Privacy Policy — SOPTrackr

SOPTrackr (“we,” “us,” “our”) provides special-order parts tracking software for automotive dealerships. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using soptrackr.com or the SOPTrackr application, you agree to the practices described here.

Who this applies to

This policy covers visitors to soptrackr.com, dealership staff who use the SOPTrackr application, and end customers whose contact information is entered into the application by dealership staff in connection with their special-order parts.

Information we collect

From dealership staff (account holders)

Name, email, and role (provided during signup or via teammate invitation)
Profile information from your authentication provider (Clerk), including profile image if you supply one
Organization name, rooftop names, brand, and physical location (city/state)
Optional notification settings such as your GroupMe bot identifier

From dealership customers (data entered by staff)

Customer name, phone, email
Vehicle information (year, make, model)
Repair order number and SOP number
Special-order part description, part number, status, and timestamps
Notes and BDC contact-attempt logs entered by staff

Dealerships are responsible for ensuring they have a lawful basis to enter this information into SOPTrackr and for honoring any customer requests to access, correct, or delete it.

From website visitors

Information you submit through demo-request or support forms (name, dealership, email, phone, message)
Basic technical data your browser sends (IP address, user-agent) and standard server logs

How we use information

To provide, operate, and improve the SOPTrackr application
To authenticate users and isolate each dealership’s data from other dealerships
To send transactional emails (invitations, signup notifications, billing notices, support replies)
To send GroupMe notifications to the group(s) you configure, on the events you enable
To respond to your demo or support requests
To detect and prevent abuse and to comply with applicable laws

How we share information

We do not sell your data. We share information only with the service providers we use to operate SOPTrackr, and only as needed:

Vercel — web application hosting
Supabase — PostgreSQL database hosting
Clerk — authentication and account management
Resend — transactional email delivery
GroupMe — only if you configure a bot ID; we post the messages you have configured to the group that bot serves

We may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of SOPTrackr, our users, or others.

Tenant isolation

SOPTrackr is multi-tenant. Each dealership’s data is isolated at the database layer using PostgreSQL Row-Level Security. Authorized SOPTrackr platform operators may access tenant data only as required to provide support, debug issues, or fulfill legal obligations, and every such access is recorded in an audit log.

Data retention

We retain account, organization, and SOP data for as long as your subscription is active and for a reasonable period after cancellation in case you reactivate. You may request earlier deletion by emailing support@soptrackr.com. Some records may be retained longer when required by law (e.g. tax records).

Security

We use industry-standard safeguards including encrypted connections (HTTPS), at-rest encryption provided by our database host, role-based access controls, and row-level security policies. No system is perfectly secure; you use SOPTrackr at your own risk.

Your choices

You can access, correct, or delete your own profile information from within the application or by emailing us
Dealership administrators can remove teammates and revoke pending invitations
Customers whose information was entered by a dealership should contact that dealership directly; we will assist the dealership in honoring valid requests
You can opt out of non-essential communications at any time; transactional notifications about your account cannot be disabled while you remain a customer

Children

SOPTrackr is a business tool intended for adult dealership employees. We do not knowingly collect information from anyone under the age of 16.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will provide additional notice (such as an email to account administrators).

Contact us

Questions about this policy or your data? Email support@soptrackr.com.