Effective: [EFFECTIVE DATE] · Version: 1.0 Published at https://repsens.ai/privacy
[COMPANY LEGAL NAME] ("RepSensAI", "we", "us") provides a salesperson effectiveness and training platform to automotive dealerships. This policy explains what we collect, why, and what choices you have.
If you are a salesperson, manager, or other employee of a dealership that uses RepSensAI: your dealership decides what data goes into the platform and what it is used for. In legal terms, your employer is the "controller" and we are a "processor" acting on their instructions.
That means:
If you visit our website or contact us about buying RepSensAI: we are the controller of that information, and this policy governs it directly.
| What | Examples |
|---|---|
| Account information | Name, work email, platform username, login PIN, role, store and group assignment |
| Performance data | Units sold, ups, leads, appointments, demos, write-ups, closing rates, activity counts, goals and standards |
| Compensation data | Commission and earnings a salesperson records — see §5 |
| Personal budget data | Budget entries a salesperson chooses to record — see §5 |
| Training data | Practice transcripts and skill-exercise attempts (what you typed, and each criterion marked met / not yet / cannot be determined with the words quoted as evidence), mastery bands and review schedules, manager validations and the method used, plus — on the older drills — grades, subject ratings, and the overall rating |
| Activity and presence | When you last used the platform, sign-in events, feature usage |
| Technical data | IP address, browser type, session token, error and access logs |
Where a dealership sends its CRM or DMS reports to us, those reports are per-salesperson summaries — one row per salesperson, with counts and totals (leads, appointments, demos, write-ups, units, gross, calls and emails sent). We set these feeds up ourselves and scope them deliberately.
We do not collect information about the dealership's retail customers. No customer names, phone numbers, email addresses, home addresses, or vehicle identifiers reach our systems. If you bought a car from a dealership that uses RepSensAI, we hold nothing about you.
We delete the raw report files after 30 days regardless.
Contact details you submit, and basic analytics and server-log data.
We use a single essential cookie (tower_auth) to keep you signed in. It is HTTP-only and, in production, Secure. We do not use advertising cookies, third-party tracking pixels, or cross-site behavioral advertising.
We use information for these purposes because we are contractually engaged by the dealership to do so, or because we have a legitimate interest in operating and securing our service.
Parts of the platform use large language models to write coaching text and daily briefs, to play the customer character in practice drills, and to grade those drills. Some scoring is ordinary statistics, not AI.
AI output is probabilistic. It can be incomplete or wrong, and it can vary between runs. It is information to help a manager and a salesperson have a better conversation — not a verdict.
The platform produces a 0–99 rating and other performance scores. We do not make employment decisions and we do not recommend them. Our agreement with each dealership requires that a qualified human review any employment-related decision and that our output not be used as the sole or primary basis for one.
If you want to know how the rating is calculated, our AI Disclosure describes the methodology in plain terms and is available at https://repsens.ai/ai-disclosure.
Where voice practice is enabled:
We do not use your data to train AI models — not ours, and not our AI provider's. We have contracted for terms under which data we send for processing is not used to train their models.
These are contractual commitments, not just settings:
We share information only with:
Service providers we use to run the platform (our "subprocessors"), currently:
| Provider | Purpose |
|---|---|
| Anthropic, PBC | AI processing for coaching, briefs, and drill grading |
| Supabase, Inc. | Database and authentication |
| Render Services, Inc. | Application hosting |
| Postmark (Wildbit / ActiveCampaign) | Inbound report intake and operational email |
The current list is maintained at https://repsens.ai/subprocessors.
Your dealership — performance data flows to the managers, directors, and owners your dealership authorizes, subject to the protections in §5.
Legal and safety — where required by law, to enforce our agreements, or to protect rights and safety.
Business transfer — in a merger, acquisition, or sale of assets, subject to this policy.
We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we have not done so in the preceding twelve months. We do not disclose personal information for cross-context behavioral advertising.
| Data | Retained |
|---|---|
| Raw CRM/DMS source report files | 30 days, then deleted |
| Performance, training, and account data | For the term of the dealership's subscription |
| After a subscription ends | Available for export for 30 days, then deleted within 90 days |
| Backups | Overwritten on our ordinary backup cycle |
| Logs | Typically under 12 months |
We use row-level database security so access rules are enforced at the data layer, role-based access control, encryption in transit, encryption at rest for our primary database, salted-hash storage of salesperson credentials, revocable server-side sessions, and automated tests covering our privacy-critical behavior.
We are candid about our limits: we do not currently hold a SOC 2 or ISO 27001 certification, and we do not currently offer single sign-on. No system is perfectly secure.
Report a vulnerability to security@repsens.ai.
Depending on where you live, you may have the right to know what personal information we hold, to access or receive a copy, to correct it, to delete it, to opt out of sale or sharing (we do neither), to limit use of sensitive information, and to be free from discrimination for exercising these rights.
Employees of a dealership: please make your request to your employer first — they control the data. We will support them in responding, and we will forward any request you send us.
Everyone else: email privacy@repsens.ai. We will verify your identity before acting and respond within the time required by law (generally 45 days, extendable). You may use an authorized agent.
If we deny your request you may appeal by replying with "Appeal" in the subject line. We will respond within 45 days and, if we deny the appeal, tell you how to contact your state attorney general.
The platform is a workplace tool for adults. It is not directed to children and we do not knowingly collect personal information from anyone under 16.
We will post any change here and update the effective date. For material changes affecting dealership customers, we will provide notice through the platform or to the account contact.
[COMPANY LEGAL NAME] [PRINCIPAL ADDRESS]
Privacy: privacy@repsens.ai · Security: security@repsens.ai · Legal: legal@repsens.ai