Legal
Privacy Policy
This policy explains how Automotive.ad ("we") handles information when you use https://automotive.ad and the Automotive.ad application. It is written to match what the product does today; when the product changes, this page changes with it.
Last updated
Who we are
Automotive.ad is operated by the operator of automotive.ad. For any question about this policy or your data, write to contact@automotive.ad.
What we collect
We collect only what the product needs to work. Nothing on this list is sold, and nothing is collected for advertising to you.
- Account: your name, email address, and a password. Passwords are stored only as a salted hash; we cannot read them.
- Brand Kit: the dealership details you enter — name, location, phone, website, tone of voice, call to action, disclaimers. These describe your business, not individuals.
- Generation requests and results: the vehicle and offer facts you enter, the formats you choose, and the text the generator returns, saved to your history so you can reopen it.
- Usage: a count of generations per billing period and the plan you are on.
- Billing: when you subscribe, Stripe gives us a customer identifier and the status, plan, and period of your subscription. We never receive or store card numbers.
- Technical: your IP address is used to rate-limit sign-in and API requests and appears in short-lived operational logs. We record which AI provider and model produced each result and how many tokens it used.
How we use it
To create and secure your account, to generate the advertising copy you ask for, to save it to your history, to enforce the limits of your plan, to bill your subscription, and to keep the service reliable. We do not profile you, and we do not use your content to train AI models.
AI providers
When you generate ads, the vehicle facts, the offer, and your Brand Kit details are sent to a third-party AI provider that produces the text. Your account credentials, payment details, and other customers’ data are never included in these requests.
We currently use one of the following providers, selected by our configuration: OpenAI (United States) and DeepSeek (People’s Republic of China). Requests are made with provider-side storage disabled where the provider offers that option. Each provider processes data under its own terms and may retain request data for abuse monitoring for a limited period; see the providers’ published policies for their current retention terms. If the choice of provider matters for your business, contact us before subscribing.
Other service providers
We rely on a small number of providers to run the service. Each one receives only what its function requires.
- Cloudflare hosts the application and stores the database; traffic to the site passes through its network.
- Stripe processes payments and manages subscriptions. When you check out, you enter your card on Stripe’s hosted page, and Stripe’s privacy policy applies to that data.
The site sets one strictly necessary cookie that keeps you signed in. It is HttpOnly, sent only over HTTPS in production, and is removed when you sign out. We use no analytics, advertising, or tracking cookies, and no third-party scripts run in your browser.
How long we keep it
Your account, Brand Kits, and generation history are kept until you delete them or close your account. Deleting a generation removes its text and request permanently. Subscription and invoice records are kept as long as accounting and tax rules require. Operational logs and rate-limit counters are short-lived.
Your choices and rights
You can view and change your name in Settings, edit or delete Brand Kits and generations at any time, and sign out of all other devices from Settings. Subscription changes and cancellation are handled in the Stripe billing portal.
To close your account, export your data, or ask what we hold about you, write to contact@automotive.ad. Self-service account deletion is not available yet; we will complete deletion requests within 30 days. Depending on where you live, you may have additional rights under local law, which we will honor.
Security
All traffic is encrypted with HTTPS. Passwords are hashed with a modern key-derivation function. Every record in the database is tied to the account that owns it and is only ever read or changed on behalf of that account. Secrets used to talk to our providers are stored on the server and never reach your browser.
Business use
Automotive.ad is a tool for dealerships and marketing teams. It is not directed at children, and we do not knowingly collect information from anyone under 18.
Changes to this policy
When we change how the product handles data, we update this page and its date. Material changes will also be announced on the blog or by email to account holders.