Privacy policy

Who is responsible

AutoLotUp processes the data described here to provide the service. To exercise your rights, or to request the controller’s identification details, email [email protected].

Account and team data

When you create a lot we ask for what we need to run the account: name, email, business name, logo, brand colors, branches, hours, and the contact details you choose to publish, such as phone, WhatsApp, email, or location.

If you invite your team, we store each person’s email and the role you assign: administrator, manager, or salesperson.

Inventory and the public catalog

We store the vehicles you add: photos, price, branch, status, and the rest of the listing. What you publish appears on your catalog. Drafts stay unpublished. You decide whether reserved or sold vehicles remain visible.

Contact details and the location you place on the catalog are visible to anyone who opens that page.

Visits, campaigns, and WhatsApp

The dashboard measures views, clicks, shares, and the source of a visit when someone arrives through a campaign link, for example from Facebook, Instagram, or TikTok. Those figures are catalog metrics, not a message inbox.

The WhatsApp button opens WhatsApp for the person viewing the listing. AutoLotUp does not receive the message and does not record whether it was sent. Phone and email work the same way: they leave the catalog and open that person’s own app.

Marketing site

On autolotup.com we store the language you choose (Spanish or English) in this browser. We also use Google Analytics to understand how the marketing site is used. That measurement is separate from your lot’s metrics.

Why we use the data

• To create and manage your account, team, and inventory.
• To publish the catalog on your subdomain and, from the Pro plan up, on a domain you connect.
• To show you visit and campaign metrics.
• To charge the plan you subscribe to and to tell you if the subscription expires.
• To provide support and improve the service.

Who we share it with

We do not sell personal data. The catalog shows only what you publish.

We use providers to host the service. On the marketing site, Google Analytics processes visit data under its own terms. If you connect your own domain, that domain registration stays with your registrar.

WhatsApp is a third-party service and is involved only when someone taps the button.

How long we keep it

We keep it while the account is active. If the plan expires and is not renewed, the dashboard and catalog stay locked, but the data remains tied to the account until you delete it or ask us to delete it.

You can ask us to delete the account and inventory at [email protected]. We may keep what we need to meet a legal duty or resolve a claim.

Your rights

You can ask for access, correction, deletion, or restriction, and you can object to certain uses. If you are in Mexico, these are the ARCO rights under the Federal Law on Protection of Personal Data Held by Private Parties. If you are elsewhere, you can use the same email to exercise the rights your local law gives you.

Write to [email protected]. Withdrawing consent does not undo processing that already happened while that consent was in place.

Children

AutoLotUp is a service for businesses. It is not directed at children, and we do not knowingly ask children for personal data.

Changes

If we update this policy, we will change the date on this page. Use of the service after that change is covered by the current text.