Privacy Policy

Who this policy covers

DealerQuote Machine is a private customer relationship management application for authorized dealership staff. It is not available for public account registration. This policy explains how information is handled when staff use the CRM or connect a Google account for outbound email.

Information we process

• Staff account information, including name, work email, role, login and security records.
• Customer, quote, inventory, document, attachment, and workflow information entered by authorized staff.
• Outbound delivery records, such as recipient details, optional message text, status, timestamps, and provider message identifiers.
• For Gmail connections, the authorized Google email address and OAuth access and refresh tokens.

How Google user data is used

When a staff member chooses to connect Gmail, DealerQuote Machine requests basic Google account identity information and the gmail.sendpermission. The CRM uses that permission only to send an email the signed-in staff member initiates, from the Google account that person authorized. It does not request permission to read, modify, or delete Gmail mailbox content, and it never receives the user's Google password.

OAuth tokens are encrypted before they are stored. A Gmail connection belongs to the individual CRM user who created it and is not exposed in browser code or shared with other CRM users.

DealerQuote Machine's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Why information is used

Information is used to operate and secure the CRM, manage dealership workflows, prepare quotes and documents, send user-requested customer communications, troubleshoot failures, maintain audit history, and comply with applicable business or legal obligations.

Sharing

Information may be processed by service providers needed to operate the CRM, including Google Cloud infrastructure and Google's Gmail API when a user sends an email. Information may also be disclosed when required by law or to protect the security and rights of the business and its users. We do not sell Google user data or customer information.

Retention and security

Information is retained for legitimate dealership operations, security, recordkeeping, and legal requirements. Gmail tokens are encrypted at rest, network traffic uses HTTPS, and operational CRM access requires an administrator-created staff account. No system can guarantee absolute security.

Your choices

Staff can disable the CRM's use of their Gmail connection from Email Settings. They can also revoke access from their Google Account permissions. For questions, access requests, correction, or deletion requests, contact the application owner at MBonestroo10@gmail.com.