Privacy Policy

 

Important distinction used throughout this Notice

AutoPLai does not sell Personal Information in exchange for money. Except for Mobile Messaging Data, AutoPLai may license certain Personal Information to Clients or Authorized Platform Partners for marketing and advertising campaigns. Depending on the law that applies, those activities may be treated as a “sale,” “sharing,” or targeted advertising, and eligible consumers may opt out.

AutoPLai does not sell, rent, license, or disclose mobile phone numbers or SMS/MMS consent to third parties or affiliates for their own independent marketing or promotional purposes.

This Privacy Notice explains how AutoPLai and its affiliates collect, use, disclose, license, retain, and protect Personal Information through AutoPLai.com, other AutoPLai-owned websites, software, products, applications, social media pages, emails, mobile messaging programs, and other services that link to this Notice (collectively, the “Services”).

This Notice also explains the roles of AutoPLai, its Clients and Authorized Platform Partners, and unrelated third parties. It does not apply to independently operated websites, applications, products, or services that do not link to this Notice.

Contents

Scope and Roles

This Notice applies when AutoPLai determines the purposes and means of processing Personal Information, such as information collected from visitors to AutoPLai-owned Sites, account holders, business contacts, and users who communicate directly with AutoPLai.

AutoPLai also provides technology and data-processing services to Clients and Authorized Platform Partners. In those situations, the Client or Authorized Platform Partner may determine why and how Personal Information is processed, and AutoPLai may act as a service provider, contractor, or processor on that organization’s behalf. The organization’s privacy notice may also apply. Privacy requests concerning data controlled by an Authorized Platform Partner may need to be directed to that partner, although AutoPLai will assist as required by contract and law.

Key Definitions

“Personal Information” or “Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include deidentified or aggregated information where permitted by law.

“Mobile Messaging Data” means a mobile phone number; SMS or MMS consent; opt-in, opt-out, HELP, and STOP records; message content; and messaging metadata associated with an AutoPLai mobile messaging program.

“Clients” means businesses and organizations that purchase or use AutoPLai products, software, data, campaign, analytics, or platform services.

“Authorized Platform Partners” means enterprise customers, publishers, financial institutions, retailers, dealerships, marketplace operators, and other authorized organizations that operate, sponsor, or participate in an AutoPLai-powered experience to provide products, services, appointments, transactions, communications, or information requested by a consumer.

“Unrelated Third Parties” means organizations that are not AutoPLai affiliates, service providers, contractors, Clients, or Authorized Platform Partners acting within an authorized purpose. Unrelated Third Parties do not receive Mobile Messaging Data for their own independent marketing or promotional purposes.

“Process” or “Processing” means any operation performed on Personal Information, including collecting, using, storing, analyzing, disclosing, licensing, transmitting, or deleting it.

Personal Information We Collect

The Personal Information we collect depends on how you interact with the Services, the features you use, the Authorized Platform Partner involved, and applicable law.

Information You Provide
  • Contact and identifier information. Name, postal address, email address, telephone number, account username, online identifiers, and similar contact details.
  • Account and authentication information. Account credentials, password or authentication data, preferences, and account settings.
  • Transaction and financial information. Payment information, billing details, bank routing or account information, self-reported credit information, and transaction records. Payment card information may be processed directly by payment providers rather than stored by AutoPLai.
  • Vehicle and product-interest information. Vehicle identification number, make, model, year, vehicle preferences, products or services considered, and purchase or inquiry history.
  • Communications and customer service information. Messages, chat or chatbot content, form submissions, call recordings where permitted, emails, support requests, survey responses, and information you provide through QR codes or interactive features.
  • Mobile Messaging Data. Mobile number, consent records, messaging preferences, message content, and related SMS/MMS records when you enroll in or interact with a messaging program.
  • Professional or business information. Job title, employer, business contact details, and information relevant to a commercial relationship.
  • Other information you choose to provide. Any other information submitted through the Services or provided with your consent.
Information Received from Other Sources
  • Clients and Authorized Platform Partners, including information needed to operate an AutoPLai-powered experience or fulfill a consumer request.
  • Affiliates, service providers, contractors, and business partners.
  • Social media platforms and networks when you interact with AutoPLai pages or features.
  • Publicly available and commercially available sources.
  • Employers or subscription administrators, where a business provides access to the Services.
Information Collected Automatically
  • Device and network information. IP address, device identifiers, mobile advertising identifiers, browser type, operating system, device type, language, and connection information.
  • Usage information. Pages and content viewed, time spent, links clicked, search queries, referring URLs, access times, interactions with advertisements, and feature usage.
  • Cookie and tracking information. Information collected using cookies, pixels, web beacons, software development kits, local storage, server logs, and similar technologies.
  • Location information. Approximate location inferred from IP address, such as city, state, or ZIP code. We do not collect precise geolocation unless separately disclosed and authorized.
  • Inferences. Preferences, interests, likely vehicle or product interests, commercial tendencies, and other inferences derived from the information described above.
Sensitive Personal Information

Depending on the Service, AutoPLai may process account credentials, financial account information, credit-related information, or other information treated as sensitive under applicable law. AutoPLai uses sensitive Personal Information only as reasonably necessary to provide requested Services, maintain security, prevent fraud, comply with law, or for other purposes permitted without a right to limit. AutoPLai does not use sensitive Personal Information to infer characteristics about consumers unless separately disclosed and permitted by law.

Sources of Personal Information

  • Directly from you when you visit a Site, create an account, submit a form, use an interactive feature, scan a QR code, communicate with us, request information, or enroll in a messaging program.
  • From Clients and Authorized Platform Partners when they use AutoPLai to provide an experience, communication, product, service, appointment, transaction, or information you requested.
  • From your device and browser through automated technologies.
  • From social media platforms and other online services.
  • From affiliates, service providers, contractors, public records, and commercially available data sources.

How We Use Personal Information

AutoPLai may use Personal Information for the following business and commercial purposes:

  • Provide, operate, maintain, support, personalize, and improve the Services.
  • Process inquiries, transactions, appointments, product or service requests, and communications.
  • Create and administer accounts, authenticate users, and maintain records.
  • Enable AutoPLai-powered experiences on behalf of Clients and Authorized Platform Partners.
  • Communicate about accounts, transactions, Services, security, policy changes, customer support, and other requested information.
  • Send marketing communications where permitted and consistent with your choices.
  • Plan, personalize, deliver, measure, and improve marketing and advertising campaigns, including by licensing eligible non-mobile Personal Information as described in Section 8.
  • Conduct analytics, research, surveys, quality assurance, testing, debugging, and product development.
  • Use AI-assisted and automated tools to organize requests, support communications, identify relevant content or products, improve workflows, and detect suspicious activity. AutoPLai applies the commitments in this Notice to Personal Information processed through those tools.
  • Protect the security and integrity of the Services; prevent fraud, abuse, and unlawful activity; and enforce agreements.
  • Comply with legal obligations, respond to lawful requests, exercise or defend legal claims, and protect rights, safety, and property.
  • Carry out any other purpose disclosed at the time of collection, with consent, or as otherwise permitted by law.

When AutoPLai combines information from different sources, it treats the combined information as Personal Information when required by law.

Platform Services and Authorized Platform Partners

AutoPLai is an AI-powered Community-Connected Commerce™ infrastructure platform. It enables authorized organizations to provide connected digital experiences, communications, marketplace interactions, and commerce-related services to consumers.

Authorized Platform Partners are not described as unrelated third parties when AutoPLai processes Personal Information on their behalf and solely to provide the service, communication, appointment, transaction, product information, or other experience requested by the consumer. Examples may include a publisher presenting an AutoPLai-powered marketplace experience, a retailer responding to a product inquiry, a financial institution supporting a requested financing interaction, or a dealership handling a vehicle request.

An Authorized Platform Partner may have its own privacy practices and legal obligations. If a partner uses Personal Information for its own purposes beyond operating the requested experience, it may act as an independent business or controller under applicable law. This Notice does not limit any rights you may have against that partner.

How We Disclose Personal Information

AutoPLai may disclose Personal Information to the following categories of recipients for the purposes described in this Notice:

  • Affiliates. Companies under common control with AutoPLai for administration, support, security, and operation of the Services.
  • Service providers and contractors. Vendors that perform hosting, cloud storage, security, analytics, payment processing, customer support, CRM, communications, auditing, accounting, survey administration, and similar functions under contractual restrictions.
  • Clients and Authorized Platform Partners. Organizations that use AutoPLai to provide a requested experience or, excluding Mobile Messaging Data, to conduct authorized marketing or advertising campaigns as described in Section 8.
  • Advertising and analytics partners. Partners that help measure, personalize, deliver, or improve online advertising, subject to applicable consent and opt-out requirements. Mobile Messaging Data is excluded.
  • Professional advisers. Lawyers, accountants, auditors, insurers, and consultants who need access to provide professional services.
  • Government authorities and legal recipients. Courts, regulators, law enforcement, and other parties when required or permitted by law or necessary to protect rights, safety, and property.
  • Transaction participants. Potential or actual buyers, investors, lenders, successors, and advisers in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
  • At your direction or with your consent. Other recipients when you direct us to disclose information or provide consent.

