The documents behind the handshake.

At a Glance

This Privacy Policy explains how Axiom Technologies, LLC ("Auto Expert," "we," "us") collects, uses, and shares personal information. In plain terms:

• If you visit our website, request a demo, or sign up for updates, we collect information you give us and basic site analytics.
• If you use the Auto Expert software as an employee of a dealership, we collect account, usage, and security information so the Service works and so we can support you.
• If you are a customer of a dealership that uses Auto Expert, your personal information (name, contact details, vehicle, service records) flows through the Service on behalf of that dealership. The dealership decides what data is processed and is the primary point of contact for your privacy rights regarding that information.
• We do not sell your personal information for money.
• This policy is written to meet California's privacy law (CCPA/CPRA), which is one of the strictest U.S. state privacy laws, and to cover comparable rights in other U.S. states.

1. Who We Are

This Privacy Policy is issued by Axiom Technologies, LLC, a Nebraska limited liability company with its principal place of business in Lincoln, Nebraska ("Auto Expert," "we," "our," or "us"). Auto Expert provides a software-as-a-service platform for automotive dealerships (the "Service"), described at theautoexpert.io (the "Site").

2. Scope of This Policy

This Privacy Policy applies to personal information we process in connection with:

• the Site, including marketing pages, demo requests, waitlist signups, newsletter signups, and webinar or event registrations;
• the Service, including authentication, in-product activity, support, and product communications; and
• personal information about a dealership's own customers ("Dealer Customers") that flows through the Service.

Our role is different for different categories of personal information:

Auto Expert as Business / Controller. For Site visitors and for accounts and usage data of dealership employees who use the Service ("Authorized Users"), Auto Expert acts as the "business" (under California law) or "controller" (under other privacy laws) and determines the purposes and means of processing.

Auto Expert as Service Provider / Processor. For personal information about Dealer Customers that an Authorized User submits to or generates through the Service (for example, a customer record, repair order, vehicle history, or appointment), Auto Expert acts as a "service provider" (under California law) or "processor" (under other privacy laws) on behalf of the dealership that engaged us. The dealership is the "business" or "controller" of that information. The terms of the contract and Data Processing Agreement between Auto Expert and that dealership govern how we process Dealer Customer information.

If you are a Dealer Customer seeking to exercise rights with respect to your information held by a specific dealership, please contact that dealership directly. We will support the dealership in responding to your request as required by law and our contract with them.

Depending on the deployment model the dealership selects, Dealer Customer information is stored either on infrastructure Axiom controls (AE-Hosted) or on infrastructure the dealership provides and controls (Customer-Hosted). The Data Processing Agreement between Auto Expert and the dealership describes each model and the related responsibilities.

3. Personal Information We Collect

We collect personal information in the categories described below. The specific categories we collect about any individual depend on how that person interacts with us.

3.1 Site Visitors and Prospects

• Identifiers — name, business email, business phone, job title, dealership name, IP address, device identifiers, and online identifiers (e.g., cookie IDs).
• Commercial information — interest level, demo notes, products discussed, and any information you provide in marketing or sales communications.
• Internet or network activity — pages visited, links clicked, referring URLs, browser and device characteristics, approximate location derived from IP address.
• Professional information — job role and responsibilities at the dealership.
• Inferences — segmentation and lead-quality information derived from the above.

3.2 Authorized Users (Dealership Employees Who Use the Service)

• Identifiers — name, work email, work phone, job title, dealership affiliation, user ID, login credentials (passwords are stored hashed and salted), session tokens.
• Access and security information — IP address, device information, sign-in events, multi-factor authentication state, audit logs of in-product actions.
• Usage information — features used, timestamps, error and crash data, support communications.
• Billing contact information — for the individuals designated by the dealership as billing or administrative contacts.

