Data and messaging
Where your data lives, who touches it, and how texting works
The short, checkable version of what the privacy policy and terms say, with the operational details dealers ask about. Anything we have not verified is marked as such rather than implied.
Last checked against the product on September 24, 2026
Data
| Topic | What we do |
|---|---|
| Hosting | Google Cloud, in the United States (us-central1). Canadian stores' data is hosted there too. |
| Service providers | Google Cloud (hosting), Twilio (text delivery), SendGrid (email delivery), and AI model providers including Google, OpenAI and Anthropic. They process data only to provide their service to us. |
| Retention | Shopper conversations are kept for as long as the service needs them, per the store's settings. When a store leaves, its shopper and inventory data are deleted or returned under the subscription agreement, except where the law requires us to keep it. |
| What the agent never collects | Social Security or Social Insurance numbers, credit applications, bank account numbers or card details. If a shopper tries to share them, they are not used and the conversation goes to your staff. |
| Selling data | We do not sell personal information, and we do not share a store's leads or inventory with anyone else. |
Texting and consent
| Topic | What we do |
|---|---|
| Consent | Texts go out only with prior consent, collected in the conversation or by the store. |
| STOP and HELP | Reply STOP to stop texts; the opt-out applies immediately. Reply HELP for help. Consent is never a condition of buying anything. |
| 10DLC registration | Not published yet. Ask us who registers the sending number for your store. |
Oversight and security
| Topic | What we do |
|---|---|
| Staff alerts | Your team is alerted when a shopper books a visit, and on the triggers your store sets. |
| Review trail | Each staff review of an alert keeps an audit trail. Every entry is hash-chained to the one before it, so an edited entry shows. |
| Security | Encryption in transit, access controls, and least-privilege access to production systems. |
| Security or privacy contact | [email protected] for security reports (see /.well-known/security.txt). [email protected] for privacy requests. |