SMS Messaging Privacy Policy

1. Information We Collect

When you opt in to receive SMS messages from DealerCX or a dealership using the DealerCX operating system, we collect the following:

• Your mobile phone number
• Your consent to receive SMS messages, including the date, time, and method of opt-in
• Your name and basic contact information
• Your email address, where provided
• Your messaging history, including messages sent and received
• Vehicle information and service or sales history, where relevant to dealership communications

We may collect this information directly from you (such as when you complete a form or contact a dealership) or automatically through your interactions with the DealerCX platform or a dealership's website.

2. How We Use Your Information

We use the information collected in connection with SMS messaging to:

• Send you the SMS messages you have opted in to receive, including marketing messages, appointment reminders, service updates, and general two-way communication
• Provide updates, promotions, or relevant content based on your preferences and vehicle or service history
• Operate and improve the DealerCX platform and messaging features
• Comply with applicable laws, carrier requirements, and our Terms of Service

3. How We Share Your Information

We do not sell your personal information.

We do not share your phone number, SMS consent, or opt-in data with third parties or affiliates for their own marketing or promotional purposes.

We may share your information in the following limited circumstances:

With Your Dealership

Your information is shared with the affiliated automotive dealership that initiated or manages the SMS communication, as the data controller for that dealership-customer relationship.

With Service Providers

We work with trusted third-party providers to deliver SMS messages on our behalf, including:

• Twilio: SMS message delivery
• Amazon Web Services (AWS): Secure data storage and processing
• Amazon SES: Transactional and notification emails

These providers are contractually required to protect your information and may only use it to perform services on our behalf.

For Legal or Business Reasons

We may disclose your information to affiliated companies, business advisors, or consultants who provide services to us; in connection with a merger, acquisition, reorganization, or sale of assets; as required by law, regulation, subpoena, or legal process; or to assert or defend against legal claims.

4. Data Security

DealerCX takes steps to protect your information against unauthorized access, use, or disclosure. Our security practices include:

• Encryption of all data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Infrastructure hosted on AWS with SOC 2 compliant data centers
• 24/7 security monitoring and intrusion detection
• Regular security assessments and penetration testing

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

Communication logs, including SMS message history and opt-in consent records, are retained for three years for compliance purposes. Account and contact data is retained for the duration of the account plus 90 days following a deletion request.

6. Your Choices and Controls

You may opt out of receiving SMS messages at any time by replying STOP to any message we send you. After opting out, you will receive one additional confirmation message. You may also reply HELP at any time to receive support contact information.

To request access to, correction of, or deletion of your personal information, contact your dealership administrator or reach DealerCX support at:

• Email: [email protected]
• Support: [email protected]

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, opt out of sale or sharing, and freedom from discrimination for exercising these rights.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. To submit a California privacy request, contact [email protected].

8. Changes to This Policy

We may update this SMS Messaging Privacy Policy from time to time. When we make material changes, we will update the effective date above. For significant changes, we may notify you via SMS or email prior to the change taking effect. We encourage you to review this policy periodically.

9. Contact Us

For SMS support, reply HELP to any message or contact [email protected] directly.