3.3 Dealer Customer Data Processed on Behalf of Dealerships

In the ordinary course of using the Service, dealerships submit, upload, or generate personal information about their own customers. We process this information on the dealership's behalf and under its instructions. Categories include:

• Identifiers — customer name, mailing address, email, phone number, customer account number.
• Vehicle information — Vehicle Identification Number (VIN), make, model, year, mileage, plate, vehicle ownership history.
• Service and transaction records — repair orders, declined work, service history, appointment history, parts orders, warranty information, recall status, photos or media captured during service (e.g., multi-point inspection photos), and amounts owed or paid.
• Payment information — limited transactional information sufficient to associate a payment with a repair order; we do not store full card numbers, which are handled by the dealership's payment processor.
• Communications — texts, emails, voicemails, or call recordings exchanged between the dealership and its customer through the Service, where the dealership has enabled those features and obtained any required consents.
• Inferences and analytics — derived information such as service recommendations or scheduling suggestions.

3.4 AI Feature Data

• Audio recordings (e.g., voice-to-RO dictation, call recordings, or call summaries) that an Authorized User submits to AI-powered features.
• Text inputs and outputs of AI features, including any personal information present in those inputs and outputs.
• Model interaction metadata, such as which feature was used, latency, and quality signals.

3.5 Sensitive Personal Information

We do not knowingly collect or solicit "sensitive personal information" as defined by California law (such as government-issued identifiers, financial account access credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, mail or message contents not directed to us, genetic data, biometric identifiers, or health information). Some sensitive information (for example, a partial driver's license number associated with a customer record) may be submitted by a dealership to support legitimate dealership operations. We process such information only on the dealership's instructions and do not use it to infer characteristics about an individual.

Where a dealership enables payroll or human-resources features, the Service processes employee compensation and financial account information (such as bank account and routing numbers) solely to provide those features and only on the dealership’s instructions, as described in our Data Processing Agreement.

4. Sources of Personal Information

• Directly from you, when you fill out a form, request a demo, sign up for an account, contact support, or otherwise communicate with us.
• From the dealership that employs or engages you, when it creates your Authorized User account or grants you access.
• Automatically, when you use the Site or Service (cookies, server logs, analytics).
• From integrated third-party services that the dealership has connected to the Service (such as DMS integrations, payment processors, communication providers, or marketing tools).
• From service providers and sub-processors we use to operate the Service.
• From publicly available sources or business data providers, for limited sales and marketing prospecting purposes.

5. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• Provide, operate, secure, and support the Site and the Service.
• Authenticate Authorized Users, enforce access controls, and protect against fraud, abuse, and security incidents.
• Respond to demo requests, sales inquiries, and support communications.
• Bill for the Service and collect amounts owed.
• Send transactional communications (e.g., service notices, security alerts, account changes).
• Send marketing communications about the Service, with the ability to opt out at any time.
• Improve the Service, including by analyzing aggregated and de-identified usage information. We do not attempt to re-identify de-identified data.
• Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.
• Process Dealer Customer Data solely as instructed by the dealership, as set forth in our contract and Data Processing Agreement with that dealership.
• Operate AI features, including transcription, summarization, drafting suggestions, and similar functionality, in accordance with the dealership's instructions and Section 8 below.

We do not sell personal information for money. Whether certain online tracking (for example, advertising cookies or pixels) qualifies as "sharing for cross-context behavioral advertising" under California law is addressed in Section 7.

6. How We Disclose Personal Information

We disclose personal information to the following categories of recipients, only as needed for the purposes described above and subject to written agreements that require appropriate confidentiality and security protections:

• Sub-processors and service providers that help us operate the Service, including cloud hosting, database, security, analytics, customer support, billing, communications, and AI infrastructure providers. A current list of our sub-processors is available to dealership customers on request.
• The dealership that engaged us, with respect to information processed on that dealership's behalf, and to Authorized Users designated by that dealership.
• Integrated third-party services that the dealership has connected to the Service, at the dealership's direction.
• Professional advisors (lawyers, accountants, auditors, insurers).
• Government authorities and other parties as required by law, legal process, or court order, or as necessary to protect the rights, property, or safety of Auto Expert, our customers, or others.
• An acquirer or successor entity in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets. We will require the successor to honor commitments made in this Policy or provide notice of any material change.
• Other parties with your consent or at your direction.

