Privacy Policy

1. Who we are

DealerKey Auto is a Utah-licensed motor-vehicle dealer operating dealerkeyauto.com (the “Site”). Our principal place of business is 1096 N 450 W, Springville, UT 84663. This policy describes how DealerKey Auto (“DealerKey,” “we,” “us”) handles the personal information of Site visitors, subscribers, and Done-For-You clients.

2. What we collect

We collect three categories of information:

2.1 Information you provide.

• Lead form fields: name, email, phone, Utah city, vehicle(s) you are shopping, drive-out budget, and timeline;
• Account credentials for Auction Insider and Deal Analyst subscriptions;
• Payment details (processed by Stripe; DealerKey does not see or store full card numbers);
• Done-For-You Bid Authorization parameters: target vehicle spec, maximum approved bid, delivery ZIP, and, when the vehicle is won, the information required for Utah MVED title transfer (driver license, insurance, registration details);
• Messages you send by text, email, form, or during a scheduled call (calls are not recorded unless we tell you in advance).

2.2 Information collected automatically.

• Device and browser metadata (IP address, user agent, referrer, language);
• Pages viewed, searches run, listings clicked, and approximate city-level geolocation from IP;
• Cookies, local storage, and similar technologies for session management and aggregate analytics.

2.3 Information from third parties.

• Dealer auction inventory and Manheim Market Report (MMR) values;
• Retail comparable listings from public dealer sites;
• NADA and J.D. Power valuation datasets;
• Vehicle history snapshots (where included with an auction listing).

Third-party vehicle and market data is not personal information about you.

3. Why we use it

• To respond to your inquiry and help you find a vehicle;
• To operate Auction Insider and Deal Analyst subscriptions (authentication, saved searches, alerts, exports);
• To execute the Done-For-You Bid Service and the Utah MVED title paperwork that follows a winning bid;
• To send transactional SMS and email (bid updates, alerts you have saved, title handoff);
• To respond to a vehicle inquiry and send a limited email follow-up about that same request for up to 72 hours; every message includes a way to stop the follow-up;
• To send limited marketing email if you have opted in (weekly market-movers digest, new-tier announcements) — always with a one-click unsubscribe;
• To detect fraud, enforce our Terms, and debug the Site;
• To meet legal obligations (dealer recordkeeping, tax, subpoena response).

We never use lead form data to retarget ads for unrelated products, and we never run “advertising lookalikes” from our client list.

3.1 Mobile messaging.

Eligible Meta Instant Forms may offer a separate, optional and unchecked checkbox for vehicle-request and booking texts. If you select it, DealerKey may send the results link and up to three scheduled automated texts over three days about that vehicle request and booking an optional call, plus replies to questions you send. Texts are sent from 9 AM to 7 PM Mountain. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Consent is not a condition of receiving email results, booking a call or buying a vehicle.

We retain the Meta lead identifier, form identifier, checkbox key and response, phone number, timestamp, disclosure version and source as proof of the choice. A phone number, privacy-policy link, form submission or calendar booking without the checked optional SMS choice does not enroll you.

As an alternative, a booking page may offer a keyword program. That program begins only when you send the displayed keyword from your phone after reading its disclosure. Other Site comparison and price-check forms describe their requested text response at the point of collection. The program you opt into determines the messages and frequency you receive; permission for a requested response is not blanket permission for other marketing programs. Message and data rates may apply. Reply STOP to cancel or HELP for help.

DealerKey does not sell, rent, share, or transfer mobile numbers, SMS opt-in data, or SMS consent to third parties or affiliates for their marketing or promotional purposes. We may provide this information to service providers such as Twilio only as needed to deliver and operate the messaging program. Submitting a request does not commit you to buy. See our SMS Terms.

4. Who we share it with

We do not sell personal information. We share only with the service providers we need to operate the business, and only the data each provider needs:

We may also disclose information to law enforcement or a regulator (including Utah MVED) when legally compelled, or to defend a claim. If DealerKey is involved in a merger, acquisition, or asset sale, user information may transfer to the surviving entity; we will notify affected users by email at least 30 days before the transfer.

5. How long we keep it

• Lead-only records (never purchased, never subscribed): 24 months from last interaction, then deleted or anonymized.
• Active subscription accounts: retained for the life of the subscription plus 36 months (to service tax and dispute records).
• Done-For-You transaction records: retained for 7 years under Utah dealer recordkeeping rules (Utah Code §41-3-301) and IRS retention.
• Marketing opt-outs and SMS STOP records: retained indefinitely so we can honor your preference.
• Raw server logs: 90 days.

6. How we protect it

DealerKey uses reasonable administrative, technical, and physical safeguards: TLS in transit, encryption at rest (AWS KMS), access controls with unique credentials, and a small number of human operators with need-to-know access. No system is perfectly secure; report a suspected breach to dallin@dealerkeyauto.com immediately.

7. Cookies & tracking

We use a small set of cookies and similar technologies:

• Strictly necessary: session, CSRF, and authentication cookies. Cannot be disabled while logged in.
• Analytics: Google Analytics 4 in measurement-mode with IP-anonymization.
• Advertising: Meta Pixel and Google Ads conversion tags. Fire only on public pages and conversion events, never on authenticated account pages.

You can block or delete cookies through your browser. We honor the Global Privacy Control signal — when detected we treat it as an opt-out of cross-context behavioral advertising.

8. Your choices & rights

Regardless of where you live, you may:

• Request a copy of your data;
• Correct inaccurate information;
• Delete your account and associated lead data (subject to the dealer-recordkeeping retention above);
• Opt out of marketing email (every email has an unsubscribe link);
• Opt out of SMS (reply STOP to any text).

Email requests to dallin@dealerkeyauto.com with the subject line “Privacy Request.” We respond within 30 days.

8.1 California residents (CCPA / CPRA).

California residents have the right to know the categories of personal information collected, to request access or deletion, to opt out of sale or sharing (we do not sell or share in the CCPA sense), to correct inaccurate data, and to limit the use of sensitive personal information (we do not collect sensitive PI in the CCPA sense beyond driver-license data used for the required title transfer). We do not discriminate against California residents who exercise these rights.

8.2 Other states (CO, CT, VA, TX, OR, etc.).

Residents of states with comparable privacy laws have similar access, correction, deletion, and opt-out rights. Submit the same request to dallin@dealerkeyauto.com; we apply the rights of your state of residence.

8.3 Authorized agents.

An authorized agent may submit requests on your behalf with written proof of authorization.

9. Children

The Site is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, email us and we will delete it.

10. International visitors

DealerKey is a Utah-only service: we only deliver vehicles within 200 miles of Springville, Utah. If you visit from outside the United States, your information will be transferred to and processed in the United States.

11. Do Not Track & GPC

We do not respond to traditional Do Not Track browser signals because no consistent industry standard exists. We do honor the Global Privacy Control (GPC) opt-out signal as described in Section 7.

12. Changes to this policy

Material changes will be announced on the Site at least 14 days before taking effect. The “Last updated” date above always reflects the current version.

13. Contact

Privacy questions or requests:
DealerKey Auto — Attn: Privacy
1096 N 450 W
Springville, UT 84663
Email: dallin@dealerkeyauto.com
Phone: +1 (435) 266-4166

Related policies: Terms, SMS Terms, AI Voice Call Terms, Dealer Disclosures, Disputes & Refunds.