Privacy Policy

AutoPosting Pro (“we,” “us”) provides software that helps car dealerships and salespeople post their vehicle inventory to online marketplaces and social platforms. This policy explains what we collect, why, and your choices. Questions: [email protected].

Information we collect

• Account data — name, email, password (hashed), and your dealership details.
• Billing data — handled by Stripe; we store only a customer/subscription ID and billing status, never card numbers.
• Inventory data — vehicles scraped from your own dealership website (VIN, price, photos, specs) to create your listings.
• Usage data — posts made, listing links, login timestamps, and IP addresses, for security and product analytics.
• Facebook & Instagram data — if you connect them, we access the Pages and Instagram Business accounts you authorize, and the access tokens needed to publish on your behalf. We use this only to post your content and read the resulting post links. We never post without your configuration and never access personal profile data beyond what the connection grants.

How we use it

To operate the service: authenticate you, generate and publish listings, show you results and analytics, process billing, provide support, and secure the platform. We do not sell your data. We do not use your inventory or Facebook/Instagram data for advertising.

Sharing

We share data only with service providers that make the product work: Stripe (billing), Resend (email), our hosting (Vercel) and database (Supabase), and the platforms you post to (Facebook/Instagram/Marketplace). Each processes data on our behalf under their own terms.

Facebook / Instagram data & deletion

You can disconnect Facebook and Instagram at any time in the app, which revokes our access and deletes the stored tokens. To request deletion of all data associated with your account, email [email protected] and we will delete it within 30 days, except records we must retain for legal or accounting purposes.

Data retention & security

We retain account and usage data while your account is active and for a reasonable period afterward. Passwords are bcrypt-hashed; sensitive credentials are encrypted at rest; access is restricted to the tenant that owns them.

Your rights

You may access, correct, export, or delete your personal data by contacting us. If you are in a jurisdiction with additional rights (e.g., GDPR/CCPA), we honor applicable requests.

Changes

We may update this policy; material changes will be posted here with a new date.

This document is provided as a general template and does not constitute legal advice. Have counsel review it before relying on it.