Privacy Policy

LotSwap.io ("LotSwap," "we," "us," or "our") is a fee-free dealer-to-dealer vehicle marketplace owned and operated by StephensCode LLC, a Texas limited liability company. We are committed to protecting the privacy and security of the information you provide when using our platform.

This Privacy Policy explains what information we collect, how we use it, when we share it, and what choices you have regarding your data. By using the LotSwap platform, including our website, mobile applications, APIs, and all associated services (collectively, the "Platform"), you agree to the practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms of Service.

We use the information we collect for the following purposes:

• Provide and operate the Platform — To enable you to create listings, browse inventory, communicate with other dealers, negotiate offers, and complete transactions.
• Verify dealer identity — To confirm that you hold a valid motor vehicle dealer license and meet our eligibility requirements, maintaining the integrity of our dealer-only marketplace.
• Facilitate communication — To enable messaging between dealers, deliver offer notifications, and send transaction-related communications.
• Improve the Platform — To analyze usage patterns, identify bugs, optimize performance, develop new features, and enhance the overall user experience.
• Send notifications — To deliver important account alerts, security notifications, listing activity updates, offer status changes, and optional marketing communications.
• Ensure safety and compliance — To detect and prevent fraud, enforce our Terms of Service, resolve disputes, and comply with applicable legal obligations.

We may share your information in the following limited circumstances:

• With other dealers — Your public dealer profile, dealership name, general location, trust score, and vehicle listings are visible to other verified dealers on the Platform. This is necessary for the marketplace to function.
• With service providers — We share information with third-party service providers who assist us in operating the Platform, including hosting providers, email delivery services, analytics providers, and customer support tools. These providers are contractually obligated to use your data only for the purposes of providing services to us.
• With law enforcement — We may disclose your information when required to do so by law, in response to a valid subpoena, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
• Business transfers — In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We take the security of your information seriously and implement industry-standard measures to protect it, including:

• Encryption in transit — All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS).
• Encryption at rest — Sensitive data stored in our databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Secure authentication — Passwords are hashed using industry-standard algorithms. We support secure session management and encourage the use of strong, unique passwords.
• Access controls — Access to personal data is restricted to authorized personnel who require it to perform their job functions.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:

• Active accounts — Your account information, listing data, and transaction history are retained for the duration of your active account.
• Deleted accounts — When you request account deletion, we will purge your personal information within 90 days, except where we are required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements.
• Legal obligations — Certain information, such as transaction records and communications related to disputes, may be retained beyond the 90-day purge period as required by applicable laws and regulations.
• Aggregated data — We may retain anonymized, aggregated data indefinitely for analytical and research purposes. This data cannot be used to identify you.

You have the following rights regarding your personal information:

• Access — You have the right to request a copy of the personal information we hold about you and your dealership.
• Correction — You have the right to request that we correct any inaccurate or incomplete information about you. You can update most account information directly through your account settings.
• Deletion — You have the right to request deletion of your personal information, subject to certain exceptions such as legal retention requirements.
• Opt-out of marketing — You may opt out of receiving marketing emails from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at privacy@lotswap.io. Note that opting out of marketing communications does not affect transactional or security-related notifications, which are necessary for account operation.
• Data portability — You may request an export of your personal data in a commonly used, machine-readable format.

To exercise any of these rights, please contact us at privacy@lotswap.io. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information (we do not sell your data).
• The right to non-discrimination for exercising your privacy rights.

To exercise your California privacy rights, contact us at privacy@lotswap.io.

We use cookies and similar technologies to enhance your experience on the Platform. The types of cookies we use include:

We do not use advertising or tracking cookies. We do not serve targeted ads on the Platform.

We use the following categories of third-party service providers to operate the Platform:

• Hosting — Our Platform is hosted on Vercel and related cloud infrastructure providers.
• Data storage — We use third-party database and storage providers to securely store your account information, listings, and media.
• Email delivery — We use third-party email services to send transactional emails, notifications, and marketing communications.
• Analytics — We use analytics tools to understand Platform usage and improve our services.
• Authentication — We use secure authentication providers to manage user sessions and login security.

These third-party services have their own privacy policies and practices. We encourage you to review their policies. We select service providers who maintain appropriate security standards and contractually require them to protect your data.

The LotSwap Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. The Platform is designed exclusively for licensed motor vehicle dealers, who must be legal adults authorized to conduct business on behalf of their dealership.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information as promptly as possible. If you believe that a minor has provided us with personal information, please contact us at privacy@lotswap.io.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Notify registered users via email or through an in-platform notification.
• Post the updated policy on this page with a summary of the changes where appropriate.

Your continued use of the Platform after the revised Privacy Policy becomes effective constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the Platform and request deletion of your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: