Privacy Policy
This policy explains what information AutoFire collects, how we use it, and how you can manage or delete it.
When you set up a dealership, we collect its dealer license number and issuing state to review eligibility. We also record your acceptance of our Terms of Service and Privacy Policy, including the accepting account, time, and policy versions. These records are associated with your dealership and used for account administration.
Introduction
This policy describes how AutoFire ("we", "our", or "us"), a product offering of Intuico Digital, collects, uses, and shares your information when you use our website, services, and applications (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Services.
AutoFire Dealer mobile app
AutoFire Dealer lets authorized dealership users manage inventory, photos, and buyer inquiries. We process your account identifier and sign-in information to authenticate you and check which dealerships you can access. Supabase provides authentication, database, and storage services. The app stores its sign-in session in the device's secure storage.
If you choose Google sign-in, Google processes information under its own privacy policy. Its sign-in SDK declares collection of name, email address, phone number, approximate location, user and device identifiers, usage information, and other technical data for sign-in functionality and analytics. The app does not request access to your device's precise location or contacts. See Google's Privacy Policy.
When you add or edit inventory, we store the vehicle details, descriptions, and photos you submit. Listing photos may be published on your dealership website. Camera and photo-library access are optional and used for the images you choose. VIN photos can be sent to AutoFire's OCR service to read the VIN; VIN decoding sends the VIN to the U.S. National Highway Traffic Safety Administration. Authorized users can view buyer contact information and inquiries and save lead status changes. Calling or emailing a buyer opens your device's phone or email app.
Optional AI description generation sends the vehicle's VIN, specifications, price, mileage, features, and current description to OpenRouter and its AI model providers. Do not put personal customer information in those fields. You can write a description without using AI. Review OpenRouter's Privacy Policy before using this feature. Data already sent to a provider is subject to that provider's retention practices.
Our hosting and update providers, including Vercel and Expo, process network, device, app-version, update, and diagnostic information to serve requests, deliver compatible updates, and investigate errors. The native app does not display third-party ads or request permission to track you across other companies' apps and websites. Analytics and advertising on our websites are described separately below.
Account deletion and retention
In AutoFire Dealer, open Profile, choose Delete account, and continue to your account page in the browser. Sign in if needed, then choose Delete Account and confirm. You can also open your account page directly. This removes your account and associated dealership data and starts cancellation of active subscriptions. Review the confirmation before proceeding: deleting a dealership owner's account also affects that dealership's website, inventory, and team access.
We retain account and dealership records while needed to provide the service or until deletion is requested. Billing records, security logs, and provider backups may remain for their operational or legal retention periods. For access, correction, deletion, or retention questions, contact info@intuicodigital.com.
Facebook Page publishing and data deletion
When a dealership connects Facebook, we store its granted business and Page identifiers, Page name, encrypted authorization tokens, and the AutoFire account that connected it. We use this access to publish authorized vehicle listings and update or remove AutoFire-created posts when vehicles are sold or deleted. We retain posting identifiers, status, and a VIN history to prevent duplicate posts. We do not request access to your personal Facebook feed, friends, or messages.
A dealership owner or administrator can open Dashboard, Distribution, Facebook Page, and choose Disconnect. This deletes stored authorization tokens and stops future publishing and cleanup. Existing Facebook posts remain on the Page, and the VIN history remains to prevent reposts. You can also remove AutoFire through Meta's business integration settings and delete posts directly on Facebook.
To request deletion of Facebook connection data, email privacy@goautofire.com with your dealership name, Facebook Page identifier or link, and the email used for your AutoFire account. Do not send passwords or tokens. After verifying your authority, we delete the Facebook connection data; we retain only the dealership's vehicle duplicate-prevention record while its AutoFire account remains active. Deleting the dealership account also deletes that record. Removing connection data does not delete content already published to Facebook; the Page administrator can remove it there.
AI Features
Some AutoFire features use AI models to generate text. For each request, we send the information that feature needs to OpenRouter, which routes it to an AI model provider. Review OpenRouter's Privacy Policy. Information already sent is subject to the provider's retention practices.
- Website assistant on dealership websites. If you chat with a dealership website's assistant, your messages, recent conversation history, and the dealership's public details and vehicle information are sent to generate a reply. We store the conversation with a visitor identifier, IP address, and browser information so the dealership can follow up and so we can prevent abuse. If you ask for a follow-up or test drive and provide contact details, they are shared with the dealership as an inquiry. Please do not share sensitive information, such as government ID or financial account numbers, in the chat.
