Privacy Policy

1. Introduction

LotSync ("we," "our," or "us"), operated by Raven Data, runs the lotsync.io website and inventory-syndication platform for RV dealers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service. By using LotSync, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (stored hashed). If you register as a dealer, we also collect your dealership website URL.

Dealer Inventory Data: With your authorization, we collect publicly available vehicle inventory data from your own dealership website — vehicle specifications, pricing, images, and listing URLs — to build the catalogs and feeds that are the core of the service. Inventory data describes vehicles, not people.

Meta Platform Data: If you connect your Meta (Facebook) business account, we receive and store an access token (encrypted with AES-256-GCM), your ad account ID, business ID, page ID, and catalog ID. We use these solely to manage your vehicle catalog and, where enabled, advertising campaigns on your behalf. We do not access your personal Facebook profile, messages, or friends list.

Payment Information: Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers.

Usage Data: We collect standard log data including IP addresses, browser type, pages visited, and timestamps to operate the service and detect issues.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the platform
• Collect and normalize your vehicle inventory from your own website
• Publish hosted inventory pages for your units — these pages are public by design and crawlable by search engines and AI crawlers
• Generate and serve vehicle feeds for syndication channels: Google (Merchant Center / vehicle ads), Meta (catalog), and Microsoft/Bing
• Remove sold units from those surfaces promptly
• Where you enable it, create and manage advertising campaigns on your connected ad accounts
• Process subscription payments through Stripe
• Send transactional emails (verification codes, alerts, reports) via Resend
• Improve and optimize our services

4. Meta Platform Data

When you connect your Meta business account to LotSync, we request permissions limited to catalog and advertising management (such as ads_management, catalog_management, business_management, pages_read_engagement, and pages_show_list).

We use this data solely to maintain your vehicle catalog and manage advertising on your connected ad account. We do not sell, share, or use your Meta data for any purpose other than providing the LotSync service you subscribed to.

You can disconnect your Meta account at any time from your LotSync dashboard, which revokes our access to your Meta advertising assets and deletes the stored token.

5. Data Sharing and Disclosure

We do not sell your personal information. We share information with:

• Google: Your vehicle feed is registered with Google Merchant Center (including a merchant sub-account we manage for your dealership) so your inventory can appear in Google surfaces.
• Meta: Vehicle catalog data (and, where enabled, campaign settings) are provided to Meta's platform as part of the service.
• Microsoft: A shopping-format vehicle feed is available for Microsoft Merchant Center / Bing.
• Stripe: Payment information is processed by Stripe under their privacy policy.
• Service Providers: We use Vercel (hosting), Supabase (database), Resend (email), Browserless (site rendering for inventory collection), Anthropic (AI-generated listing descriptions from your inventory data), and Sentry (error monitoring) to operate the platform.
• Legal Requirements: We may disclose information if required by law or to protect our rights.

6. Data Retention

We retain your account data for as long as your account is active. Vehicle inventory data is refreshed on a recurring schedule (typically daily) and historical observations are retained to power accurate feeds and reporting. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Data Deletion

You can request deletion of your data by emailing [email protected] or by disconnecting your Meta account and deleting your LotSync account from the dashboard. Upon receiving a deletion request, we will delete your personal data, Meta connection tokens, and associated campaign data within 30 days. Deletion requests submitted via Facebook (Settings → Apps and Websites) are acknowledged automatically and processed on the same 30-day timeline; the confirmation code returned to Facebook can be used to verify the status of your request.

8. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage of sensitive tokens (AES-256-GCM), and secure authentication. However, no method of transmission over the Internet is 100% secure.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Email: [email protected]