Privacy Policy

REVMARQ TOOLS — PRIVACY POLICY

Version 2.0 · Effective September 7, 2026 · Replaces the version dated June 11, 2026

Who we are. REVMARQ Tools is operated by REVMARQ Tools, a Florida limited liability company based in Orlando, Florida ("REVMARQ," "we," "us"); our registered name and registered agent are on file with the Florida Department of State, Division of Corporations. We provide operating software to retail automotive dealerships in the United States. This Policy explains what personal information we collect through revmarqtools.com and the REVMARQ Tools application (the "Service"), how we use and share it, how we protect it, and the choices available to you. Questions: privacy@revmarqtools.com.

Two kinds of information, two roles.

Dealership data we process for our customers. Dealerships that subscribe to the Service load their own business records — inventory, deals, customer and prospect records, employee names and sales activity, settings and documents ("Dealer Data"). For personal information in Dealer Data, the dealership is the business responsible for it (the controller, and under the Gramm-Leach-Bliley Act the financial institution) and REVMARQ is its service provider. We process Dealer Data only to provide the Service to that dealership, under the Terms of Service and its Data Protection Addendum. If you are a consumer or an employee whose information a dealership has entered, please direct requests about that information to the dealership; we will assist it as our contract requires. We do not sell Dealer Data and we do not use it for advertising.

Information we collect for ourselves. We are responsible for information about our website visitors, prospects, and our customers' account users, described below.

Information we collect.

• Account and profile information — name, work email address, dealership and rooftop, role and permissions, profile picture (if you sign in with Google), phone number if you give it, preferences, and the dates and versions of legal terms you accepted.
• Demo and sales inquiries — when you request a demo or contact sales we collect your name, dealership, role, email, phone, number of rooftops and units, preferred format and anything you write, plus the page you came from, referrer and campaign tags, and the time of your consent to be contacted.
• Billing information — billing contact, plan, invoices and payment status. Card and bank details are entered directly with our payment partner (Paddle) and are not stored by REVMARQ; we receive a token, the card type and the last four digits.
• Usage and device information — pages and tools used, actions taken (including changes to settings, uploads, exports and prints), timestamps, IP address, browser and device type, screen size, language, error reports and performance data. Security-relevant actions are written to your dealership's activity log, which the dealership's administrators can see.
• Communications — support requests, emails and their attachments, and our replies.
• Cookies and similar technologies — see "Cookies" below.

We do not knowingly collect information from anyone under 18; the Service is for businesses only.

How we use information. To create and secure accounts and workspaces; provide, maintain and support the Service; process payments and send invoices, receipts and renewal notices; respond to demo requests and inquiries and follow up about our products; send service announcements, security notices and legal-terms updates; detect, investigate and prevent fraud, abuse and security incidents; enforce our Terms; analyze usage to improve the Service and develop new features; produce aggregated, de-identified statistics; and comply with law. We may send marketing emails to business contacts about REVMARQ products; every marketing email includes an unsubscribe link, and we honor opt-outs promptly. Transactional and security emails cannot be unsubscribed from while you hold an account.

How we share information. We share personal information only:

• with service providers that process it for us under contract — cloud database and file hosting, application hosting and content delivery, transactional email, error and performance monitoring, customer-support tools, our payment partner, and Google (for optional Google sign-in). Our current sub-processors that touch Dealer Data are listed at https://revmarqtools.com/legal/subprocessors;
• with your dealership — your dealership's administrators and managers can see your profile, role, activity log entries and the records you create in their workspace;
• for legal reasons — to comply with law, subpoena or court order, to protect the rights, property or safety of REVMARQ, our customers or others, or to enforce our agreements;
• in a business transfer — with a successor in a merger, acquisition, financing or sale of assets, under this Policy; and
• with your direction or consent.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use third-party advertising cookies on the Service.

Google sign-in. If you choose to sign in with Google, we receive your name, email address and profile picture from Google to create and secure your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access in your Google account settings at any time.

Cookies. We use strictly necessary cookies and local storage to keep you signed in, remember your preferences (such as theme and layout), protect against cross-site request forgery, and balance load. We use privacy-focused, first-party usage analytics to understand how the Service is used; it does not set advertising cookies. We do not use advertising or social-media tracking cookies. Because we do not track visitors across third-party sites, we do not respond differently to "Do Not Track" or Global Privacy Control signals, and there is nothing to opt out of; you can control cookies in your browser, but the Service will not function without the strictly necessary ones.

Security. We protect information with administrative, technical and physical safeguards appropriate to its sensitivity, including encryption in transit and at rest, per-dealership data separation with database-level access rules, role-based permissions, multi-factor authentication available to every user, logged and visible staff access to customer workspaces, audit logs, encrypted backups, and secure development practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security. If we determine that a breach of security affects personal information we process, we notify affected dealerships and, where we are the responsible party, affected individuals and regulators, within the time required by law (including Florida Statutes § 501.171). Report security concerns to security@revmarqtools.com.

Retention. We keep account information for as long as the account exists and for 24 months after it is closed (longer if needed for disputes, audits or legal obligations). We keep Dealer Data for the dealership's subscription term plus a 30-day export window, then delete or de-identify it within 90 days, subject to backup rotation (35 days) and legal holds. Demo and sales inquiries are kept for 24 months from the last contact unless you become a customer or ask us to delete them sooner. Demonstration sandboxes expire automatically after 7 to 30 days and hold only fictional sample data. Activity and audit logs are kept for 24 months. Billing records are kept for seven (7) years as tax law requires.

Your choices and rights. You can review and update your profile in Account settings. Dealership administrators can export dealership data and close user accounts at any time. You can unsubscribe from marketing email through the link in any message. Depending on where you live, you may have rights under state privacy laws to access, correct, delete or obtain a copy of your personal information, or to opt out of certain processing; we honor such requests as applicable law requires and never discriminate for exercising them. To make a request, email privacy@revmarqtools.com from the address on your account, or ask your dealership's administrator; we will verify your identity and respond within the time the law allows (generally 45 days). If you are an authorized agent, we will ask for proof of authorization. The Service is offered only to businesses in the United States; if you are located in the European Economic Area, the United Kingdom or Switzerland, please do not use the Service, as we do not intend to offer it there.

Links and third parties. The Service may link to third-party sites and products (identity providers, payment checkout, document tools). Their privacy practices are their own; review their policies.

Changes. We will post any changes here with a new version number and effective date, and for material changes we will notify account administrators by email or in-product notice at least thirty (30) days in advance.

Contact. REVMARQ Tools · Orlando, Florida · privacy@revmarqtools.com.