Privacy policy

Lotpad is management software for car dealerships: inventory, website, contracts, financing and social posting. This policy explains what personal information we collect, why, who we share it with and what your rights are, under Québec’s Act respecting the protection of personal information in the private sector (Law 25) and applicable Canadian law.

Who is responsible

Lotpad’s person in charge of the protection of personal information can be reached at [email protected]. Any question, request or complaint about your information can be sent there.

Dealers and their customers. The information a dealer enters in Lotpad about its own customers (buyers, requests from its website, contracts, documents) belongs to that dealer, who is responsible for it. Lotpad hosts and processes it on the dealer’s behalf and on its instructions. If you are a dealer’s customer, contact that dealer first; we will help them answer you.

What we collect

• Account: name, email address, password (stored as a one-way hash, never in plain text), role and language. If you sign in with Google, Google gives us your name and verified email address.
• Dealership: name, address, phone, licence and tax numbers, logo, photos and site settings.
• Dealer content: vehicles and photos, customers, contracts, documents, loans, payments, appointments and anything else the dealer chooses to enter.
• Website requests: when a visitor fills in a form on a dealer’s site, their name, email, phone and message are sent to that dealer.
• Technical data: IP address and browser at sign-in, server logs and a log of emails sent, for security and troubleshooting.

Why we use it

• To provide the service: sign you in, show your data, publish your inventory, send your emails (password resets, request alerts, quotes).
• To protect accounts: limit sign-in attempts, detect abuse.
• To bill the subscription and contact you about your account.

We do not sell personal information, we do not use dealers’ or their customers’ data for advertising, and we do not use it to train artificial intelligence models.

Cookies

Lotpad only uses cookies it needs to work: one that keeps you signed in (30 days) and ones that secure signing in with Google or Facebook (a few minutes). No advertising or analytics cookies. If a dealer turns on the map on their site, it is loaded from Google Maps, which applies its own rules.

Who we share it with

We use service providers to run Lotpad. Each receives only what its task needs:

• Cloudflare: routing and protecting traffic, storing photos and files.
• Resend: sending email.
• Google: Google sign-in, if you choose it; maps on dealer sites.
• Stripe: subscription payments, when online billing is used.
• Social networks (Meta, TikTok, Google Business): only if the dealer connects their accounts, to post their vehicles.
• AI providers (Anthropic, OpenAI): only if the dealer connects their own key, to write vehicle descriptions from the vehicle’s details.

The application and database are hosted in Québec, Canada. Some of the providers above process information outside Québec, including in the United States, where it may be subject to local law. We will also disclose information where the law requires it.

Security

Connections are encrypted (HTTPS), passwords are hashed, social network access tokens and AI keys are encrypted, and access to the servers is restricted. Each dealership only sees its own data. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and the people affected.

Retention

We keep information while the account is active. When a dealership is deleted, its data is removed from our systems; backup copies are erased within 14 days after that. Password reset links expire after one hour.

Your rights

You can ask to access your information, correct it, delete it, receive a copy in a common format, or withdraw your consent. Write to [email protected]; we will answer within 30 days. If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec.

Changes

If we change this policy in a significant way, we will email dealers before it takes effect. The date at the top of the page shows the latest update.