- LotIQ for dealership users. Daily briefings may include the names of new leads and recent vehicle activity. Follow-up drafts use a lead's first name, inquiry message, status, and vehicle. Review-response drafts use the review's rating and text. Drafts are shown to a dealership user to edit and are not sent to customers automatically.
- Vehicle descriptions. Optional description generation uses the vehicle details described in the mobile app section.
Marketing pages and stock photography
Our public marketing website may display photographs or graphics from licensed third-party sources (for example, stock imagery from Unsplash) to illustrate product and industry context. That imagery is not user-generated dealership content. Use of such assets on our marketing pages is described in our Terms of Service (Marketing website imagery). Viewers should not assume that vehicles, locations, or businesses shown in stock photos are real customers, endorsements, or representative of any specific dealer unless expressly stated.
Dealership Websites and User Interactions
AutoFire provides website creation and hosting services for automotive dealerships. When you visit or interact with a dealership website created through our platform (typically accessed via a subdomain such as dealership-name.goautofire.com), you should be aware of the following:
- The website is provided by AutoFire as a service to the dealership
- Content displayed on these websites (vehicle information, images, descriptions, etc.) is provided by the dealership, not by AutoFire
- When you submit forms on these websites (inquiries, contact requests, etc.), this information is processed by AutoFire systems and shared with the dealership
- Some dealership websites include an AI assistant. Its replies are generated automatically and may be inaccurate, so confirm price, availability, and other details with the dealership. See AI Features below.
- The dealership may review your inquiry with AutoFire's tools, including AI features and AI apps it connects to AutoFire (such as Claude, ChatGPT, or Grok). Those apps receive your name and contact details only if the dealership grants that permission.
- AutoFire is not responsible for the accuracy, legality, or appropriateness of content uploaded by dealerships
- AutoFire does not verify, endorse, or guarantee any vehicle listings, pricing, descriptions, or images provided by dealerships
- Any transactions, agreements, or disputes between you and a dealership are solely between you and the dealership
- AutoFire makes no representations or warranties regarding the quality, safety, legality, or availability of vehicles or services offered by dealerships
Notice to General Public: If you are visiting a dealership website created through AutoFire (such as dealership-name.goautofire.com), please understand that AutoFire only provides the technology platform. All content, vehicle listings, images, and business practices are the sole responsibility of the dealership. AutoFire is not involved in vehicle sales, does not verify vehicle information, and is not a party to any transaction between you and the dealership.
Information We Collect
We collect several types of information for various purposes to provide and improve our Services to you:
Personal Data
While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Cookies and Usage Data
Usage Data
We may also collect information about how you access and use our Services ("Usage Data"). This data may include information such as your computer's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Services that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
How We Use Your Information
We use the collected data for various purposes:
- To provide and maintain our Services
- To notify you about changes to our Services
- To allow you to participate in interactive features of our Services when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Services
- To monitor the usage of our Services
- To detect, prevent, and address technical issues
- To provide you with news, special offers, and general information about other goods, services, and events which we offer
Data Ownership and Responsibility
For dealership websites created through our platform:
- Dealerships retain ownership of content they upload (vehicle listings, images, descriptions, logos, etc.)
- Dealerships are responsible for ensuring their content complies with applicable laws and regulations
- AutoFire does not claim ownership over dealership-provided content
- AutoFire is not liable for inaccurate, misleading, or illegal content provided by dealerships
- End-user data collected through dealership websites (form submissions, inquiries) is shared with the respective dealership
- AutoFire is not responsible for how dealerships use, store, or process end-user data shared with them
- AutoFire is not responsible for the business success, sales performance, or customer service quality of dealerships using our platform
If you submit information through a dealership website, you should be aware that this information will be shared with the dealership. Each dealership has its own privacy practices, which may differ from AutoFire's.
Analytics and Tracking on Dealership Websites
Dealership websites created through AutoFire may incorporate the following analytics and tracking mechanisms:
- Basic analytics to monitor website traffic and performance
- Tracking of form submissions and inquiries
- Monitoring of vehicle listing views to create popularity metrics
- Session cookies for website functionality
This data is used to improve the website experience and provide dealerships with insights about customer interests.
Data Processing Activities
AutoFire processes personal data for:
- User authentication
- Website customization and subdomain generation
- Display and management of vehicle listings
- Forwarding customer inquiries
- Analytics and diagnostics
- Payment processing and account billing
Third-Party Listing Platforms and Costs
AutoFire may provide feed export and integration tooling so dealerships can distribute inventory to third-party platforms such as Google, Facebook, Cars.com, AutoTrader, and CarGurus. These third-party platforms are independent services with their own terms and privacy policies.
