Privacy Policy

Autocorp.ai Inc. ("Autocorp," "we," "our," "us") is an automotive technology company providing software products and services including AVA® ID, AVA® Credit, AVA® Trade, and VeriDrive (the "Services") primarily for automotive dealerships and business entities.

1. Responsibility towards your Personal Data

Autocorp acts as a data controller for Personal Data collected for its own business purposes. This applies to customers, website visitors, individuals interacting directly with the company, and authorized platform users.

The Privacy Policy does not cover Personal Data processed when Autocorp acts as a service provider or processor on behalf of a Customer. For Customer Data, the Customer is the data controller. Individuals with questions about Customer Data should contact the Customer that collected their information directly.

2. Processing Activities Covered

This Privacy Policy applies when you:

• Visit Autocorp's websites displaying this policy
• Visit social media pages
• Visit offices
• Communicate via email, phone, video calls, texts, or faxes
• Use products and Services where Autocorp acts as controller
• Register for or attend events, webinars, or contests
• Work as a vendor, consultant, or integration partner
• Are employed by a Customer and your information was shared with Autocorp
• Participate in surveys or research
• Receive marketing communications
• Engage in internal business operations

3. Linked Third Party Websites

The Sites and Services may contain links to third-party websites, applications, platforms, and services not owned or controlled by Autocorp. Third-party privacy practices apply to those interactions. Autocorp is not responsible for third-party privacy policies or practices.

Where Autocorp explicitly provides a solution and links to this Privacy Policy, Autocorp's policy governs. Where third parties provide solutions, their privacy policies apply.

4. Personal Data We Collect

4.1 Personal Data Collected Directly from You

Contact information: Full name, job title, company name, address, phone number, email address collected when expressing interest in Services, using demo requests, contacting support, signing up for events, or downloading content.

Biographical information: Name, job title, company, photo, video, location, social media profiles, expertise areas collected through surveys, reviews, or research participation.

Financial information: Billing name, address, credit card number, bank account information collected during purchases.

Device and usage data: IP addresses, device identifiers collected through cookies and web beacons on Sites or emails.

Service usage data: Device information, usage logs, and technical data collected when using products and Services.

Communication data: Name, email, phone number, voice, image, video, and timestamps collected during phone calls, video conferencing, or office visits.

Vendor information: Contact, payment, and billing information from vendors or vendor employees.

4.2 Personal Data Shared by Customers

When Customers submit Personal Data to Autocorp's Services, the Customer is responsible for providing applicable privacy notices. Autocorp processes Customer Data as a processor based on Customer instructions, including:

• Identity verification
• Test drive appointment scheduling
• Soft pull credit snapshots
• Inventory matching
• Trade-in information provision

5. Personal Data of Others

If you provide Autocorp or its vendors with Personal Data relating to other individuals, you represent having authority to do so and obtaining necessary permissions. Such data may be used per this Privacy Policy. Individuals believing their data was improperly provided should contact Autocorp.

6. Personal Data from Other Sources

Autocorp may collect information from Third Party Providers including publicly available information and purchased data. This may include advertising data: identifiers, professional information, education data, commercial information, visual information, internet activity information, behavioral inferences.

7. Personal Data Collected Through Automatic Means

7.1 Device and Usage Data

Usage Data collected includes:

• Identifiers (user ID, organization ID, username, email, user type)
• Commercial information
• Internet activity (IP address, device and application information, location, language, browser type, internet service provider, mobile carrier, pages viewed, website interactions, searches, operating system, timestamps, product versions)

7.2 Cookies, Web Beacons, and Tracking Technologies

Autocorp uses cookies, web beacons, pixels, tags, JavaScript, and similar technologies to gather website usage information. Cookies may be session-based (disappearing when closing the browser) or persistent (remaining after closing the browser).

Autocorp uses third-party business-analytics services to measure business usage of our website. These services identify the company name and approximate address associated with a visitor based on the visitor's IP address, and set a persistent cookie (lifetime up to two years) used to distinguish between visitors. This processing is carried out on the basis of Autocorp's legitimate interest in understanding which businesses engage with our website and Services. These services identify business entities, not individual visitors by name.

Users may refuse cookies by adjusting browser settings, though disabling cookies may limit Site features. Essential cookies cannot be disabled in Autocorp's system but may be controlled via browser settings.

Autocorp does not commit to responding to "do not track" (DNT) browser signals, as these are not yet uniform or industry-standard.

8. Purposes for Collecting and Processing Personal Data

Autocorp collects and processes Personal Data for purposes including:

• Providing and improving Sites
• Security and fraud prevention
• Personalized advertisements and content
• Managing events
• Communications and marketing
• Recording calls and videos for training and quality assurance
• Contact and support
• Providing Services
• Managing accounts and billing
• Licensing compliance
• Regulatory and legal compliance
• Internal reports and modeling
• Financial reporting
• Aggregating data for business analytics
• Webinars, demos, contests, training, promotions
• Managing payments
• Surveys, reviews, research

9. Who We Share Personal Data With

Autocorp may share Personal Data with:

Vendors: Service providers including IT, system administration, hosting, credit card processing, research, analytics, marketing, events planning, customer support, and data enrichment. Vendors are bound by contractual confidentiality obligations. Some vendors deliver AI and generative AI capabilities for data analysis.

