Privacy Policy

Dealer Momentum ("we," "us," or "our") operates the Dealer Training platform and Dealer Momentum CRM at dealermomentum.org. This Privacy Policy explains how we collect, use, store, and protect information when you use our services, including our social media and lead management features that integrate with Facebook, Instagram, TikTok, and YouTube.

By using our platform you agree to the collection and use of information in accordance with this policy.

When you register, we collect your email address and a hashed version of your password. We may also store your first name, last name, and phone number if provided.

Administrators may enter dealership details such as business name, address, phone, and email for organizational purposes within the platform.

When you connect a social media account (Facebook Page, Instagram Business Account, TikTok, or YouTube Channel), we store the Page Access Token provided by that platform. This token allows us to read public comments on your posts and manage lead communications on your behalf. We do not store your personal social media login credentials, passwords, or unrelated private messages.

When you authorize our app via Facebook OAuth, we receive and may store the following data as permitted by the granted permissions:

• Your Facebook Page name, Page ID, and Page Access Token
• Your public profile information (name, profile picture) as provided by the public_profile permission
• Your primary email address via the email permission
• A list of Pages you manage via the pages_show_list permission
• Page engagement data (posts, followers) via the pages_read_engagement permission
• Page metadata and webhook subscriptions via the pages_manage_metadata permission
• Messenger and Page conversation data via the pages_messaging permission, used to route lead inquiries into the CRM
• Instagram account profile info and media via the instagram_basic permission
• Instagram Direct messages from leads via the instagram_manage_messages permission
• Business asset and user profile data via the Business Asset User Profile Access feature, used to associate users with their business pages
• Ad account access via ads_management and business_management permissions, used to connect Facebook Lead Ads campaigns to the CRM
• User locale and timezone data via pages_user_locale and pages_user_timezone permissions, used to time follow-up communications appropriately

We do not access your personal friends list, private non-lead-related messages, or any data beyond what is necessary to operate the platform's lead management and communication features.

When a consumer submits a lead inquiry through Facebook Lead Ads, our website widget, or any connected source, we collect the name, email, phone number, and vehicle interest they provide. This data is stored in the CRM and used solely to facilitate follow-up communications on behalf of the dealership.

We may log basic server-side activity (such as which API endpoints are called) for debugging and security monitoring. We do not sell or share this data with third parties.

• To provide and operate the Dealer Training platform and Dealer Momentum CRM
• To capture, assign, and manage vehicle purchase leads from Facebook Lead Ads, Instagram, and other sources
• To route and respond to lead inquiries through Facebook Messenger and Instagram Direct
• To read and display comments and engagement from connected social media pages within your dashboard
• To send SMS and email follow-up communications to leads on behalf of the dealership
• To support administrators in managing their dealership's team accounts and lead pipeline
• To improve and debug the platform

We will never sell your personal information or social media tokens to third parties.

Our use of data received from Facebook APIs complies with the Facebook Platform Policy. Specifically:

• We only request permissions that are necessary to operate the lead management and dealership communication features described in this policy.
• Page Access Tokens are stored securely in an encrypted database and are never exposed to other users.
• We do not use Facebook data to build profiles for advertising or sell it to data brokers.
• Facebook lead data (names, emails, phone numbers submitted via Lead Ads) is used solely to contact those leads on behalf of the dealership that ran the ad.
• You can revoke our access at any time by disconnecting your account in the platform or through your Facebook App settings.

Your data is stored in a hosted PostgreSQL database. Access tokens and credentials are stored in the database and access is restricted to authenticated users of the platform. We use HTTPS (TLS) for all data in transit.

No security system is perfect. In the event of a breach we will notify affected users as required by applicable law.

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data and social access tokens within 30 days, except where retention is required by law.

Facebook Page Access Tokens are automatically invalidated by Facebook after 60 days or when you revoke access through Facebook's settings.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your account and associated data
• Revocation — disconnect your social media accounts at any time from within the platform

To exercise these rights, contact us at the email below.

We use the following third-party services to operate the platform:

• Resend — for transactional email delivery (account verification, notifications)
• Facebook Graph API — to capture leads from Facebook/Instagram Lead Ads and read page comments
• Twilio — to send SMS follow-up messages to leads on behalf of dealerships
• OpenAI — to power the AI Sales Coach feature (conversations are not permanently stored)

Each of these services has its own privacy policy governing their use of data.

Our platform is intended for business use by adults (18+). We do not knowingly collect data from anyone under the age of 13.

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

By submitting a lead inquiry, credit application, or any contact form on this platform or on a participating dealership's website, you consent to receive text messages (SMS) from the dealership and Dealer Momentum regarding your vehicle inquiry, application status, appointment reminders, and related follow-up communications. You are not required to consent to receive text messages as a condition of any purchase.

Message frequency varies based on your inquiry activity and dealership follow-up schedules. You may receive up to several messages per inquiry.

Message and data rates may apply depending on your mobile carrier and plan.

You may opt out of receiving text messages at any time by replying STOP, CANCEL, END, QUIT, or UNSUBSCRIBE to any message you receive. After opting out, you will receive one final confirmation message and no further texts will be sent.

To re-enable text messages after opting out, reply START, YES, or UNSTOP to any previous message from us.

Reply HELP to any message for assistance, or visit dealermomentum.org for support information.

Supported carriers include but are not limited to: AT&T, T-Mobile, Verizon, Sprint, Boost Mobile, Cricket, MetroPCS, and U.S. Cellular. Carriers are not liable for delayed or undelivered messages.

Your mobile number and opt-in status are never shared with or sold to third parties for marketing purposes.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: