Privacy Policy

What this policy covers

This policy covers this website, dealersgpt.com, and gives a plain summary of how the DealersGPT service handles personal data.

Dealership accounts are governed by the DealersGPT Privacy Notice and Data Processing Agreement accepted at sign-up. If this summary and those documents differ for a dealership account, those documents apply.

Who is responsible

DealersGPT is operated by ALBURAK ALARABIA COMPANY LTD. (شركة البراق العربية المحدودة), Jeddah, Saudi Arabia. The software is developed by DEALER’S CLOUD, CORP. (DealersCloud), Virginia, United States of America.

The Privacy Notice in force for dealership accounts (version 1.0, from 20 October 2026) names DEALER’S CLOUD, CORP. as the controller of account data, such as sign-up, staff and billing details.

A dealership controls the data of its own customers. For that data, we act for the dealership. Contact the dealership about the content of its sales conversations.

Privacy contact for all of the above: hello@gcccardeals.com.

This website

This website has no analytics and no advertising trackers, and it sets no cookies of its own.

Cloudflare hosts the site. To deliver and protect it, Cloudflare processes technical data such as your IP address, your browser type and the pages you request, and it may set a strictly necessary security cookie.

If you use the demo form, we receive your name, showroom, email address and, if you give it, a WhatsApp or phone number. We use the country Cloudflare reports for your connection to file the request under Qatar, the UAE or Saudi Arabia, and we keep a hashed form of your IP address to limit abuse. We use these details only to reply to you about your request. The form is processed on gcccardeals.com, which DEALER’S CLOUD, CORP. runs, with the hosting listed below. An email provider delivers the request to our team and, for a business email address, a receipt to you.

If you email us, we receive your address and whatever you write, and we use it to answer you. Links to the sign-up and log-in pages lead to the DealersGPT app, which has its own notice.

What the DealersGPT service processes

• Dealership and account details: business name, staff names, roles, contact details and sign-in records.
• Customer records that a dealership keeps: contact details, consent records, WhatsApp messages and attachments, inquiries, appointments and sales records.
• Vehicle, deal and accounting records.
• WhatsApp connection details: business account and phone identifiers, and access credentials.
• Billing details. Stripe holds card details. We do not.
• Operational and security logs, including an audit log of sensitive actions.

How it is used

Information is used to provide the service to the dealership: customer service, matching buyers with stock, appointments, staff handover, sales administration and accounting. Sign-in, audit and delivery records support access control, troubleshooting and security.

When a dealership has the AI assistant on, relevant conversation content and business information are sent to Anthropic’s Claude service to produce replies, drafts and answers. The assistant tells customers it is automated, and staff can take over.

We do not sell personal data.

Who processes it

• Railway: application and database hosting (United States).
• Cloudflare: this website, file and photo storage, DNS, content delivery, custom domains and the sign-up bot check.
• Anthropic: AI processing when the assistant or AI features are on (United States).
• Twilio or Meta: WhatsApp message delivery, through the route a dealership connects. These providers keep their own copies under their own terms.
• Resend: email delivery.
• Stripe: payments and billing.
• Apify: when a dealership asks to bring in its stock from its own website, and as a fallback for sending email from the demo form.
• Browser push services: staff notifications, when a staff member turns them on.

We may also disclose data to authorities where the law requires.

WhatsApp data

A dealership chooses to connect its own WhatsApp Business account and number. Messages, attachments and delivery status then pass through the provider it connected and appear in that dealership’s inbox for its authorized staff.

Disconnecting the number, or removing the app’s access in your provider or Meta settings, stops that access. It does not by itself delete records the dealership or the service already holds. See the data deletion instructions.

Transfers outside your country

The companies above process data in the United States and other countries, so personal data leaves Qatar and Saudi Arabia. We do not claim to store it in either country.

How long data is kept

Data is kept for as long as it is needed to run the service or as the law requires. After a subscription ends, the account owner has 30 days of read-only access to export their records. Backups are encrypted and kept for 35 days, and individual records are not edited out of an existing backup.

Ending a subscription stops access. It does not automatically erase all data, and some sales, accounting, consent, security and audit records may need to remain. The retention periods for dealership accounts are set out in the Privacy Notice and Data Processing Agreement.

Security

The software separates each dealership’s records in the database, applies role-based permissions, offers two-step sign-in, logs sensitive actions, uses encryption in transit and encrypts stored channel credentials and backups. No system is completely secure, and we cannot promise that a breach will never happen.

Your rights

Under Qatar’s personal data law, and depending on where you live, you may have the right to be told how your data is processed, to access or correct it, to have it erased, to object to its use and to withdraw consent.

To use a right, email hello@gcccardeals.com. Identify the dealership and the account or phone number concerned, and do not send passwords or card details. We may need to confirm who you are. We answer within 30 days. If your request is about data a dealership controls, we pass it to that dealership.

You may also complain to the National Data Privacy Office of Qatar’s National Cyber Security Agency.

Children

DealersGPT is a business service and is not meant for anyone under 18.

Changes to this policy

We change the date at the top of this page when we update it. Dealership accounts get notice of material changes to their Privacy Notice as that notice describes.