DlrPilot

This page is the operator's plain-language policy for the DlrPilot service and its Chrome extension. Have it reviewed by a lawyer for your state before you sell subscriptions. Anything marked [confirm with a lawyer] is a point the operator has not had reviewed yet.

Privacy policy

Last updated September 17, 2026

What DlrPilot stores

• Your account: name, email, phone, a hashed password (never the password itself), the dealership name and website.
• Your inventory: the vehicles, prices, photos and descriptions read from your dealership's public website, and the listing text DlrPilot writes for them.
• Your Marketplace activity: which vehicles are listed, listing ids, view and save counts, and the conversations buyers have with your dealership on Facebook Marketplace (the buyer's display name, the vehicle, the messages, what was booked, and a phone number or ZIP code if the buyer gives one), so they can be answered and followed up.
• Usage: server logs with request times and addresses, for security and support. They record that a reply went out and to which buyer, never what a buyer wrote, and they are discarded after LOG_RETENTION_DAYS days.

What DlrPilot never stores

• Facebook passwords, session cookies or login tokens. The Chrome extension works only inside the Facebook session already open in the salesperson's own Chrome; nothing from that session is sent to DlrPilot except the listings and conversations described above and whether the browser is logged in.
• Card numbers. Payments are handled by Stripe; DlrPilot keeps only a customer id and the subscription status.

Who can see it

Each dealership's data lives in its own space. Managers at the dealership see all of it; salespeople see their own leads, appointments and listings. COMPANY_NAME staff access a dealership's data only to provide support at the dealership's request. Data is not sold and not shared with advertisers.

We work for the dealership, on the dealership's instructions

The dealership decides what goes into DlrPilot and what DlrPilot does with it; COMPANY_NAME only runs the software. We do not use a dealership's inventory, leads or buyer conversations for our own purposes — not to train anything, not to market to your buyers, not to build a database we sell. The only things we look at across dealerships are counts that tell us the product is working (how many listings posted, how many errors), never the contents of a conversation. In the language a vendor-review form uses: the dealership is the controller and COMPANY_NAME is the processor, or service provider, for the buyer data in DlrPilot. [confirm with a lawyer] — the wording a specific state law requires may differ.

Who else touches the data

DlrPilot uses these companies and nothing else. Each one gets only what it needs to do its job:

• The server host: HOSTING_PROVIDER, HOSTING_REGION. Everything in DlrPilot lives on that machine — the inventory, the leads and the conversations.
• Stripe: payments. Stripe gets the billing contact and the card details you type on Stripe's own page; we never see a card number. No buyer data goes to Stripe.
• Resend: the rare emails DlrPilot sends — password resets and invite links. Resend gets that recipient's name and email address, nothing else.
• Apple, Google, Mozilla and Microsoft push services: if a salesperson turns on phone alerts, the alert goes through their own browser maker's push service, which is how push notifications work on every phone. The alert carries the buyer's first name and the vehicle, so a salesperson can tell which lead it is.
• Facebook: not a vendor of ours, but worth saying plainly — listings and messages are posted and read inside the salesperson's own Facebook account, so Facebook sees them the same way it would if the salesperson typed them.

If we ever add another company to this list, it goes on this page before it starts.

Buyers

Messages from buyers on Facebook Marketplace are processed to answer them and to book appointments for the dealership they wrote to. A buyer can ask the dealership, or COMPANY_NAME at SUPPORT_EMAIL, to delete their conversation at any time; we pass a request that reaches us on to the dealership it belongs to and delete the conversation within 30 days. Deleting it here does not remove the same messages from Facebook, which is the buyer's and the salesperson's own account.

Getting your data out, and getting it deleted

Email SUPPORT_EMAIL from an address on the account. Within 5 business days we send every lead, message, appointment and vehicle in your space as spreadsheets. Within 30 days of a deletion request we delete the dealership's whole space — inventory, conversations, appointments and sign-ins — and any backup copy that still holds it is deleted within BACKUP_RETENTION_DAYS days after that. Today this is done by hand by a person at COMPANY_NAME; there is no self-serve button yet, and we would rather say so than pretend.

Terms of service

Last updated September 17, 2026

The service

DlrPilot provides software that reads a dealership's public website inventory or a CSV export from its DMS, prepares Facebook Marketplace listings, assists with buyer conversations, and keeps a record of leads and appointments. Posting and messaging happen through the customer's own Facebook accounts, on the customer's own computers, using the DlrPilot Chrome extension installed by the customer's staff.

Your accounts, your responsibility

Facebook's terms govern what may be done with a Facebook account. DlrPilot limits how many vehicles go up in a day, spaces them out across the posting hours the dealership sets, and posts only from the customer's own browsers — but Facebook may still restrict accounts at its discretion. The customer is responsible for how its accounts are used, for the accuracy of its listings, and for compliance with advertising and consumer-protection rules that apply to vehicle sales in its state.