AutoPLai may also disclose aggregated or deidentified information that cannot reasonably be linked to an individual or household, subject to applicable law.

Sale, Sharing, Licensing, and Targeted Advertising

Our position

AutoPLai does not sell Personal Information in exchange for money.

Except for Mobile Messaging Data and the other excluded data listed below, AutoPLai may license certain Personal Information to Clients or Authorized Platform Partners for marketing and advertising campaigns. Depending on applicable law, licensing or making Personal Information available for these purposes may be considered a “sale,” “sharing,” targeted advertising, or cross-context behavioral advertising, even when AutoPLai does not receive money specifically for the information.

 

Personal Information that may be licensed or made available for campaign purposes includes:

  • Identifiers and contact information, such as name, email address, postal address, online identifiers, and IP address, but not mobile phone numbers collected for SMS/MMS messaging or SMS/MMS consent records.
  • Vehicle information, product interests, commercial information, and transaction or inquiry history.
  • Internet or network activity, advertisement interactions, approximate location, and device information.
  • Inferences concerning preferences, interests, or likely purchasing behavior.

AutoPLai does not license or make available the following information for a recipient’s own independent marketing or promotional purposes:

  • Mobile phone numbers collected for messaging programs;
  • SMS or MMS consent, opt-in, opt-out, HELP, or STOP records;
  • SMS or MMS message content;
  • Account passwords or authentication credentials;
  • Government-issued identification numbers;
  • Financial account access credentials or full payment-card data;
  • Precise geolocation; or
  • Personal Information known to relate to a child under 16.

Where required, AutoPLai provides a “Do Not Sell or Share My Personal Information” mechanism and honors applicable opt-out preference signals, including the Global Privacy Control. An opt-out applies to activities treated as sale, sharing, or targeted advertising under the law that applies to you. It does not prevent disclosures to service providers, contractors, or Authorized Platform Partners solely to provide a product, service, communication, appointment, transaction, or information you requested.

Mobile Messaging & SMS Privacy

When you voluntarily provide your mobile phone number and consent to receive SMS or MMS communications from AutoPLai, your mobile number and SMS consent are used solely for communicating with you regarding the products, services, appointments, transactions, or information you have requested.

  • SMS consent is not a condition of purchase.
  • Message frequency may vary.
  • Message and data rates may apply.
  • You may opt out at any time by replying STOP to any message or request assistance by replying HELP.

AutoPLai acts as a technology platform and data processor for authorized enterprise customers, publishers, financial institutions, retailers, dealerships, and marketplace operators. When consumers interact with an AutoPLai-powered experience, AutoPLai may process communications on behalf of those authorized organizations solely to deliver the services requested by the consumer.

AutoPLai does not sell, rent, license, or disclose mobile phone numbers or SMS consent to third parties or affiliates for their own independent marketing or promotional purposes.

AutoPLai may disclose Mobile Messaging Data to messaging carriers, aggregators, platform vendors, service providers, and the applicable Authorized Platform Partner only as necessary to transmit messages, maintain consent and suppression records, provide the requested experience, prevent fraud or abuse, comply with law, or support the messaging program. Those recipients may not use Mobile Messaging Data for their own independent marketing or promotional purposes.

Your opt-out request will be applied to the applicable messaging program as required by law and industry rules. You may continue to receive non-marketing communications that are necessary to complete an active transaction, respond to your request, provide account or security information, or comply with law, unless those communications are also subject to your opt-out.

The restrictions in this Section apply specifically to Mobile Messaging Data. They do not prevent AutoPLai from processing or licensing other Personal Information collected separately, such as email addresses, postal addresses, vehicle interests, online identifiers, commercial information, or advertising interactions, as disclosed in Section 8 and subject to applicable opt-out rights.

Cookies, Analytics, and Online Advertising

AutoPLai and its service providers may use cookies, pixels, web beacons, software development kits, local storage, server logs, and similar technologies to operate the Services, remember preferences, understand usage, maintain security, measure performance, and support advertising.

Some technologies may allow AutoPLai and advertising or analytics partners to recognize your browser or device over time and across websites or services. Depending on applicable law, this activity may be treated as sharing, targeted advertising, or cross-context behavioral advertising. You may manage available choices through the cookie preference tool on the Site, browser or device settings, the “Do Not Sell or Share My Personal Information” mechanism, or a legally recognized opt-out preference signal.

Opting out of interest-based advertising does not stop all advertising. You may continue to see advertisements that are contextual, non-personalized, or based on information that is not subject to the opt-out.

Retention of Personal Information

AutoPLai retains Personal Information only for as long as reasonably necessary and proportionate for the purposes described in this Notice, unless a longer period is required or permitted by law. Retention periods are determined using criteria that include:

  • The duration of your relationship with AutoPLai, a Client, or an Authorized Platform Partner;
  • The time needed to provide the requested Services and maintain business and transaction records;
  • The sensitivity and volume of the information;
  • Security, fraud prevention, consent verification, suppression-list, and dispute-resolution needs;
  • Applicable statutes of limitation and legal, tax, accounting, regulatory, and contractual requirements; and
  • Whether the information can be deidentified or aggregated instead of retained in identifiable form.

Mobile Messaging Data may be retained as necessary to document consent, honor opt-outs, maintain suppression records, resolve complaints, and comply with legal or carrier requirements. STOP and other opt-out records may be retained to ensure that future messages are not sent contrary to your request.

Security

AutoPLai maintains administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication, encryption where appropriate, monitoring, vendor controls, employee training, incident-response procedures, and data-minimization practices.

No transmission or storage system can be guaranteed to be completely secure. You should protect account credentials, avoid sending highly sensitive information through unsecured channels, and notify AutoPLai at privacy@autoplai.com if you believe your information or account has been compromised.

International Processing

AutoPLai is based in the United States. Personal Information may be processed in the United States and other locations where AutoPLai, its affiliates, Clients, Authorized Platform Partners, service providers, or contractors operate. Those locations may have privacy laws that differ from the laws where you live. AutoPLai uses contractual, technical, and organizational safeguards appropriate to the nature of the processing and applicable law.

Children’s Privacy

The Services are not designed or intended for children under 18. AutoPLai does not knowingly collect Personal Information from children under 16 through the general-audience Services and does not knowingly sell or share the Personal Information of children under 16. A parent or guardian who believes a child has provided Personal Information may contact privacy@autoplai.com to request review and deletion.

U.S. State Privacy Rights

Residents of states with comprehensive privacy laws may have some or all of the following rights, subject to eligibility, exceptions, and verification requirements:

  • Access or know. Request confirmation of processing and access to Personal Information, categories collected, sources, purposes, and recipients.
  • Data portability. Receive certain Personal Information in a portable and, where technically feasible, readily usable format.
  • Correction. Correct inaccuracies in Personal Information.
  • Deletion. Request deletion of Personal Information, subject to legal exceptions.
  • Opt out. Opt out of sale, sharing, targeted advertising, or certain profiling, where applicable.
  • Limit sensitive information. Limit certain uses or disclosures of sensitive Personal Information, where applicable.
  • Appeal. Appeal a denial of a privacy request where state law provides that right.
  • Non-discrimination. Exercise privacy rights without unlawful discrimination or retaliation.
How to Exercise Your Rights

You may submit a request through the privacy request form linked from the Site, use the “Do Not Sell or Share My Personal Information” link where available, or email privacy@autoplai.com. Please describe the right you wish to exercise and provide enough information for AutoPLai to identify the relevant records and jurisdiction.

AutoPLai may verify your identity by matching information you provide with information maintained in its systems. AutoPLai will request only information reasonably necessary for verification and may deny a request if identity or authority cannot be verified. You may use an authorized agent where permitted by law; AutoPLai may require proof of authorization and direct identity confirmation.

Where AutoPLai acts only as a processor or service provider for an Authorized Platform Partner, AutoPLai may direct the request to that partner or assist the partner in responding. AutoPLai will respond within the period required by applicable law and explain any denial and available appeal process.

California Privacy Disclosures

This Section supplements the rest of the Notice for California residents and uses terms defined by the California Consumer Privacy Act, as amended (“CCPA”).

Categories of Personal Information Collected and Disclosed

The following table describes AutoPLai’s practices during the preceding 12 months. “Business disclosures” include disclosures to service providers, contractors, affiliates, Clients, and Authorized Platform Partners for operational purposes. “Sale/share/license” refers to making information available for campaign, advertising, or similar commercial purposes that may be treated as a sale or sharing under California law.

Category and examples

Collected / business disclosures

Sale, sharing, or licensing

Identifiers and customer-record information: name, postal address, email, telephone number, online identifiers, IP address, signature, account details.

Collected and disclosed for account administration, requested services, communications, security, analytics, and customer support.

May include name, email, postal address, online identifiers, and IP address. Mobile phone numbers and SMS/MMS consent are excluded from campaign licensing and independent marketing disclosures.

Financial and credit-related information: billing details, bank information, self-reported credit information, and payment records.

Collected and disclosed as needed for transactions, fraud prevention, accounting, and compliance.

Not licensed for independent marketing or advertising campaigns.

