Security and where your data lives

Supabase holds the database and sign-in. Cloudflare hosts the website and runs the bot check on sign-in. Stripe takes payments; we never see or store your card number.

Data is stored in the United States.

Data travels encrypted (HTTPS) and is encrypted at rest by our database provider.

Every dealership sees only its own data, and that rule is checked inside the database itself.

We don’t ask for customer information, and the app refuses VINs. That check cannot catch every VIN format or every kind of customer information, so keep both out of the fields.

Deal Jacket paperwork stays in a folder on your own computer. Docket Auto never uploads it.

Owner: everything for the dealership, plus billing, cancelling, CSV export and inviting staff.

Staff: see and update the deal list. The sales board only if the owner turns it on.

The showroom TV link shows first names, car colors and deal counts. Never amounts, deal numbers or customers.

After your paid time ends, your account is read-only and exportable as a CSV file until deletion.

We delete it within 30 days after you ask, and in any case within about 120 days of your paid time ending. Nightly backups are kept 7 days.

Your data is never sold, never used for advertising and never used to train AI.

Full detail: Privacy policy, Cancellation policy.