Privacy Policy

Summary

RooftopOS ("RooftopOS", "we") provides dealer-tech software (AutoCurb, AutoLabels, AutoFilm) to franchised and independent automotive dealerships. This Privacy Policy explains what we collect, how we use it, and the choices dealerships and their customers have. The dealership is the data controller for customer data; RooftopOS is the processor.

What we collect

• Dealership account data — names, emails, roles, store(s), DMS connection metadata.
• Consumer data submitted to a dealership through RooftopOS — name, contact, vehicle (VIN, make/model/condition), photos, signatures, and messaging consent records — stored against the version of the consent language the person was shown.
• What you send through this website — separately from the product, and only if you use a form here. Demo, contact and proof-of-value enquiries (name, email address, phone number, dealership name, message body, and which page the submission came from), newsletter subscriptions (email address), and review submissions. A submission is stored in our database and is also relayed to an internal team-messaging workspace so that a person sees it. Booking a demo leaves this site: the name, email address, time zone and booking-form entries are held by our scheduling provider until deleted.
• Telemetry and error diagnostics — module usage and application error logs. Where the error-monitoring service is configured, a client-side error also captures a session replay of the page it happened on. Text, inputs and media are masked in the browser before the replay is sent, so it records layout and clicks rather than what was typed. Page addresses are recorded, and an unsubscribe link carries the recipient’s email address in that address. No third-party advertising trackers.

How we use it

• To deliver the modules the dealership has subscribed to.
• To run the disclosure and consent steps each dealership configures for its own store, and to capture consent against the version of the language shown.
• To retain the disclosure, consent, and document records a workflow produces with the deal record they belong to.
• For internal product reliability and security monitoring.

What we don't do

• We don't sell consumer data.
• We don't share data between dealerships.
• We don't use consumer photos or videos to train third-party AI models.

Who else processes it

RooftopOS uses a small number of third parties: to host and store, to monitor errors, to send email, to notify our own team internally when you submit a form, and to schedule demos. Every one of them is named in the sub-processor register on the Trust Center, with what it can see, where it processes, and how long it keeps it. The same register drives the Data Processing Agreement, so the two cannot disagree. Written notice is given 30 days before a sub-processor is added — the same period the DPA commits to.

Retention

RooftopOS does not publish a retention schedule. The periods that apply to dealership records, to consumer disclosure and consent records, and to AutoFilm video are set in the executed agreement with each dealership, which is also where any record-keeping obligation the dealership is itself subject to is identified. Backups sit with the storage provider on its own schedule, so a deleted record persists in a backup until it ages out.

Your choices

Dealerships can request an export or a deletion by contacting RooftopOS. There is no self-service export or deletion control in the product today, and none is represented here. Consumers can request access, correction, or deletion through the dealership, which RooftopOS assists with as processor. No turnaround time is published — the timeframes that apply are those in the executed agreement and in applicable law.

Newsletter subscriptions are separate from any dealership relationship and can be ended without one: use the unsubscribe link in any email we send, or write to us and ask. The subscriber record is stored under its own access boundary and is deleted on request.

Contact

Questions: Contact support.

This page is a plain-language summary. The signed Data Processing Agreement (DPA) and Master Services Agreement govern the legal terms between RooftopOS and a subscribing dealership.