Privacy Policy

• Account information: name, email, phone number (optional), and password (stored as a salted hash, never in plain text).
• Usage information: basic activity within the Service (such as sign-in times, devices, and an audit log of sensitive actions) needed for security and support.
• Billing information: if you’re on a paid plan, payment details are handled by our payment processor — we do not store full card numbers ourselves.

As part of using the Service, you may enter information about your own clients — which can include name, contact details, income, date of birth, address, credit-related information, and documents you upload — in order to build quotes and manage deals. This information is entered and controlled by you, not by us. We store it on your behalf so the Service can function, and we do not use it for our own marketing, nor do we sell it. When you send a client a quote link, the client sees only the quote figures you choose to share; your fees and profit are never shown to them.

• To operate, maintain, and improve the Service.
• To authenticate accounts and keep the Service secure (rate-limited sign-ins, hashed passwords, session expiry).
• To send the notifications you ask for and communicate with you about your account, support requests, or changes to the Service.
• To comply with legal obligations.

We don’t sell personal information. We may share information with:

• Service providers who host infrastructure, store files, deliver email, or process payments on our behalf, under confidentiality obligations.
• Third-party data providers when you use integrations (for example, lender rates, vehicle data, inventory, or tax-rate lookups) — only the data needed to perform that lookup is sent.
• Law enforcement or regulators where required by law.

We use industry-standard safeguards including HTTPS in transit, encryption at rest for stored files, hashed password storage, private file storage with short-lived access links, and rate-limited authentication. No system is perfectly secure, and we can’t guarantee absolute security, but we work to protect information appropriately given the sensitivity of the data the Service handles.

We retain account and client data for as long as your account is active, or as needed to provide the Service. If you close your account, you may request deletion of your data, subject to any legal retention requirements.

Depending on where you live, you may have rights to access, correct, or delete personal information we hold, or to object to certain processing. To exercise these rights — for your own account information, or on behalf of a client whose data you’ve entered — contact us at sales@arvodesking.com. California residents may have additional rights under the CCPA; EU/UK residents may have rights under GDPR-equivalent law depending on your circumstances.

We use a secure session cookie to keep you signed in. We do not use third-party advertising trackers.

The Service is intended for business use by adults (auto brokers and dealers) and is not directed at children. We do not knowingly collect information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

Questions about this Privacy Policy or how your data is handled? Reach us at sales@arvodesking.com.