Auto Expert has not sold the personal information of consumers in the 12 months preceding the Effective Date of this Policy. Whether certain cookies and pixels described in Section 7 constitute "sharing" under California law is addressed below.

7. Cookies, Pixels, and Similar Technologies

We and our service providers use cookies, pixels, SDKs, and similar technologies on the Site and, to a more limited extent, in the Service. We use these technologies for the following purposes:

• Strictly necessary — authentication, session management, security, load balancing, and basic site functionality. These cannot be turned off.
• Functional — remembering preferences and improving user experience.
• Analytics — understanding how visitors and Authorized Users use the Site and Service so we can improve them. None currently deployed as of the Effective Date.
• Marketing and advertising — measuring marketing campaign performance and serving relevant content. None deployed as of the Effective Date. If we deploy such tools in the future, certain disclosures may qualify as "sharing for cross-context behavioral advertising" under California law and as a "sale" or "targeted advertising" under other state laws. If you are a resident of a state granting such rights, you may opt out as described in Section 9 and at theautoexpert.io/legal.

Your choices:

• Browser controls — most browsers allow you to refuse or delete cookies; doing so may impair site functionality.
• Universal opt-out — we honor the Global Privacy Control (GPC) signal for residents of states where it has legal effect. When we detect a valid GPC signal from your browser, we treat it as a request to opt out of "sale" and "sharing" with respect to that browser and device.
• Preference center — you can manage non-essential cookies through your browser settings and any cookie controls we present on the Site.

8. AI Features and Automated Processing

Auto Expert may offer features powered by artificial intelligence and machine learning, including speech-to-text, summarization, drafting assistance, scheduling recommendations, and similar functionality ("AI Features"). Where the Service offers AI Features:

• AI Features are off by default at the dealership level except where required for core functionality. A dealership administrator controls which AI Features are enabled.
• Inputs and outputs of AI Features that include personal information are processed on the dealership's behalf, subject to the contract and Data Processing Agreement with that dealership.
• We use sub-processors to provide certain AI Features. Our current AI sub-processors are disclosed to dealership customers on request, including the categories of data they receive and retain.
• We do not allow our AI sub-processors to use Dealer Customer Data to train their general-purpose foundation models, except where the dealership has separately and expressly authorized such use in writing.
• We do not use AI Features to make decisions that produce legal or similarly significant effects about an individual without meaningful human review.
• We may use aggregated and de-identified usage information to evaluate and improve the quality of AI Features.

9. Your Privacy Rights

Depending on where you live and your relationship with Auto Expert, you may have the following rights. Where the request relates to information processed by a dealership through the Service, please direct your request to the dealership; we will assist the dealership as required by law and our contract with them.

9.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights with respect to personal information that Auto Expert processes as a business:

• Right to know — request information about the categories and specific pieces of personal information we have collected, sources, purposes, and categories of recipients in the preceding 12 months.
• Right to delete — request deletion of personal information we collected from you, subject to exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell personal information for money; if any of our advertising technologies qualifies as "sharing," you may opt out using the "Do Not Sell or Share My Personal Information" link in our Site footer, by submitting a valid GPC signal, or by emailing us as described below.
• Right to limit use of sensitive personal information — to the extent we use sensitive personal information for purposes beyond those permitted without a limitation right.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

Notice at Collection. The categories of personal information we collect and the purposes for which we use them are described in Sections 3 and 5. We retain personal information as described in Section 11. We do not knowingly sell or share personal information of consumers under 16.

Authorized agents. You may use an authorized agent to submit a request. We may require proof of the agent's authority and verification of your identity.

To submit a request, email support@theautoexpert.io or use theautoexpert.io/legal. We will respond within the timeframe required by law (generally 45 days, extendable by an additional 45 days where reasonably necessary).

9.2 Residents of Other U.S. States

Residents of states that have enacted comprehensive privacy laws — including, as of the Effective Date, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Maryland, Minnesota, Indiana, Tennessee, Iowa, Kentucky, and Rhode Island — may have rights similar to those described above, including the right to access, delete, correct, and obtain a portable copy of personal information, and to opt out of targeted advertising, certain profiling, and the sale of personal information. The specific scope of these rights varies by state.

