Privacy Policy

Information We Collect

When you use LotGods, we may collect:

• Email address (when you create an account via Google Sign-In or Magic Link)
• VIN numbers and ZIP codes you search (to provide vehicle intelligence)
• IP address and browser information (for analytics and security)
• Payment information (processed securely by Stripe - we never see your full card number)
• Purchase and subscription history (transaction status, plan, renewal dates - used to manage your account access)

How We Use Your Information

• To provide vehicle research and intelligence services
• To manage your account and subscription
• To prevent abuse and enforce usage limits
• To improve our service and fix issues
• To operate and maintain the service and provide support, authorized LotGods staff may access your account and usage data when needed to assist you, resolve an issue, keep the service running, or investigate abuse

Data Security

We use industry-standard security measures including HTTPS encryption, secure password hashing, and Stripe's PCI-compliant payment processing. We will never sell, share, or provide your personal information to any third party under any circumstances.

Third-Party Services

LotGods uses several categories of third-party service providers to deliver your reports. We share only the minimum information each provider needs to do its job and never sell your personal data.

• Authentication providers - Google and Apple sign-in services (email + profile info only)
• Payment processors - Stripe for web payments; Apple App Store and Google Play Billing for in-app purchases. Full card/payment-method details are handled by those providers; we only receive transaction status
• Email delivery - our transactional-email provider delivers sign-in and account-notification messages (recipient email only)
• Government vehicle-data sources - NHTSA APIs for decode, recall, safety-rating, and complaint data (VIN + make/model/year only)
• Automotive market-data providers - licensed data sources that power market values, comparable listings, paint/color decoding, and window-sticker discovery (VIN + search metadata only)
• AI intelligence service - a large-language-model service we query for vehicle insights, awards, warranty estimates, and maintenance schedules (year/make/model/trim only never personal data)
• Hosting + infrastructure - our own servers host user accounts and search data; we run no analytics or ad trackers on your vehicle research
• Ad conversion measurement - on our paid-product checkout pages only (Marketplace Lister and CRM Automator), we tell Google and Meta when a purchase happens so we know which ad worked. We send only an anonymous ad-click ID and the sale amount - never your searches, your email, or any personal data, and never on the free VIN decoder or inside our apps

We do not sell your personal data, share it with advertisers, or use it for behavioral targeting.

Data Retention

We retain your account data (email, name, search history) while your account is active. When you delete your account (from the user menu in the app or via our public deletion page), we permanently erase all associated data - account, search history, saved payment methods on our side, all subscription records - within 30 days. Aggregate, anonymized usage statistics (e.g. total searches per day) may be retained indefinitely for service monitoring; these contain no personal identifiers.

Invoices and payment records required by law may be retained by our payment processors for their legally-required retention period, independent of your LotGods account.

Your Rights

• Access + export: request a copy of your personal data by emailing [email protected]
• Delete: permanently delete your account and all data from the user menu or lotgods.com/account/delete
• Correct: email us to update any inaccurate information
• California / EU residents have additional rights under CCPA / GDPR including objecting to processing and data-portability requests

Security Incident Notification

If we become aware of a security incident affecting your personal data, we will notify affected users by email within 72 hours of confirmation and describe the data involved, our response, and any steps you should take.

Google User Data - Limited Use Disclosure

When you sign in with Google, LotGods receives only the following information from your Google account: your email address, name, and profile picture. We use this data solely to create and authenticate your LotGods account, display your name and avatar within the app, and send account-related emails. We do not access your Gmail, Drive, Contacts, Calendar, or any other Google service.

LotGods' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we affirm that:

• We use Google user data only to provide and improve user-facing features of LotGods.
• We do not transfer Google user data to third parties except as necessary to provide those features, for security purposes, or to comply with applicable law.
• We do not use Google user data for serving advertisements, including retargeted or personalized advertising.
• We do not use Google user data to train generalized or personalized AI or machine-learning models.
• We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security (e.g. investigating abuse), or it is required to comply with applicable law.
• We do not sell Google user data to third parties under any circumstances.

Cookies & Local Storage

We use browser local storage to maintain your login session and track anonymous search usage. LotGods uses cookies and similar technologies, including the Meta (Facebook) Pixel, the Google tag (Google Ads), and the TikTok Pixel, to measure advertising performance and understand how visitors use the site. Where you provide it, hashed identifiers such as email may be shared with these providers to match conversions. You can opt out of personalized advertising through your Google, Meta, and TikTok ad settings, or through your browser and device controls.