Who owns the leads

The dealership does. The inventory, the listing text, the leads, the buyer conversations and the appointments in a dealership's space belong to that dealership, during the subscription and after it ends. COMPANY_NAME claims no ownership of them and no right to use them for anything but running the service for that dealership. Ask at SUPPORT_EMAIL and we send you every lead and message as a spreadsheet within 5 business days — while you are a customer, or on your way out.

Subscriptions, renewal and cancelling

A trial starts on sign-up and needs no card. After the trial the dealership chooses a plan and pays monthly through Stripe. The subscription renews itself every month at the plan price until it is cancelled. Cancel any time from Billing on the dashboard, or by emailing SUPPORT_EMAIL — no phone call, no notice period. Access continues to the end of the period already paid for. Fees are not refunded for partial months. If a card stops working, there are a few days of grace and then the space goes read-only rather than being deleted. [confirm with a lawyer] — California's Automatic Renewal Law and similar state rules set out exactly how an auto-renewing subscription must be disclosed and cancelled.

What happens when you stop

Your data stays exactly where it is and nothing new is posted or answered. Two things need saying plainly:

• Listings already on Facebook stay on Facebook. They live in each salesperson's own Marketplace account, under their own name, and DlrPilot cannot reach them once the subscription stops. Have your salespeople delete their remaining listings — or tell us before you go and we will run the removal with you while the account is still on — or buyers will keep writing to listings nobody is answering.
• Your leads come with you. Email SUPPORT_EMAIL and we send the spreadsheets within 5 business days. Say the word and we delete your space within 30 days; otherwise it sits untouched in case you come back.

What DlrPilot does not do

• It never asks for or stores a Facebook password. There is no password box for Facebook anywhere in the product.
• It does not run from our servers or from a data center. Nothing touches Facebook except the extension in a salesperson's own Chrome, on their own computer, in their own session.
• It does not create Facebook accounts, post from accounts that are not your staff's, or hide who is posting: every listing goes up under a real salesperson's name.
• It does not send any data to an outside AI service. The assistant runs inside DlrPilot on your inventory and your answers.
• It messages a buyer only inside the Facebook Marketplace conversation that buyer started — including the confirmations and follow-ups. No texts, no emails, no cold calls, no lists.
• It does not quote a price it was not given, and it does not agree to a deal. Out-the-door and payment questions go to the salesperson.
• It is not a DMS, a credit application, or a system of record for a sale. It does not touch deal jackets, credit data or anything covered by the Safeguards Rule. [confirm with a lawyer] if your compliance officer asks how GLBA applies — we hold buyer names, phone numbers and message histories, and no financial or credit data.

Acceptable use

One dealership per account. No reselling access, no scraping other people's websites through the service, no use of the messaging assistant for anything but the dealership's own vehicle sales.

Availability and liability

DlrPilot is provided as is. We work to keep it running and secure, but we do not guarantee uninterrupted service, that Facebook will accept every listing, or that any lead will become a sale. Our liability is limited to the fees paid in the three months before a claim.

Changes

We may update these terms; material changes are announced on the dashboard at least 14 days before they apply. The date at the top of each policy is typed in by hand when the words change, so the date you see is the date that version took effect, and we keep every earlier version.

Which state's law applies

These terms are governed by the laws of GOVERNING_STATE, and anything that cannot be worked out between us goes to the state or federal courts serving VENUE_COUNTY, GOVERNING_STATE. [confirm with a lawyer] — the right state and the question of arbitration are both worth two hours of a lawyer's time before the first paid customer.

Reaching us

COMPANY_NAME, COMPANY_STREET_ADDRESS, COMPANY_CITY, COMPANY_STATE COMPANY_ZIP. Email SUPPORT_EMAIL or call SUPPORT_PHONE, SUPPORT_HOURS. Export requests, deletion requests, privacy questions and cancellations all go to that address and are answered by a person.

The Chrome extension

The DlrPilot Chrome extension has one purpose: to connect a salesperson's Facebook Marketplace account to their DlrPilot dashboard. It reads the salesperson's own Marketplace listings and conversations, posts the vehicles queued for them, sends the replies the dashboard prepared, and removes listings for sold vehicles. It runs only on facebook.com and talks only to the DlrPilot server the salesperson signed in to. It collects no browsing history and nothing from any other website, and it stores nothing about Facebook beyond the listing ids and conversations shown in the dashboard.

Questions about any of this: SUPPORT_EMAIL, or SUPPORT_PHONE during SUPPORT_HOURS.
COMPANY_NAME · COMPANY_STREET_ADDRESS, COMPANY_CITY, COMPANY_STATE COMPANY_ZIP