Privacy policy
Dealera is dealer management software made by Kyros, based in Waltham Abbey, Essex. This page covers two things: what we collect from visitors to this website, and how we handle the data that dealerships put into the Dealera app.
1. Visitors to this website
| What | Why |
|---|---|
| Demo request form: your name, dealership, email, phone, stock size and message | To arrange your demo and follow up. Kept for 12 months after our last contact, or until you ask us to delete it. Legal basis: taking steps at your request before a contract. |
| Standard server logs: IP address, browser, pages viewed | To keep the site running and secure. Legal basis: legitimate interest. |
There are no advertising or tracking cookies on this site. Signing in to the app stores a session token in your browser so you stay signed in; nothing else.
2. Dealerships using the Dealera app
When a dealership uses Dealera, the dealership is the data controller for its own customers, staff and vehicle records. Kyros is the data processor: we store and process that data only to provide the service, only on the dealership's instructions, and never for our own marketing.
- Where it lives. Data is stored in a Supabase database and Netlify hosting, protected by encrypted connections and role-based access. Each dealership's records are separated by dealership ID at every layer.
- Sub-processors. Supabase (database and file storage), Netlify (hosting and serverless functions), Anthropic (AI features such as reading an invoice photo, sent only the content needed for that task), AutoTrader (stock and lead sync, only when the dealership connects its own AutoTrader account), DocuSeal (e-signature, only when the dealership enables it), and Apple push notifications for the iPhone app.
- Access. Dealership staff see only their own dealership. Kyros staff access production data only to fix a fault the dealership has asked about, and that access is logged.
- Retention. A dealership's data is kept while its account is active. Within 30 days of an account closing, the dealership can export everything, after which it is deleted from live systems; encrypted backups roll off within a further 30 days.
- Breach. If we become aware of a breach affecting a dealership's data we tell that dealership without undue delay so they can meet their own obligations.
Your rights
If you are a website visitor or a demo contact, you can ask for a copy of your data, ask us to correct or delete it, or object to our use of it, through the contact form on the home page. If you are a customer of a dealership that uses Dealera, please contact that dealership: they control your data and we will help them respond. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
When this policy changes, the date at the top changes with it.