Privacy Policy
This Privacy Policy explains how DealFlo Inc (“DealFlo,” “we,” “us”) collects, uses, shares, and protects personal information when you use the DealFlo platform, our website at dealflo.tech, and related services (collectively, the “Service”). It applies to two groups of people: our customers (dealerships and individual salespeople who subscribe to the Service) and the consumers those customers communicate with through the Service.
SMS Terms — No Mobile Information Sharing
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
DealFlo does not share, sell, lease, rent, or otherwise disclose consumer mobile phone numbers, SMS opt-in data, SMS consent records, or the content of SMS messages to any third party, affiliate, advertiser, data broker, or marketing partner for marketing or promotional purposes under any circumstances. Mobile information is used only to operate the Service, as described in Section 2 below.
1. Who we are
DealFlo Inc is a Colorado corporation headquartered at 4067 Clear Creek Dr, Golden, CO 80401. For questions about this policy, email joshuaskwarek@gmail.com.
2. SMS and mobile information
Mobile phone numbers and SMS data are used only to operate the Service: delivering messages through our SMS providers (Twilio and Plivo), receiving replies, storing the conversation for the dealership that sent the message, and, where a customer has directly connected one, passing the lead and message records to that customer’s own CRM or integration. We also disclose information to law enforcement when required by law, as described in Section 5.3. The SMS Terms section above applies to all mobile information we collect, process, or store on behalf of our customers, without exception for marketing or promotional purposes.
Opt-out. A consumer can stop receiving SMS from any DealFlo-powered conversation at any time by replying STOP, UNSUBSCRIBE, QUIT, CANCEL, or END. Upon receiving any of these keywords, we immediately mark the contact as opted out and block all further outbound messages. The confirmation reply delivered to the consumer is:
DealFlo: You are unsubscribed from DealFlo. No more messages will be sent. Reply START to resubscribe.
Help. A consumer can reply HELP (or INFO) at any time to reach DealFlo support. The reply delivered to the consumer is:
DealFlo: For help, email joshuaskwarek@gmail.com. Reply STOP to unsubscribe. Msg&data rates may apply. Msg frequency varies.
The support email in the HELP reply above matches the DealFlo contact listed at the bottom of this page and in Section 1.
Message and data rates may apply. Message frequency varies based on the conversation.
3. Information we collect
3.1 Information you provide as a customer
- Account information: name, email, phone number, dealership name, role, primary CRM, and timezone you provide at signup or in your profile.
- Billing information: we do not store full payment card numbers. Stripe processes your payment and returns a token we store to bill your subscription.
- Business configuration: business hours, lead-source profiles, AI agent settings, follow-up cadences, and other settings you configure.
- Content you submit: leads and contacts you upload, notes you add, and messages you send through the Service.
3.2 Information about consumers
When a customer uploads leads or connects a lead source, the Service receives information about consumers such as first and last name, phone number, email address, vehicle of interest, trade-in details, lead source, and any notes provided with the lead. We process this information on behalf of the customer so that their AI agent can communicate with each consumer.
3.3 Communications content
The Service sends and receives SMS and email messages on behalf of our customers. We store the content of those messages, delivery status, timestamps, and message metadata so the customer can view the conversation and so the AI agent can respond with full context.
3.4 Technical information
- Device and log data: IP address, browser type, device type, operating system, referring URLs, and pages viewed.
- Cookies and similar technologies: we use first-party session cookies (through Clerk) to keep you signed in, and limited analytics cookies to understand product usage.
- Error and performance data: diagnostic data collected when errors occur so we can fix bugs.
4. How we use information
- Provide, operate, and maintain the Service.
- Authenticate users and secure accounts.
- Generate AI-assisted messages on behalf of customers using large language models.
- Send SMS and email messages initiated by customers.
- Process subscriptions and payments.
- Provide support, troubleshoot issues, and respond to inquiries.
- Monitor, analyze, and improve the Service, including model quality and deliverability.
- Detect, prevent, and address fraud, abuse, and violations of our Terms of Service.
- Comply with legal obligations.
5. How we share information
We share information only as described below. We do not sell personal information. As stated in Section 2, no mobile information (including mobile phone numbers, SMS opt-in data, SMS consent, or SMS message content) will be shared with third parties or affiliates for marketing or promotional purposes under any circumstances.
5.1 Service providers (subprocessors)
We rely on the following third-party services to run the platform. Each receives only the information needed to do its job:
- Convex — database and backend hosting.
- Vercel — web application hosting and edge delivery.
- Clerk — user authentication and session management.
- Twilio — SMS delivery, inbound SMS, and voice.
- Plivo — SMS delivery and inbound SMS.
- SendGrid — transactional email delivery.
- Stripe — subscription billing and payment processing.
- OpenAI — large-language-model inference used to generate AI messages.
- Amazon Web Services — supporting infrastructure, including inbound email routing.
5.2 At customer direction
Customers may connect the Service to their CRM (for example VinSolutions, DealerSocket, eLead, CDK, Reynolds, or Tekion) or other integrations. When they do, we share lead and message data with that integration as directed. The customer is responsible for the third party’s handling of that data.
5.3 Legal and safety
We may disclose information if we believe in good faith that disclosure is required by law, necessary to enforce our Terms of Service, or needed to protect the rights, property, or safety of DealFlo, our customers, or the public.
5.4 Business transfers
If DealFlo is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify affected customers before their information becomes subject to a materially different privacy policy.
6. How consumers’ information is handled
When our customers upload leads or we receive leads through integrations, we act as a service provider or data processor to that customer. The customer decides what data to upload, the messages that go out, and when to delete records. Consumers who wish to exercise privacy rights should contact the dealership or salesperson they originally interacted with; we will support that customer in honoring the request.
7. Data retention
We retain account information for as long as a customer’s account is active and for a reasonable period afterward to meet legal, tax, accounting, and dispute-resolution obligations. Message history and lead data are retained while the account is active and deleted (or anonymized) when the account is closed, unless retention is required by law. Customers can request earlier deletion by emailing us.
8. Security
We use industry-standard safeguards including TLS encryption in transit, encryption at rest through our infrastructure providers, role-based access controls, and least-privilege service accounts. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by applicable law.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete information, subject to legal exceptions.
- Receive a portable copy of your information.
- Opt out of certain processing activities.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email joshuaskwarek@gmail.com. We will respond within the time required by applicable law. You may also have the right to lodge a complaint with a data-protection authority.
10. Cookies
We use strictly necessary cookies to operate the Service (such as the authentication cookies set by Clerk) and a small number of analytics cookies to understand product usage. You can disable non-essential cookies through your browser settings; the Service may not function correctly without strictly necessary cookies.
11. Children’s information
The Service is intended for business use and is not directed to children under 16. We do not knowingly collect information from children. If you believe a child has provided us information, email us and we will delete it.
12. International users
The Service is operated from the United States. If you access the Service from outside the U.S., you understand your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to that transfer.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, for significant changes, notify customers by email or in-app notice before the change takes effect.