KMA Auto Inc ("KMA Auto," "we," "us," or "our") operates DealerWyze, a cloud-based customer relationship management platform for independent used car dealerships ("Service"). DealerWyze is available at dealerwyze.com.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information. It applies to all users of the Service, including dealership owners and their staff ("Dealers") and, to the extent described below, the Dealers' own customers whose data is entered into the platform.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
Account and Business Information
When you register for DealerWyze, we collect:
Dealer Customer Data
Dealers input contact and transaction data about their own customers into the platform. This may include:
This customer data belongs to the Dealer (see Terms of Service, Section 9). KMA Auto processes it solely to provide the Service.
Support Communications
If you contact us for support, we retain records of that correspondence.
Usage and Log Data
Cookies and Session Tokens
We use cookies strictly for authentication and session management. We do not use advertising cookies, behavioral tracking cookies, or third-party tracking pixels.
Google (Gmail OAuth) — If you connect a Gmail account to capture email leads, we request read-only OAuth access scoped to incoming lead-related messages. You can revoke this access at any time through your Google account settings.
Twilio (SMS) — SMS messages sent and received through the Service are processed via Twilio. We store message content, delivery status, timestamps, and phone numbers to maintain your SMS conversation history.
Stripe (Payments) — Subscription billing is processed by Stripe, Inc. We do not store your full card number, CVV, or bank account details.
Supabase (Data Storage) — All data is stored in Supabase-managed PostgreSQL databases and Supabase Storage (for uploaded files) located in the United States.
Vercel (Hosting) — The DealerWyze application is hosted on Vercel's platform.
Social Media Platforms (Optional Integration) — DealerWyze allows dealerships to connect their social media accounts (Facebook, Instagram, TikTok, YouTube) to post vehicle listing videos automatically. When you connect a social account, we receive and store an access token and basic account information (account name, platform user ID) from that platform via OAuth. We use these tokens solely to post content on your behalf when you direct us to do so. We do not read your personal feed, messages, or contact lists. You can disconnect any social account at any time from Settings.
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Service | Performance of contract |
| Authentication and account security | Legitimate interest / contract |
| Billing and subscription management | Performance of contract |
| SMS messaging functionality | Performance of contract |
| Gmail lead capture | Performance of contract / consent |
| Customer support | Legitimate interest |
| Service improvement and debugging | Legitimate interest |
| Legal compliance | Legal obligation |
| Fraud prevention and abuse detection | Legitimate interest |
We do not use your data or your customers' data for advertising. We do not sell, rent, or trade personal information to third parties for their own marketing purposes.
4.1 Service Providers. We share data with the following sub-processors:
| Provider | Purpose | Location |
|---|---|---|
| Twilio Inc. | SMS delivery | United States |
| Google LLC | Gmail OAuth (lead capture) | United States |
| Stripe Inc. | Payment processing | United States |
| Supabase Inc. | Database and file storage | United States |
| Vercel Inc. | Application hosting | United States |
| TikTok (ByteDance) | Social media video posting (optional, dealer-connected) | United States |
| Meta Platforms Inc. | Facebook/Instagram video posting (optional, dealer-connected) | United States |
| Google LLC (YouTube) | YouTube video posting (optional, dealer-connected) | United States |
4.2 Legal Requirements. We may disclose information if required to do so by law, subpoena, court order, or governmental authority.
4.3 Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.
4.4 With Your Consent. We may share your information for other purposes if we obtain your explicit consent.
We do not share, sell, or disclose personal information to data brokers, advertising networks, or any third party for their independent commercial use.
Dealer customers consent to receive SMS messages through one of the following methods:
Customers may reply STOP at any time to unsubscribe from all dealership SMS messages. Reply START to resubscribe. Message and data rates may apply.
The SMS features of DealerWyze are used by Dealers to communicate with their own customers who have opted in to receive messages. As a Dealer:
DealerWyze allows Dealers to upload sensitive documents, including copies of customer driver's licenses and insurance cards. These documents are stored in access-controlled Supabase Storage, accessible only to authenticated users of your dealership account, and are deleted upon account cancellation at the end of the data retention period.
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of subscription |
| Dealer Customer Data | Duration of subscription + 30 days post-cancellation |
| Billing records | 7 years (tax and legal compliance) |
| Usage logs / server logs | 90 days rolling |
| Support correspondence | 3 years |
| Backup copies | Up to 60 days after deletion from production |
If you are a California resident, you have the right to: know what personal information we collect; request deletion; request correction of inaccurate data; opt out of sale or sharing (we do not sell data); and non-discrimination for exercising these rights.
To submit a request, email: themio@gmail.com. We will respond within 45 days.
All users may access and update account data, request a data export, cancel and request account deletion, revoke Gmail OAuth access, and disconnect any connected social media account at any time from within the DealerWyze application.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. Contact us at themio@gmail.com if you believe we have collected such information.
DealerWyze is operated from the United States and is intended for use by US-based dealerships. All data is stored and processed in the United States.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy with a new "Effective Date" and notify active subscribers by email at least fourteen (14) days before changes take effect.
KMA Auto Inc — Privacy Inquiries
Email: support@dealerwyze.com
Website: dealerwyze.com