Vehicle and commercial information: VIN, make, model, year, product interests, inquiries, transactions, and purchasing tendencies.

Collected and disclosed to provide requested experiences, conduct analytics, support transactions, and improve services.

May be licensed or made available to Clients or Authorized Platform Partners for marketing or advertising campaigns, subject to opt-out rights.

Internet or electronic activity: browsing history, searches, interactions with Sites, applications, content, or advertisements.

Collected and disclosed for security, analytics, personalization, service improvement, and advertising measurement.

May be shared or made available for targeted or cross-context behavioral advertising, subject to opt-out rights.

Approximate geolocation: city, state, or ZIP code inferred from IP address.

Collected and disclosed for localization, analytics, security, and relevant experiences.

May be used or made available for campaign targeting. Precise geolocation is not licensed for independent marketing.

Professional or employment-related information: employer, title, and business contact details.

Collected and disclosed for business relationships, account administration, and service delivery.

May be used for business-to-business marketing where permitted by law.

Inferences: preferences, interests, commercial tendencies, and likely purchasing behavior.

Created and disclosed for personalization, analytics, product improvement, and campaign measurement.

May be licensed or shared for marketing and advertising campaigns, subject to opt-out rights.

Sensitive Personal Information: credentials, financial access information, and certain credit-related data.

Collected and disclosed only for permitted operational, security, fraud-prevention, and compliance purposes.

Not sold, shared, or licensed for targeted advertising or independent marketing.

California Rights

California residents may request access to categories and specific pieces of Personal Information; correction; deletion; information about sources, purposes, and recipients; and portability. California residents may also opt out of sale or sharing, including through the Global Privacy Control, and may limit certain uses of sensitive Personal Information where applicable. AutoPLai will not unlawfully discriminate against you for exercising CCPA rights.

Sale and Sharing of Personal Information

AutoPLai does not sell Personal Information in exchange for money. During the preceding 12 months, AutoPLai may have licensed or made available identifiers (excluding Mobile Messaging Data), vehicle and commercial information, internet activity, approximate location, and inferences to Clients, Authorized Platform Partners, advertising partners, or analytics partners for marketing, advertising, measurement, or campaign purposes. These activities may constitute sale or sharing under the CCPA. AutoPLai does not knowingly sell or share Personal Information of consumers under 16.

Sensitive Personal Information

AutoPLai uses and discloses sensitive Personal Information only for purposes permitted under the CCPA without a right to limit, such as providing requested Services, maintaining security and integrity, resisting fraud, processing transactions, and complying with law. If AutoPLai begins using sensitive Personal Information for additional purposes that trigger a right to limit, AutoPLai will provide the required notice and mechanism.

Financial Incentives

AutoPLai does not currently offer a financial incentive or price or service difference in exchange for the collection, sale, or sharing of Personal Information. If that changes, AutoPLai will provide a separate notice describing the material terms and obtain any required consent.

California “Shine the Light”

California residents may request information about certain disclosures of Personal Information to third parties for those parties’ own direct marketing purposes. Submit a request to privacy@autoplai.com with the subject line “California Privacy Rights” or mail the request to the address in Section 19. Please identify yourself as a California resident and provide a current California address. This law does not apply to every type of disclosure.

Marketing Choices and Do Not Track

  • Email marketing. Use the unsubscribe link in a promotional email or contact privacy@autoplai.com. This does not stop transactional, service, security, legal, or policy communications.
  • SMS/MMS. Reply STOP to opt out and HELP for assistance. See Section 9.
  • Cookies and targeted advertising. Use the Site’s cookie controls, the “Do Not Sell or Share My Personal Information” mechanism, browser or device settings, or a recognized opt-out preference signal where required.
  • Social media. Review privacy and advertising settings offered by the platforms you use.
  • Do Not Track. Because there is no uniform industry standard for browser-based Do Not Track signals, the Services may not respond to every such signal. AutoPLai honors legally recognized opt-out preference signals, including the Global Privacy Control, where required by law.

Changes to this Notice

AutoPLai may update this Notice from time to time to reflect changes in law, technology, Services, partners, or business practices. AutoPLai will post the updated Notice and revise the “Last Updated” date. If changes are material, AutoPLai may provide additional notice through the Services, email, or another appropriate method. Changes do not apply retroactively where prohibited by law.

Contact Us

Questions, comments, concerns, and privacy requests may be submitted to:
Email privacy@autoplai.com
Mail AutoPLai
Attn: Privacy Notice Inquiry
200 E. Randolph St., Suite 5100
Chicago, IL 60601
Online Use the privacy request form or “Do Not Sell or Share My Personal Information” link available through the Site.