Privacy Policy

Who we are

Dealer Software Solutions, LLC ("DSS", "we", "us") builds software for automotive dealerships, including Autozuma — a Chrome extension and service that moves a deal a dealership has already desked in Toyota SmartPath into that dealership's own CDK Drive DMS.

This policy explains what data we handle, what we deliberately do not handle, and why. It covers this website, the Autozuma extension, and the Autozuma service at api.autozuma.com.

Our role and the dealership's role

Consumer information in a vehicle deal belongs to the dealership. The dealership decides what is collected and why; DSS processes that information only to carry out the task the dealership asked for — writing the deal into the dealership's own DMS.

In privacy terms, the dealership is the business responsible for the data and DSS is its service provider. We do not use deal data for our own purposes, and we never sell it.

How the extension works

The extension runs in a dealership employee's browser. When that employee opens a deal in SmartPath and chooses to sync it, the extension reads the deal, converts it into the format CDK requires, and sends the converted result to our service, which writes it to the dealership's DMS.

The conversion happens in the browser, before anything is sent. The SmartPath record itself is not uploaded — only the converted fields CDK needs. Those are the same fields the dealership would otherwise type into its DMS by hand.

The extension can access only three websites: Toyota's SmartPath console and API, and our own API. It requests no permission to read any other site, and it does not track browsing.

What is transmitted

When an employee syncs a deal, the following reaches our service on its way to the dealership's DMS:

• Customer — name, address, phone number, email address
• Vehicle — VIN, stock number, year, make, model, mileage, pricing
• Financing — finance type, term, price, down payment, rate, products
• Trade-in — vehicle details, allowance, payoff amount
• Rebates — amount
• Dealership staff — salesperson and manager identifiers used by the DMS
• Deal reference — deal identifier, dealer code, status, and the source record's address, used to prevent the same deal being written twice

Fields the DMS does not require are not sent. Where a dealership turns on an optional feature that needs more of the deal to work, additional deal data may be retained to support that feature — never including the information in the next section. That additional data is kept for 90 days and then erased, because it exists to help with a deal while that deal is being worked. The record that a deal was captured is kept; the deal detail inside it is not.

What we never retain

Consumer credit information is removed when a deal reaches our service, before anything is stored. This happens for every dealership and in every configuration. It is not a setting a dealership can switch on. Specifically, we do not retain:

• Credit scores, whether from a lender decision or stated by the customer
• Credit tiers or ratings
• Whether a credit inquiry was made
• Prior credit balances

No Social Security number, date of birth, or driver's licence number appears in the data at any point. Identity information is limited to the contact details listed above.

Account information

Each dealership employee who uses Autozuma has an account. We store the employee's name, work email address, role, and the dealership they belong to, together with sign-in records. Authentication is handled by our identity provider; we do not store passwords ourselves.

This website

If you submit the contact form we receive the details you provide — typically your name, email address, dealership, and message — and use them to reply. We do not run advertising trackers on this site and do not sell or share visitor information.

How we use data

We use the data described above only to:

• Write the deal into the dealership's own DMS
• Show the dealership a record of what was written and whether it succeeded
• Prevent the same deal being written to the DMS twice
• Diagnose failures and notify the dealership when a sync does not complete
• Provide support when asked

We do not use deal data to build profiles, to train models, or for marketing.

Sharing and disclosure

Deal data is sent to CDK Global, because that is the dealership's DMS and the purpose of the product. It is not shared with anyone else, and never between dealerships — each dealership's data is reachable only by that dealership's own users.

We rely on a small number of infrastructure providers to run the service — hosting, database, and transactional email — which process data on our behalf under contract. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may disclose information if legally required to do so, or to protect our rights or the safety of others.

Security

• All traffic uses TLS 1.2 or higher; the API is HSTS-enforced
• Each user is authenticated, and access is scoped to a single dealership
• Database access is restricted at the row level, enforced by the database itself
• Credentials used to reach the DMS are held in server configuration and never sent to the browser
• Sensitive values are masked in logs

Retention and deletion

We keep the record of a synced deal for as long as the dealership uses the service, so the dealership can show what was written to its DMS and so the same deal is not written twice. A dealership may ask us to delete its records at any time by writing to [email protected]; we will do so within 30 days unless we are required to keep them by law.

Deleting data from our service does not remove the deal from the dealership's DMS, which the dealership controls directly.

Your rights

If you are a California resident, the CCPA gives you the right to know what personal information is collected about you, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell personal information, so there is nothing to opt out of.

Because deal information belongs to the dealership, requests about a vehicle purchase are usually best directed to the dealership you did business with. If you contact us instead, we will help you reach them and will act on any instruction they give us. You may also write to us directly at [email protected].

Autozuma is a tool for dealership staff. It is not directed to children, and we do not knowingly collect information from anyone under 16.

Changes and contact

If we make a material change to this policy we will update the date at the top of this page and, where the change affects dealerships using the service, notify them directly.

Dealer Software Solutions, LLC
[email protected]
(877) 307-3507

See also our Terms of Service.