Privacy
The app is used by the dealership's own team: the owner, the finance desk, the service department and the people who collect payments. Customers don't sign in to it.
What is saved
| Information | Why |
|---|---|
| Team accounts: email, name, access level, last time they used the app. Passwords are stored by the sign-in service only as a one-way hash. If 2-step sign-in is on, the key for the authenticator app. | To let each person sign in and see only what their job needs. |
| Deals: deal number, dates, vehicle, lender, amounts, profit, commission and status. | The sales log, reports and the weekly wash-out. |
| For payment reminders: the customer's first name, phone, email and language. | Reminders for pickups and the first car payments. |
| Payments: amounts, due dates, how they were paid, receipt numbers and notes written by the team. | Tracking what's owed and what was received. |
| Buy-here-pay-here (in-house loan) accounts: the customer's name, phone, email, address and language, the car, the loan terms, every payment, and notes, promises to pay and payoff quotes written by the team. | Running the loan: balances, reminders, receipts and payoffs. |
| Service records: the customer's name, phone, email, address and language, their cars (VIN, stock number, plate, miles), what the dealership owes them after a sale, appointments, parts orders and notes written by the team. | Keeping the promises made at the sale, scheduling, appointment reminders and service history. |
| Activity log: who added, changed or deleted a record and when, and which fields changed (not the values). | Accountability and finding mistakes. |
What is never saved
- Credit applications, credit reports, bills of sale, contracts and funding sheets. They are read inside the browser on your own computer or phone and are never uploaded.
- Social Security numbers, dates of birth, driver's license or bank account numbers.
- Card numbers. The customer writes them by hand on the printed card authorization.
- The buyer's full name and address read from the bill of sale. They are printed on the receipt and then forgotten. (A BHPH account or a service record keeps the name and address the team types into it.)
Where it is kept
- Supabase stores the records and runs sign-in, in the data center region chosen when the dealership set up its project. Connections are encrypted, and so is the stored data.
- The web host only serves the app's pages. It does not receive the records.
- Google Fonts provides the typefaces, so your browser contacts Google when a page loads.
- Have I Been Pwned checks new passwords against known data breaches. Only the first 5 characters of a scrambled code made from the password are sent, never the password itself.
On your device
The browser keeps your sign-in until you sign out. If you didn't tick "keep me signed in", it ends when the browser closes. It also remembers screen settings, and the last inventory export you dropped. On a shared computer, that export is cleared when you sign out. The app sets no advertising or tracking cookies.
Who can see what
The owner sees everything. The finance desk sees its own store's sales log, lender results and payments. A payments-only person sees the payments and BHPH accounts the owner chose to share, and nothing about cost, profit or commission. The service department sees only service records: customers, their cars, what's owed, appointments and parts orders. The database enforces these rules.
Keeping it safe
The owner can require 2-step sign-in for everyone, set how long an idle computer stays signed in, turn off a person's access at once, review the activity log and download a backup. Deleted records are emptied right away.
Questions
Ask the dealership's owner or office manager.