new_logo

Privacy Policy for Drive

Effective Date: 01/07/2025

1. Who We Are

Drive ("we", "our", or "us") is a Dealer Management System (DMS) that provides automotive dealerships with tools to manage their operations, including inventory, sales, service, finance, and customer relationships. This Privacy Policy describes how we collect, use, and protect personal information through our platform.

2. Who This Policy Applies To

This policy applies to:

  • Licensed car dealerships (both new and used) who are clients of Drive
  • Authorized staff of those dealerships who use Drive
  • End users/customers of dealerships, whose information is collected via the CRM or sales process, and processed by Drive on behalf of the dealer

3. What Information We Collect

a. Dealership & User Information (B2B)

We collect the following from dealerships and their authorized users:

  • Full name, job title
  • Email address and phone number
  • Login credentials (encrypted)
  • IP address, device, and system usage data
  • Dealership name, location, and license info
  • Inventory, transaction, and service history

b. End User / Customer Data (Collected on behalf of dealers)

When a dealership uses our CRM module, the following data may be collected from or about their customers:

  • Full name
  • Contact details (email, phone, address)
  • Driver’s license number (if entered)
  • Vehicle information (VIN, make, model)
  • Trade-in or appraisal information
  • Financing preferences
  • Purchase history, service records, lead source
  • Consent/opt-in status for communications

Note: Drive acts as a data processor for customer data collected through the CRM. The dealership is the data controller, and responsible for obtaining proper consent from their customers.

4. How We Use Your Information

a. For Dealers and Staff

  • To provide platform access and features
  • To manage user roles, permissions, and dealership data
  • To support sales, inventory, finance, and service workflows
  • To analyze platform usage and improve system performance
  • To communicate product updates and support information

b. For End-Customers (via CRM)

  • To allow dealers to manage leads and customer communications
  • To support vehicle sales, financing, trade-in evaluations, and servicing
  • To track customer preferences and transaction history
  • To generate reports and performance insights for the dealership

Drive does not use end-customer data for its own marketing or commercial purposes.

5. Legal Basis for Processing

For EU/EEA users, we process data under:

  • Contractual necessity – for delivering services to our clients
  • Legitimate interest – for security, product enhancement
  • Legal obligations – compliance with financial and data regulations
  • Consent – where explicitly obtained by the dealership from their customers

6. Data Sharing and Third Parties

We do not sell data. We only share data as follows:

a. At Dealer's Request

Customer data may be exported, integrated, or transferred to third-party systems (e.g., finance companies, DMV services, marketing tools) only upon written request from the dealership owner via email to [email protected].

b. With Service Providers

We use trusted vendors for:

  • Cloud hosting and storage
  • System analytics
  • Technical support and infrastructure

These vendors are bound by strict confidentiality and data processing agreements.

c. Legal Compliance

We may disclose data where required by law or lawful authority (e.g., subpoena, investigation, or legal process).

7. Data Retention

  • Dealer and staff data is retained for the duration of the subscription and up to 7 years thereafter (or as legally required).
  • End-customer data is retained as long as the dealership maintains their account or instructs us otherwise.
  • Upon dealership request, customer data may be deleted, anonymized, or exported.

8. Data Security

We use industry-standard security protocols:

  • Encryption of data in transit and at rest
  • Role-based access controls
  • Activity logs and audit trails
  • Multi-factor authentication
  • Secure API and infrastructure management

9. Cookies and Tracking

Drive uses cookies and tracking tools for:

  • Authentication
  • Session management
  • Usage analytics

You may disable cookies through your browser, but functionality may be impacted.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access or correct personal data
  • Request deletion ("right to be forgotten")
  • Object to or restrict processing
  • Withdraw consent (if applicable)
  • Request a copy of your data in portable format

Dealership clients or end-users may contact [email protected] to exercise these rights. If you are a customer of a dealership using Drive, we may refer your request to that dealership as the data controller.

11. Account Termination and Enforcement

Drive reserves the right to terminate any dealership or user account at any time without prior notice if:

  • There is a violation of our terms, policies, or misuse of the platform
  • Fraudulent, abusive, or illegal activity is suspected
  • The account poses a risk to system security or data integrity

We are not required to provide prior approval for such actions.

12. Children’s Data

Our platform is not intended for use by individuals under 16. We do not knowingly collect personal information from minors.

13. International Data Transfers

If you're accessing our platform from outside the country where our servers are hosted, your information may be transferred across borders. We ensure such transfers comply with international privacy standards.

14. Changes to This Policy

We may modify this Privacy Policy at any time. When changes are made:

  • The revised version will be posted on our website with a new "Last Updated" date
  • Material changes will be communicated via email or platform notification

15. Acceptance of Policy

By using the Drive platform, you acknowledge and agree to this Privacy Policy. Continued use of the system implies your full acceptance and obligation to respect these terms. If you do not agree with this policy, you must discontinue use of the platform immediately.

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Province of Quebec, Canada, without regard to its conflict of law principles. Any disputes arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts located in the Province of Quebec.

17. Contact Us

For questions or concerns about this policy:

Drive DMS
Email: [email protected]