Privacy Policy
Last updated: July 16, 2026
This policy explains what information Lot Linker collects, how we use it, where we store it, and who we share it with. Protecting your data is a core constraint of how Lot Linker is built, not an afterthought.
Information we collect
We collect only what we need to run Lot Linker for you:
- Account information: Your email address and, if you sign up with a password, a securely hashed password. If you choose Google sign-in, we receive your Google account email and a basic profile identifier. We also store your name if you provide it.
- Voice sample: A short writing sample you provide at signup. We use it so the AI-written descriptions sound like you.
- Subscription and billing information: Your subscription status and the customer and subscription identifiers from our payment processor, Stripe. We do not collect or store your card number, expiration date, or security code. Stripe handles your card details directly.
- Dealership inventory: Vehicle and RV listing details and photos from your dealership inventory, which we use to build the inventory shown to you. This is business inventory, not your personal information.
- Posting and usage activity: Records of your prefill and posting activity, such as timestamps and outcomes, and a one-way hashed fingerprint of your Facebook account. The fingerprint is a 64 or 128 character hexadecimal hash. It is never your Facebook login, and we use it only to keep your posting rate within safe limits.
- Locally stored session data: The Lot Linker browser extension stores a single Lot Linker session token on your device (in chrome.storage.local) so you stay signed in. The extension stores nothing else.
- Diagnostic data: Limited error and performance information used to keep the service reliable. Sensitive fields are removed before this data reaches our error-tracking provider.
- Product analytics and attribution: Screen visits, feature and paywall interactions, general app or browser and device context, and an opaque account or device identifier. Session replay masks all typed input and page text. During setup, you may optionally tell us how you heard about Lot Linker; we store that answer separately from measured attribution. On Android, we also receive the Play install-referrer campaign or click identifier so we can measure which app-install campaigns lead to signup. In the native apps, our paywall provider may receive plan views, paywall interactions, and purchase-history signals; it never receives your card details. On iOS, AppsFlyer receives install, launch, and limited conversion activity plus opaque identifiers and device, app, network, and campaign context for advertising attribution. If you allow tracking in Apple's permission prompt, AppsFlyer may also use the advertising identifier and the TikTok App Events SDK reports install and launch activity to TikTok.
What we never collect: your Facebook password, cookies, or session. The Facebook part of Lot Linker runs entirely in your own browser. No Facebook credentials or session data ever reach our servers.
How we use your information
We use the information above only to provide and improve Lot Linker:
- Create your account and keep you signed in.
- Show you the inventory assigned to you, and keep each rep's inventory isolated from every other rep.
- Generate a listing description in your voice. To do this, your voice sample and the car details are sent to our AI provider.
- Select and arrange the listing photos for each car.
- Run a quick sold-check before a prefill so you do not list a car that has already sold.
- Keep your posting cadence within safe, account-protecting limits.
- Process your subscription, provide customer support, and send you account and service emails.
- Monitor reliability, diagnose errors, and improve the product.
- Measure product usage, paywall performance, and whether an app-install campaign leads to an install, signup, or subscription, and improve Lot Linker's advertising campaigns.
We do not sell your information, and we never use your inventory, voice sample, Facebook information, or posting content for advertising. The limited attribution data shared with AppsFlyer and its enabled advertising partners, the direct TikTok SDK data shared after your iOS tracking permission, plus product analytics and the advertising tools used on public marketing pages, are described below.
How we store and protect your information
- Your account and inventory data are stored in a managed Postgres database (Supabase) hosted in the United States.
- Row-level security isolates each rep's data, so one rep can never see another rep's inventory.
- Data is encrypted in transit using HTTPS and encrypted at rest by our hosting providers.
- The extension session token is stored only on your device. We never copy it between devices for you.
- Sensitive fields, including your voice sample, email address, dealer URLs, payment identifiers, and anything matching Facebook, are scrubbed from our error logs.
- We keep your information while your account is active and for as long as we need it to provide the service and meet legal and accounting obligations. We delete or anonymize your personal information after you close your account or on request, subject to those obligations.
How we share your information
We do not sell your personal information. We share information only with the service providers that help us operate Lot Linker, plus the limited iOS advertising-attribution data described below, and only as needed for the stated purpose:
- Supabase: Database hosting and authentication.
- Vercel: Application hosting, and routing of AI requests through the Vercel AI Gateway.
- Anthropic: Generates your listing descriptions from your voice sample and the car details.
- Inventory services: Helps keep dealership inventory current inside Lot Linker.
- Stripe: Processes your subscription payments.
- Resend: Delivers your account and service emails.
- Sentry: Error and performance monitoring, with sensitive fields removed before they are sent.
- Google: Optional Google sign-in, used only if you choose it.
- PostHog: Product analytics and masked session replay. We identify a signed-in rep only by an opaque account ID and do not send PostHog the rep's name or email address.
