business name, contact name, email address, phone number, billing information.
• Customer and lead data processed on Dealer’s behalf — names, contact details, vehicle interests, and communications submitted through Dealer’s website or CRM. This data is provided by Dealer and processed on their behalf.
• Usage analytics — how Dealer staff interact with the admin panel, features used, and performance metrics. Used to improve the service.
• Cookies and session data — standard session cookies to keep users logged in. No third-party advertising cookies.

Mobile application. The Aerolot mobile app (Android and iOS) accesses the following device capabilities, only with your permission and only to provide the stated features:

• Camera & photos — to capture and attach vehicle, inventory, and document photos to deals. Photos are uploaded to your dealer account; the app does not access your photo library beyond images you choose to capture or attach.
• Push notifications — to deliver lead, messaging, and workflow alerts. This uses a device push token (via Firebase Cloud Messaging on Android and Apple Push Notification service on iOS) tied to your account. The token is not used for advertising.
• Biometric app-lock — optional Face ID / fingerprint unlock for the app. Biometric data never leaves your device and is never transmitted to or stored by Aerolot; the app only receives a pass/fail result from the operating system.

We use information we collect to:

• Provide and operate the Aerolot platform and all its features
• Process AI-powered features including chat, lead scoring, and follow-up generation
• Send service communications, billing notifications, and product updates
• Improve the platform through aggregated, anonymized analytics
• Provide customer support

We do not use your data for advertising or sell it to third parties for their own use.

Aerolot processes end-customer data (leads, contacts, deals) as a data processor acting on behalf of the Dealer, who is the data controller. This means Dealer determines the purpose and means of processing their customers’ data; Aerolot processes it only as instructed to provide the service.

We do not sell, rent, or share Dealer customer data with third parties for their own commercial purposes.

Customer interactions processed through Aerolot’s AI features — including AI sales chat, description generation, and follow-up drafting — are sent to the Claude API by Anthropic for processing.

Per Anthropic’s API data use policy, conversations submitted via the API are not used to train Anthropic’s AI models. Please refer to Anthropic’s Privacy Policy for the most current information.

Aerolot integrates with third-party services to provide core functionality. Each provider has its own privacy policy:

Dealer data is stored on secure servers hosted on Hetzner (Germany and/or US) and served via Vercel(US). Each dealer’s data is logically isolated — one dealer cannot access another’s data. Backups are performed regularly.

Dealer account and business data is retained for the duration of the active subscription. Upon cancellation:

• Data remains accessible for export for 30 days following the subscription end date.
• After the 30-day window, data is scheduled for deletion and permanently removed within 60 days.

Dealers are encouraged to use the Data Export feature in Settings before cancelling to retain a copy of their records.

Dealers using Aerolot to communicate with their own customers are responsible for:

• Maintaining their own privacy policy toward end customers that discloses use of the Aerolot platform
• Obtaining appropriate consent before sending SMS or email marketing communications, as required by TCPA, CAN-SPAM, and applicable state law
• Complying with all applicable laws regarding the collection and use of customer data

We implement reasonable security measures including:

• TLS encryption for all data in transit
• Access controls limiting data access to authorized personnel
• Regular automated backups
• Isolated per-dealer data environments

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

Dealers may request to access, correct, or delete their account and business data at any time. To request deletion, visit our Account & Data Deletion page, or email david@aiandwebservices.com. The same request can be initiated in-app from Settings → Billing → Request Deletion; Data Export is available there and under Settings → Data & Privacy.

Aerolot is a B2B platform intended for use by automotive dealership businesses and their staff. It is not directed at children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will provide at least 30 days’ advance notice of material changes via email to the registered account address. Continued use of Aerolot after the effective date of changes constitutes acceptance.

For privacy questions or data requests, contact us at: