Privacy Policy

What we collect

We collect information shoppers submit in an inquiry, including contact details, vehicle needs, budget range, trade-in and timing details, and an optional message. We also collect account, profile, content, and operational information from salespeople who use LotBoss. When a salesperson accepts publication terms, we retain the agreement version, acknowledgment version, acceptance time, storefront, acceptance method, browser user agent, and an IP address when available and appropriate for an auditable acceptance record.

How inquiries work

When you submit a storefront inquiry, it is sent to the named salesperson and their dealership so they can respond about that inquiry. LotBoss does not use that submission to add you to an unrelated marketing list.

Why we use information

We use information to operate storefronts, route and deliver inquiries, send transaction-related messages, protect forms from abuse, maintain security, and support the service. Abuse controls use rotating cryptographic hashes rather than retaining raw IP addresses.

Service providers and security

LotBoss uses service providers for hosting, database storage, bot protection, and transactional email delivery. No system can promise perfect security; we use reasonable safeguards appropriate to the service and limit access to operational data.

Retention

We retain leads and account records while needed to operate the service or meet legitimate business and legal needs. Short-lived abuse and delivery-deduplication records are retained only for their operational purpose. We do not promise a deletion timeline that is not operationally supported.

Cookies, analytics, and children

LotBoss uses essential browser storage for sign-in and service operation and Google Analytics 4 to understand aggregate traffic sources, campaign performance, page use, storefront engagement, and completion of important product flows. LotBoss preserves non-sensitive first- and latest-touch campaign attribution in first-party browser storage for up to 90 days. Analytics is configured without advertising personalization or Google signals, respects browser Do Not Track, and is not sent when required analytics consent has not been granted. Names, email addresses, phone numbers, private messages, form answers, authentication tokens, and other direct personal identifiers are not intentionally sent to Google Analytics. The service is not directed to children.

Your choices and contact

You may ask to access, correct, or delete information we hold, subject to applicable obligations. Contact ChatDIY Inc. d/b/a LotBossApp at hello@lotbossapp.com.

9511 Phipps Lane, Wellington, FL 33414

Updates

We may update this policy as the service changes. The version and effective date above identify the current policy.