- Superwall: Presents plan screens in the iOS and Android apps and measures paywall performance using anonymous app and device context, paywall interactions, and purchase-history signals.
- TikTok for Business: Through the direct TikTok iOS SDK, only after you authorize tracking, receives app-install and app-launch activity plus device and app context such as advertising, vendor/device, and SDK-generated identifiers; IP address and user agent; device model, OS, locale, app version, and session identifiers; and limited SDK diagnostic data. AppsFlyer may separately send TikTok privacy-appropriate install and conversion postbacks when TikTok referred the install, including when tracking permission is denied. TikTok uses this for Lot Linker app-install attribution, ad measurement and optimization, and SDK diagnostics. Neither path receives your name, email, dealership inventory, voice sample, Facebook credentials, or card details.
- AppsFlyer: Measures which app-install campaigns lead to signup, onboarding, a first successful prefill, a paywall view, or a subscription. AppsFlyer receives an SDK-generated device identifier, an opaque Lot Linker account identifier after sign-in, ATT status, app and OS version, limited device and network context, campaign metadata, and those named milestone events. A subscription milestone also includes the plan, price, currency, and an opaque Stripe subscription identifier, but no card details. It does not receive your name, email, dealership inventory, voice sample, Facebook credentials, or vehicle details. When tracking permission is denied, Lot Linker disables advertising-identifier collection and AppsFlyer uses privacy-preserving measurement available on iOS.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and our service. We never send your information to Facebook from our servers. Anything you post to Facebook Marketplace is submitted by you, in your own browser, when you click Post.
Product analytics and advertising
PostHog product analytics runs across our website and signed-in portal, including portal pages displayed inside the iOS and Android apps. It records screen visits and interactions using an opaque account ID; all typed input and page text are masked in session replay, and sensitive event fields are removed before transmission. Superwall separately measures native paywall interactions. Browser-based advertising tools load only on public marketing, signup, and checkout pages. The native AppsFlyer SDK measures iOS installs and conversion milestones and is the only SDK allowed to manage Apple's SKAdNetwork conversion values. The native TikTok SDK runs only after you grant Apple's tracking permission and does not manage SKAdNetwork conversion values. None of these tools receives your dealership inventory or voice sample:
- Google Ads: Measures whether our Google ads lead to signups and sets advertising cookies on our marketing pages.
- TikTok Pixel: Measures whether our TikTok ads lead to signups and sets advertising cookies on our marketing pages.
- TikTok App Events SDK (iOS): If you allow tracking, reports app-install and app-launch activity and limited device, app, network, session, and diagnostic context to measure and improve Lot Linker's TikTok ads. StoreKit purchase tracking, next-day retention tracking, and TikTok enhanced data postback (including screen and button text) are disabled. If you decline, the SDK is not initialized and sends no data.
- AppsFlyer (iOS): Measures installs and the named signup, onboarding, first-prefill, paywall, and subscription milestones using SDK-generated and opaque account identifiers plus campaign and device context. The subscription milestone includes plan, price, currency, and an opaque subscription identifier. If tracking is denied, the advertising identifier is disabled. AppsFlyer can share privacy-appropriate conversion postbacks with the ad network that referred the install, including TikTok and Reddit.
- Meta Pixel: Measures whether our Facebook and Instagram ads lead to signups, when we run them, and sets advertising cookies on our marketing pages.
- Microsoft Clarity: Captures heatmaps and session recordings of how visitors use our marketing pages so we can improve them. Anything you type into a form field is masked before it reaches Clarity. See the Microsoft Privacy Statement for how Microsoft handles this data.
When a conversion milestone occurs, AppsFlyer may report it to the ad platform that referred the install. That report contains opaque identifiers, the milestone name, limited campaign context, and, for a subscription, plan, price, and currency; never your name, email, inventory, vehicle details, Facebook information, or card details. You can block browser-based tools with your browser's tracking protection or a content-blocking extension. On iOS, you can decline Apple's tracking request or change the permission later in Settings > Privacy & Security > Tracking. If you decline, the direct TikTok SDK is not initialized, AppsFlyer does not collect the advertising identifier, and privacy-preserving attribution and partner postbacks may still operate. These choices do not affect Lot Linker's app functionality.
Your choices and rights
You can access, correct, or delete your personal information by emailing support@lotlinker.com. You can cancel your subscription at any time, and you can ask us to delete your account. Depending on where you live, you may have additional rights over your data under laws such as the GDPR or CCPA. Contact us to exercise them and we will respond as required by law.
Children's privacy
Lot Linker is a business tool for sales professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the date at the top of this page and post the updated policy here. We will communicate significant changes through the service or by email.
Contact us
Lot Linker is operated by 270 Digital Solutions LLC. If you have any questions about this policy or your data, email us at support@lotlinker.com.
Questions about your data? Email support@lotlinker.com.
Lot Linker is operated by 270 Digital Solutions LLC.