- AutoFire does not control third-party platform pricing, billing, or listing requirements
- Any listing, advertising, subscription, or other platform fees are charged directly by the applicable third party
- Those third-party fees are not included in AutoFire subscription pricing unless explicitly stated in writing
- When inventory data is submitted to a third-party platform, that platform may independently process related data under its own privacy practices
MCP, API, and Connected AI Apps
AutoFire lets dealership team members connect AI apps, such as Claude (Anthropic), ChatGPT and Codex (OpenAI), Grok (xAI), and Claude Code, to their dealership's AutoFire data through our Model Context Protocol ("MCP") server. We also offer a public API for status checks and VIN decoding. Every MCP tool is read-only.
- Signing in with AutoFire. When an AI app connects, it registers with our authorization service. You sign in, choose one dealership and the permissions the app gets, and approve. We store the connection: the dealership, the approving user, the app's client identifier, the permissions, and when it was created, last used, and revoked. Our authentication provider, Supabase, stores the app's registration details and issues short-lived access tokens that the app refreshes.
- API keys. For scripts and apps that only accept a token, team members can create keys that expire after 30, 60, or 90 days. We store a cryptographic verifier and a short identifying prefix, not the full key after it is first shown, along with its dealership, permissions, creator, expiration, revocation status, and last-used time.
- Who can connect. Any accepted member of a dealership's team can connect an AI app or create a key. Staff see and revoke their own; owners and administrators can see and revoke all of the dealership's connections and keys. A member's connections and keys stop working when they leave the team.
- Permissions. Every connection and key is limited to one dealership and the permissions selected. Lead lists and follow-up priorities do not include names, email addresses, phone numbers, messages, or notes. One lead's contact details are available only with the separate Lead contact details permission.
- Usage and security records. We count tool calls for each dealership every month to apply its plan's allowance and show usage in the dashboard. We log limited metadata for each call, such as the connection or key identifier, tool name, outcome, timing, and a one-way hash of the network address. We do not intentionally store keys, tokens, or returned lead content in these records. MCP audit metadata is generally retained for up to 90 days unless a longer period is reasonably necessary for security, fraud prevention, legal compliance, or dispute resolution.
- Public API. The VIN decoding endpoint sends the VIN to the U.S. National Highway Traffic Safety Administration. We process network information to apply rate limits.
When a dealership connects an AI app, the information that app requests through AutoFire is sent to and processed by the app's provider, such as Anthropic, OpenAI, or xAI, under that provider's own terms and privacy policy. The dealership chooses the connection and should review the provider's data-retention and model-training settings, especially before granting Lead contact details. Disconnecting an app in Dashboard → MCP & API → Connected AI apps, or revoking a key, stops future access but does not delete information already sent to the provider.
Cookies and Tracking Technologies
We use cookies for session management, functionality preferences, and analytics. By using AutoFire, you consent to our use of cookies in accordance with this policy. You can manage your cookie preferences through your browser settings.
Your Consent
By using our Services, you consent to our Privacy Policy. If we make any changes to our Privacy Policy, we will publish updates here on this page.
Disclosure of Information
We may share or disclose your Personal Data only in the following circumstances and only to the extent necessary:
- To Service Providers: We use trusted third-party hosting, storage, authentication, analytics, and payment service providers (including Stripe) to operate our platform, deliver dealership websites, and store user data. These providers process data on our behalf under contractual obligations to safeguard your information and use it only for the purposes we specify.
- To AI Providers: To run the AI features you or a dealership use, as described in AI Features, and with AI apps a dealership connects, as described in MCP, API, and Connected AI Apps.
- For Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- With Your Consent: With your consent in any other cases.
- For Legal Requirements: If required by law or in response to valid requests by public authorities.
- To Protect Rights: To protect and defend the rights or property of AutoFire.
Third-Party Infrastructure
Dealership websites created on AutoFire are served through third‑party hosting providers, and user data (including personal information and media content you upload) may be stored with third‑party cloud services. These service providers act as our processors and are contractually required to protect your data and process it only on our instructions. We may change service providers from time to time at our discretion.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By email: privacy@goautofire.com
- By phone: (312) 661-5726
- By visiting the Contact Page on our website
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that someone under 18 has provided us with personal information, we will take steps to delete such information. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.
Data Breach Notification
In the event of a data breach, we will notify affected users via email and/or a prominent notice on our website within 72 hours, in accordance with applicable laws and regulations.
Third-Party Links
Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Data Portability
You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format. To request a copy of your data, please contact us at privacy@goautofire.com.