Third-party accounts: When connecting third-party accounts through products and Services, Autocorp uses provided information to authenticate identity, identify data sources, retrieve requested data, and manage authentication details.

Event sponsors: If attending events or webinars, Autocorp may share Personal Data with event sponsors.

Affiliated Customers: Autocorp may share Personal Data with affiliated Customers and Third Party Providers responsible for access.

Professional advisers: Lawyers, bankers, auditors, insurers providing consultancy, banking, legal, insurance, and accounting services.

Corporate transaction parties: If involved in merger, reorganization, dissolution, fundamental corporate change, or sale of website or business unit.

Public authorities: To comply with legal obligations.

Safety and rights protection: Where disclosure is necessary to protect Autocorp, Customers, or others' rights, property, or safety.

10. Children's Data

Autocorp's Sites and Services are not directed at children. Autocorp does not knowingly collect Personal Data from children under 13. For children ages 13-18, Autocorp does not knowingly collect Personal Data without parental/guardian consent or separate agreement.

11. SMS Consent

SMS consent and phone numbers collected for SMS communications will not be shared with third parties or affiliates for marketing purposes.

• Message frequency: May vary
• Rates: Message and data rates may apply
• Opt-out: Reply STOP to any message
• Assistance: Reply HELP or visit this page
• SMS consent sharing: Not shared with third parties for marketing purposes

12. How Long We Keep Your Personal Data

Autocorp retains Personal Data for periods consistent with original collection purposes or as required for legal obligations. Retention period determination is based on:

• Amount, nature, and sensitivity of processed Personal Data
• Potential unauthorized use or disclosure harm risk
• Ability to achieve processing purposes through other means
• Applicable legal requirements

After applicable retention periods expire, Personal Data is deleted.

13. How We Secure Your Personal Data

Autocorp takes appropriate organizational, technical, and physical precautions to help safeguard against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to processed Personal Data.

While Autocorp follows generally accepted standards to protect Personal Data, no storage or transmission method is 100% secure. Personal Data transmission is at individual risk.

14. Your Rights Relating to Your Personal Data

Individuals may have certain Personal Data rights subject to local data protection and consumer protection laws. Rights may include:

• Access to Personal Data held by Autocorp
• Information on how Autocorp processes Personal Data
• Rectification of inaccurate Personal Data
• Erasure or deletion of Personal Data
• Restriction of Autocorp's Personal Data processing
• Transfer of Personal Data to another controller, where possible
• Objection to any Personal Data processing
• Opt-out of certain Personal Data disclosures to third parties
• Consent withdrawal at any time under certain circumstances
• Non-discrimination for exercising described rights

15. Exercising Your Rights

15.1 How to Exercise Your Rights

To exercise rights, contact Autocorp using Section 18 information. Personal Data may be processed in responding to these rights. Autocorp may request specific information to confirm identity and right to exercise the right.

For marketing communication recipients, individuals may manage receipt by clicking "unsubscribe" links at marketing email bottoms, or replying or texting 'STOP' for SMS communications.

15.2 Your Rights Relating to Customer Data

Autocorp may process Customer-submitted Personal Data. For Customer-submitted Personal Data in Autocorp's processor role, individuals wishing to exercise rights should inquire with the Customer directly.

16. International Transfer of Personal Data

Personal Data may be collected, transferred to, and stored by Autocorp in Canada or the United States and by affiliates and third parties based in other countries.

Autocorp ensures Personal Data recipients offer adequate protection and security through appropriate back-to-back agreements, standard contractual clauses if required, or alternative transfer mechanisms approved by applicable regulators.

17. Changes to This Privacy Policy

Autocorp will update this Privacy Policy periodically to reflect practice changes, technologies, legal requirements, and other factors. Updates will include modified date changes.

18. Contacting Us

To exercise Personal Data rights or ask Privacy Policy or privacy practice questions, contact Autocorp's Privacy Officer:

For billing information inquiries and payment information updates, contact Autocorp's Finance Team at support@autocorp.ai.

19. Additional Disclosures for California Residents

The California Consumer Privacy Act (as amended by the California Privacy Rights Act) requires businesses to disclose whether they sell or share Personal Data. As a CCPA-covered business, Autocorp does not sell Personal Data.

California law grants state residents certain rights, including rights to know and access specific Personal Data types, learn processing methods, request Personal Data deletion, request Personal Data correction, opt-out of third-party advertising Personal Data sharing, and not be denied goods or services for exercising these rights.

To opt-out of shares using cookie identifiers, activate Global Privacy Control in web browsers or browser extensions.