In-App Purchases & Store Subscriptions

Subscriptions purchased through the Apple App Store or Google Play are managed by those stores. Deleting your LotGods account removes all of your data from our servers but does not automatically cancel a recurring App Store or Google Play subscription - you must cancel those in your device's store settings. Web subscriptions (via Stripe) are canceled automatically as part of account deletion.

Chrome Extension - LotGods Marketplace Lister

The optional LotGods Marketplace Lister Chrome extension runs in the user's own browser and is governed by this same privacy policy. Specific to the extension:

• What it reads: vehicle data (year, make, model, trim, mileage, price, VIN, photos, dealer-provided description) from the dealer-website vehicle-detail page the user is actively viewing. Only when the user explicitly clicks the "Post to FB" banner or the side-panel grab button - never silently in the background.
• What it sends to our servers: the vehicle data above, the user's saved profile (name, phone, dealership), and a JWT auth token, to our backend at lotgods.com/api/marketplace/* - used to generate AI listing descriptions, save listing history, and gate access by subscription status.
• What it does NOT read: social media (facebook.com is touched only on /marketplace/create URLs the extension itself opens to publish listings - never to read user posts), Gmail, banking, Google search, YouTube, Apple ID, or any other identity-provider domain. Those domains are explicitly excluded in the extension manifest.
• Local storage: the extension stores the user's name, phone, dealership name, saved Facebook group lists, listing history, and UI preferences in Chrome's extension storage so they don't have to re-enter information on every listing.
• No remote code execution: all JavaScript is bundled in the extension package. Fetches return JSON data only - never code that is evaluated.
• Subscription required: the extension is inert without an active LotGods Suite subscription billed through lotgods.com or the user's app store account.

Chrome Extension - LotGods CRM Automator

The optional LotGods CRM Automator Chrome extension runs in the user's own browser and is governed by this same privacy policy. Specific to the extension:

• What it reads: task and customer detail data (customer first name, vehicle of interest, last contact outcome, days since last contact, salesperson notes) from the dealership CRM page the user is actively signed into. Only when the user explicitly clicks Draft, runs the daily sweep, or has Monitor Mode enabled - never on idle pages.
• What it sends to our servers: the customer/task data above, the user's rep profile (name, phone, email, dealership name), the user's CRM Login email (for the one-CRM-Login-per-subscription anti-sharing lock), and a JWT auth token, to our backend at lotgods.com/api/crm-automator/* - used to generate AI follow-up drafts and gate access by subscription status. No customer message content is stored long-term; we keep aggregated usage counters (call count, cents spent) for billing/abuse detection only.
• AI provider disclosure: the customer/task data and prior-conversation context sent to our backend are forwarded to commercial large-language-model providers (currently OpenAI and xAI/Grok) so they can generate the follow-up draft text on the salesperson's behalf. These providers process the request and return the generated text. Per our agreements with these providers, the data is NOT used to train their models. We do not select an AI provider that uses data for training. Drafts and the data used to generate them are not retained by our backend beyond the response cycle.
• What it does NOT read: Gmail, banking, Google search, YouTube, Apple ID, or any other identity-provider domain. The extension manifest restricts host permissions to the specific dealership CRM domains the salesperson uses for daily work.
• CRM Login binding: on the first AI draft, the subscription is permanently bound to the CRM Login email the user is signed into. Subsequent calls with a different login are refused. This is anti-account-sharing protection - the lock can be cleared by emailing [email protected].
• Local storage: the extension stores the user's rep profile, auth token, UI preferences, and short-lived AI draft cache in Chrome's extension storage. Persistent settings sync to our servers so they travel across PCs the user signs into.
• No remote code execution: all JavaScript is bundled in the extension package. Fetches return JSON data only - never code that is evaluated.
• No third-party CRM affiliation: LotGods CRM Automator is designed for use alongside leading dealership CRM platforms but is not affiliated with, endorsed by, or sponsored by any CRM vendor. All third-party trademarks are the property of their respective owners.
• Subscription required: the extension is inert without an active LotGods CRM Automator subscription billed through lotgods.com.

Contact

For privacy-related questions, contact us at [email protected].