The Dealers One — App Privacy Policy

The Dealers One is a dealership-management application for iPhone, iPad and Mac, published by Bubick Company LLC ("we", "us"). It is used by automotive dealerships ("dealers") and their staff to manage vehicle inventory, sales, service work, customer records and business reporting. This policy describes the data practices of the app itself. Each dealer's public website and customer portal has its own privacy policy published on that dealer's site.

For most customer data entered by dealership staff, the dealership is the data controller and Bubick Company LLC acts as a processor providing the software platform.

Staff account data: name, email address, role, phone number, and authentication credentials. Session tokens are stored in the device Keychain. If you enable Face ID / Touch ID sign-in, your credential is stored only in the device-local Keychain; biometric data itself never leaves your device and is never accessible to us (it is processed entirely by Apple's Local Authentication framework).

Customer records entered by staff: buyer and co-signer contact details, addresses, dates of birth, government identifiers (e.g. Social Security Numbers on sale records), sale and financing details, and e-signature envelopes. These are business records the dealership creates and controls; the app transmits and stores them on the dealership's behalf.

Photos: vehicle, damage, service and receipt photos taken with the camera or selected from your library are uploaded to the platform's storage so the dealership team can view them. The app never scans your photo library; it only receives the photos you explicitly take or pick.

Financial information: vehicle costs, sale amounts, expenses and capital records that the dealership enters for its own bookkeeping.

Location (optional): if a staff member enables the shop clock-in reminder, the app uses geofencing around the shop address to remind them to start or end their workday. Location permission is optional and the feature is off until you turn it on.

Device data: a push notification token (Apple Push Notification service) so the app can deliver notifications, and basic app-activity logs (e.g. inventory changes) kept for the dealership's own audit trail.

The app does not track you across other companies' apps or websites, contains no advertising, no third-party analytics SDKs, and does not sell personal information. There is no data use for advertising of any kind.

Data is used solely to provide the app's functionality: authenticating staff, managing inventory and service work, recording sales, generating documents, sending operational push notifications, and producing business reports for the dealership. AI-assisted features (e.g. inventory descriptions or the Miles assistant) send the relevant business data to OpenAI as a processor to generate the requested output; that data is not used to train third-party models per our processor agreement settings.

We use the following processors to run the platform:

• Supabase (database, authentication, file storage)
• Apple (push notification delivery via APNs)
• OpenAI (AI-generated content, when the dealer enables it)
• Vercel and Cloudflare (web infrastructure)

Each provider processes data only as needed to provide its service.

Staff accounts and dealership business records are retained while the dealership's subscription is active and for a reasonable period afterwards to comply with legal and tax obligations, after which they are deleted. Dealerships may request earlier deletion of their data.

All traffic uses TLS (HTTPS). Data is stored with row-level security so each dealership can only access its own records. Session tokens live in the device Keychain, and financial figures can additionally be hidden in-app behind Face ID / Touch ID.

Staff accounts are provisioned and removed by the dealership's administrator. To request deletion of your account and associated personal data, email Info@nexoautosales.com from your account email, or use the "Request Account Deletion" link inside the app. We complete verified deletion requests within 30 days, subject to records the dealership is legally required to keep (e.g. completed sale documents).

Vehicle buyers whose information was entered by a dealership should direct privacy requests to that dealership; we will assist the dealership in fulfilling them.

The app is a business tool for dealership staff and is not directed to children under 13. We do not knowingly collect information from children.

We will update this policy when our practices change and revise the effective date above. Questions or requests: Info@nexoautosales.com. Bubick Company LLC, Houston, Texas, USA.