Privacy
Privacy policy
Last updated October 29, 2026
Spotr collects only what it needs to help dealer buying desks evaluate vehicles. We don't sell personal information, and we don't use it for advertising.
What we collect
- Access requests. When you request access we store your name, work email, dealership, role, and any message you include, so we can respond.
- Account details. Your sign-in email and a securely hashed password. A session cookie keeps you signed in; it is required for the app to work.
- Workspace data. Vehicle listings from our licensed data provider, and the actions your team takes on them — watches, passes and their reasons, stage changes, follow-ups, recorded offers, and notes.
- Practice chat. Messages you type in the practice chat, and the simulated replies.
What we don't collect
Spotr does not collect private sellers' phone numbers, does not scrape marketplaces, and does not log in to third-party sites on your behalf. Listing data includes only the seller name the provider supplies.
Who processes data for us
- Our licensed vehicle-data provider receives the search area you choose (ZIP code and radius) when your team pulls listings.
- Google (Gemini API)receives your practice-chat messages, the conversation so far, and the listing's year, make, model, mileage, city and state, and the seller name the provider supplies, to generate the simulated seller's replies. Practice chat never contacts a real seller.
- Our hosting provider stores the application database.
- Sentry, if error monitoring is enabled, receives crash reports: the error, the page it happened on, and browser and device details. Request contents, cookies, IP addresses, and signed-in user details are not sent, and email addresses and VINs are removed from error text. Performance tracing is off.
If privacy-friendly, cookieless analytics are enabled, they record aggregate page views without identifying you.
How long we keep it
We keep workspace data — including practice-chat history — and account data while your account is active. Access requests stay on file while we're in touch; once archived, they're deleted automatically after 90 days. You can ask us to delete your data sooner at any time.
Your choices
To access, correct, or delete your information — or to opt out of further contact — email [email protected]. We'll confirm once it's done.
Changes
If we change how we handle data, we'll update this page and the date above.