Privacy Policy

This policy covers two audiences. First, dealership accounts and their staff (“Dealer Users”) who sign in to Lotly Connect. Second, consumers who call, text, or chat with a dealership through a phone number or channel operated on the dealership’s behalf by Lotly Connect (“Consumer Contacts”). Where the two sets diverge, we call it out.

Each dealership is the controller of the consumer information it collects through Lotly Connect (contact details, conversation content, appointment history, vehicle interests). Lotly is a processor acting on the dealership’s behalf for that content. Lotly is the controller of Dealer User account data (email address, name, authentication metadata, billing information).

Dealer User account data

• Business legal name, DBA, address, timezone, and dealership state.
• Owner and staff names, emails, and phone numbers.
• Login credentials via our authentication provider.
• Billing details processed by our payment provider.
• Support requests you send us.

Consumer Contact data (on the dealership’s behalf)

• Phone number, name (if provided), and any information the consumer shares during a call, text, or chat.
• Audio recordings of calls that were disclosed and routed through our voice AI.
• Transcripts and structured summaries our AI generates from those calls or messages.
• Vehicle interest and appointment history you or the AI captures.
• Delivery, opt-out (STOP / HELP), and consent metadata used for legal audit trails.

Technical data

• IP addresses, browser and device information, and timestamps when you sign in to the dashboard or accept a legal agreement.
• Diagnostic logs from our servers.

• Deliver the service: place calls, send messages, run the AI, show conversations on the dashboard, generate reports.
• Maintain audit trails for legal compliance (TCPA consent, STOP opt-outs, recording disclosure acceptance, terms and privacy consent).
• Bill for usage and manage subscriptions.
• Detect fraud, abuse, and violations of the acceptable-use policy.
• Improve service quality with de-identified operational metrics.
• Respond to your support requests.

We do not sell Consumer Contact data. We do not use Consumer Contact data to train third-party AI models outside the scope of answering the dealership’s customer.

Call recordings default to a 30-day retention window. Each dealership can raise or lower that window for their account (subject to a maximum we may set for compliance reasons). After the retention window, the recording file is permanently deleted from the voice provider and from our storage. Transcripts and structured summaries are retained for the life of the dealership account so the dealership can search prior conversations.

Consent audit trails (Terms of Service acceptance, Privacy Policy acceptance, STOP opt-outs, recording disclosure text in effect at time of call) are retained for the life of the business relationship plus any period required by law.

Dealer account and billing records are retained for as long as the account is active plus any period required by tax or corporate record-keeping rules.

We share information with subprocessors that help us run the service, including:

• A telephony provider that places calls and sends SMS on the dealership’s behalf.
• A voice AI provider that transcribes calls and runs the receptionist assistant.
• A cloud database and file-storage provider that hosts the platform.
• An email delivery provider used for account, billing, and alert notifications.
• A payment processor for subscription billing.
• Optional integrations you enable, such as your DMS or calendar.

The full subprocessor list is available on request from support@lotlyauto.com. We may share information with law enforcement or in response to a subpoena where legally required, and we may share aggregated, de-identified data that cannot reasonably be tied back to an individual.

Consumers can reply STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to any message from a Lotly Connect number to be immediately removed from that dealership’s outbound list. The opt-out is honored automatically and confirmed with one reply. Consumers can reply HELP to receive a message with the dealership’s contact information.

When a dealership uses the voice AI, an audio recording of the call may be captured for the dealership’s records and for transcript generation. Where required by state law, the caller hears a recording disclosure at the start of the call. If any party is in a two-party consent state, the disclosure is required and cannot be disabled by the dealership.

Depending on where you live, you may have the right to request access to, correction of, or deletion of information a dealership has collected through Lotly Connect. Because each dealership controls its own consumer records, direct these requests to the dealership first. If you cannot reach the dealership, or if your request concerns Lotly’s own use of the data, email support@lotlyauto.com and we’ll route the request.

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Lotly does not sell personal information.

We use industry-standard technical and organizational safeguards to protect information, including encryption in transit, role-based access controls, and audit logging. No system is perfect. Report suspected security issues to support@lotlyauto.com.

Lotly Connect is a business tool for licensed automotive dealerships. It is not intended for and not directed at children under 13. We do not knowingly collect information from children.

We may update this policy. Material changes bump the version at the top of this page and trigger a re-consent prompt for Dealer Users on next sign-in. Continued use of the service after a version bump constitutes acceptance.

Privacy questions and requests: support@lotlyauto.com. Written correspondence: Lotly Automotive Solutions LLC, Holland, Michigan.