Privacy Policy

Your Privacy Matters

We are committed to protecting your privacy and handling your data responsibly. This policy explains how we collect, use, and safeguard your information.

Last updated: February 15, 2026
Privacy questions: privacy@bhphapp.com

Privacy at a Glance

Secure by Design

Industry-standard encryption and security measures protect your sensitive financial data

Transparent Practices

We're clear about what data we collect, why we need it, and how we use it

Your Data Rights

You maintain control and ownership of your business data at all times

1. Information We Collect

We collect information to provide and improve our services to you. The types of information we collect include:

Business Information

  • Dealership name, address, and contact information
  • Business license and registration details
  • Financial institution information for payment processing
  • Tax identification numbers

Customer Data

  • Customer personal information (names, addresses, phone numbers, SSNs)
  • Credit application data and financial information
  • Employment and income verification details
  • Vehicle purchase and loan information
  • Payment history and transaction records

Vehicle Information

  • VIN numbers and vehicle specifications
  • Vehicle photos and condition reports
  • Title and registration information
  • Insurance and lien holder details

Usage Data

  • Log files and system access records
  • Feature usage and performance metrics
  • Device information and IP addresses
  • Browser type and operating system information

2. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

  • Processing loan applications and managing customer accounts
  • Generating required compliance documents and reports
  • Facilitating payment processing and collections activities
  • Providing inventory management and CRM functionality

Compliance and Reporting

  • Reporting payment information to credit bureaus
  • Generating regulatory compliance reports
  • Meeting state and federal reporting requirements
  • Responding to lawful requests from authorities

Service Improvement

  • Analyzing usage patterns to improve functionality
  • Identifying and fixing technical issues
  • Developing new features and capabilities
  • Providing customer support and training

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

Credit Bureau Reporting

We report payment information to credit bureaus (Experian, Equifax, and TransUnion) as part of our credit reporting services. This helps your customers build credit history and is a core function of our service.

Service Providers

We work with trusted third-party service providers who assist us in operating our business, such as:

  • Cloud hosting and infrastructure providers
  • Payment processing companies
  • Identity verification services
  • Customer support platforms

Legal Requirements

We may disclose information when required by law, such as:

  • Compliance with subpoenas or court orders
  • Cooperation with law enforcement investigations
  • Meeting regulatory reporting requirements
  • Protecting our legal rights and interests

4. Data Security

Protecting your data is a top priority. We implement comprehensive security measures including:

Encryption

  • All data is encrypted in transit using TLS 1.3
  • Database encryption at rest using AES-256
  • End-to-end encryption for sensitive financial data

Access Controls

  • Multi-factor authentication for all user accounts
  • Role-based access controls and permissions
  • Regular access reviews and user deprovisioning
  • Audit logging of all system access and changes

Infrastructure Security

  • SOC 2 Type II certified cloud infrastructure
  • Regular security assessments and penetration testing
  • Automated security monitoring and threat detection
  • Incident response procedures and breach notification protocols

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Active Customer Data

Customer and loan information is retained for the duration of your subscription and as required by applicable laws, typically 7 years after loan closure for financial records.

Account Termination

Upon termination of your account, we will retain your data for 90 days to allow for account reactivation. After this period, data will be securely deleted unless retention is required by law.

Legal Holds

In cases where data is subject to litigation holds, regulatory investigations, or other legal requirements, we may retain information beyond normal retention periods.

6. Your Rights and Choices

You have several rights regarding your personal information:

Access and Portability

  • Request copies of your personal information
  • Export your data in machine-readable formats
  • Access audit logs of data processing activities

Correction and Updates

  • Update incorrect or incomplete information
  • Request corrections to customer records
  • Modify account settings and preferences

Deletion

  • Request deletion of personal information (subject to legal requirements)
  • Close your account and delete associated data
  • Opt out of marketing communications

7. State Privacy Laws

We comply with applicable state privacy laws, including the California Consumer Privacy Act (CCPA) and similar regulations in other states.

California Residents

If you are a California resident, you have additional rights under the CCPA, including:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

8. Communications and Marketing

We may send you communications related to your account, service updates, and educational content about dealership management and industry trends.

Types of Communications

  • Service notifications and system alerts
  • Account and billing information
  • Security updates and breach notifications
  • Educational content and best practices
  • Product updates and new feature announcements

Opt-Out Options

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting our support team. Note that you cannot opt out of essential service communications.

9. Third-Party Services

Our service integrates with various third-party services to provide functionality such as:

  • Credit bureau reporting and monitoring
  • Payment processing and ACH services
  • Identity verification and fraud prevention
  • Document signing and storage
  • Customer communication platforms

These third parties have their own privacy policies, and we encourage you to review them. We only share the minimum information necessary for these services to function.

10. International Users

Our services are primarily designed for dealerships operating in the United States. If you are located outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

11. Children's Privacy

Our services are designed for business use by automotive dealers and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notification to registered users
  • Providing in-app notifications

Continued use of our services after the effective date of the updated policy constitutes acceptance of the changes.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

BHPHApp.com - Privacy Team

Email: privacy@bhphapp.com

Address: Dallas, Texas

Phone: (555) 123-BHPH

We will respond to privacy-related inquiries within 30 days and will work with you to address any concerns.