To exercise these rights, contact us as described in Section 14. If we deny your request, you may have the right to appeal that decision; instructions for an appeal will be provided in our response.

9.3 Nevada Residents

Nevada residents may submit a verified request directing us not to sell certain covered personal information. We do not currently sell covered information as defined under Nevada law. To submit a request, contact us at support@theautoexpert.io.

9.4 Residents Outside the United States

The Service is operated from and intended for use in the United States. If you access the Site or Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States. If applicable data protection laws of your jurisdiction (for example, the EU or UK GDPR) apply to our processing, you may have additional rights, including the right to lodge a complaint with a supervisory authority. Contact us as described in Section 14 to learn more.

9.5 How to Exercise Your Rights

• Email support@theautoexpert.io with the subject line "Privacy Rights Request" and describe your request.
• Use theautoexpert.io/legal, if available.
• If your request concerns information held by a specific dealership through the Service, please contact that dealership directly. We will assist the dealership as required by law.

We will verify your request using reasonable means proportionate to its sensitivity. We may decline a request or charge a reasonable fee if it is manifestly unfounded or excessive, as permitted by law.

10. Data Retention

• Site visitor and prospect information — retained until you opt out or for up to 36 months after your last interaction, whichever is sooner, unless we are required to retain it longer for legal reasons.
• Authorized User account information — retained for the duration of the dealership's subscription and for up to 90 days after termination, after which it is deleted or de-identified, except where retention is required for legal, accounting, or audit purposes.
• Dealer Customer Data — retained as set forth in our contract with the dealership. By default, Dealer Customer Data is available for export during the subscription term and for 30 days after termination, after which it is deleted unless the dealership instructs otherwise or applicable law requires longer retention.
• Security and audit logs — retained for 12 months for security and incident response purposes.
• Backups — retained on a rolling cycle consistent with our backup policies; backup deletion follows the lifecycle of the backup set, not the moment of deletion of the underlying record.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit using TLS, encryption of data at rest, role-based access control, multi-factor authentication for administrative access, logging, vulnerability management, and a written incident response plan.

Honest current state. We maintain administrative, technical, and physical safeguards designed to protect personal information, and we continue to mature our security program over time, including alignment with recognized industry frameworks. Our current security practices are summarized in our Security overview. We will update that page and this Policy as our posture evolves. No system can be guaranteed to be 100% secure, and we cannot guarantee absolute security.

If we become aware of a security incident affecting personal information, we will notify affected dealerships and, where applicable, Authorized Users and Dealer Customers, in the timeframe required by law and our contracts.

12. Children's Privacy

The Site and the Service are intended for use by businesses and adult professionals. We do not knowingly collect personal information from children under 16. Dealerships should not submit Dealer Customer Data about minors except where strictly necessary in the ordinary course of vehicle service operations (for example, a customer record associated with a co-owner who is over 18). If you believe a child has provided personal information to us, contact us at support@theautoexpert.io and we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and provide notice as required by law (for example, by email to Authorized Users, in-product notice, or a notice on the Site). Your continued use of the Site or Service after the effective date of any update constitutes your acceptance of the updated Policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

• Privacy questions and rights requests: support@theautoexpert.io
• Security questions or incident reports: support@theautoexpert.io
• General inquiries: support@theautoexpert.io
• Mailing address: Axiom Technologies, LLC, Lincoln, Nebraska, USA

15. State-Specific Disclosures

15.1 California Notice at Collection (Summary Table)

15.2 Nevada

Nevada residents may submit a request directing us not to sell their covered personal information. As of the Effective Date, we do not sell covered information under Nevada law. Contact support@theautoexpert.io to submit a request.

15.3 Other States

Residents of states with comprehensive privacy laws may have rights described in Section 9.2. The specific scope of those rights, exceptions, response timeframes, and appeal mechanisms vary by state. Contact us at support@theautoexpert.io to exercise any such right.