Privacy Policy

This Privacy Policy explains how Redline Automotive Merchandising LLC ("Redline OS," "we," or "us") collects, uses, and protects information when you use the Redline OS reconditioning workflow product (the "Service") at staging-app.redlineos.ai.

Redline OS is a workforce tool sold to automotive dealerships. The people who use it are dealership employees and the vendors who service their inventory. This policy describes how their information — and incidental data about consumer-facing inventory — is handled.

What we collect

• Account information. Name, email, phone number, role, and the dealership(s) you belong to. Provided by you or your dealership admin when your account is created.
• Workflow data. Vehicles, recon steps, issues, jobs, photos, costs, vendor assignments, and timestamps generated as you use the Service.
• Location pings. Optional, opt-in: when you open a vehicle row, capture a photo, or complete a step on a mobile device, we record an approximate GPS reading so the lot map reflects where each car is. You can opt out per-device in your profile.
• SMS opt-in records. When you (or a dealership admin acting on your behalf) opt into SMS, we record the phone number, the timestamp of consent, and the keyword history (STOP / HELP / START messages).
• Usage and diagnostic data. Standard server access logs, session cookies for authentication, and aggregate counters for usage analytics. We do not use third-party advertising trackers.

How we use information

• To operate the Service: coordinate recon work, route jobs, send notifications.
• To send the SMS notifications you (or your dealership) opted into — job assignments, daily digests, status confirmations, and YES/NO prompts.
• To respond to support requests and diagnose issues.
• To improve the Service in aggregate (e.g. identifying which recon steps most often miss their goal date). We do not sell personal information.

Who we share information with

We do not sell or rent personal information. We share information only with vetted subcontractors who help us operate the Service:

• Amazon Web Services — application hosting, the Postgres database, file and photo storage, and transactional email (RDS, S3, SES, ECS) — all in US regions.
• Twilio — SMS delivery and inbound message webhook routing.
• Mapbox — lot map tiles and static map thumbnails.

We also disclose information when required by law (subpoena, court order, or a good-faith belief that disclosure is necessary to protect rights or safety).

Mobile information and SMS data

Mobile information (including phone numbers and SMS opt-in data) will not be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

For details on the SMS program itself — message frequency, content, opt-in surfaces, opt-out keywords — see our SMS Disclosure.

Data retention

We retain account and workflow data for as long as the dealership's account is active, plus a reasonable backup-rotation window after closure (typically 90 days). SMS message logs are retained for 24 months for compliance and dispute-resolution purposes. You can request earlier deletion of personal data by writing to privacy@redlineos.ai (see "Your rights" below).

Your rights

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to fix inaccurate or incomplete data.
• Deletion. Ask us to delete your personal information, subject to legitimate business and legal retention needs.
• SMS opt-out. Reply STOP to any SMS to immediately end messages to that number. Reply START to opt back in. Reply HELP for assistance.
• Location opt-out. Toggle "location capture" off in your profile to stop GPS pings from your device.

Send requests to privacy@redlineos.ai. We respond within 30 days.

Security

We use encryption in transit (TLS) and at rest for stored data, role-based access controls inside the application, and dealership scoping on every query so that a signed-in user can only read or modify records belonging to the dealership(s) they are assigned to. Database access is parameterized throughout to prevent injection. No system is perfectly secure; if we become aware of a breach affecting your personal information we will notify you and the relevant regulators as required by law.

Children's privacy

The Service is a workforce tool intended for dealership staff and contracted vendors. We do not knowingly collect personal information from children under 16. If you believe a minor has provided us with personal information, contact privacy@redlineos.ai and we will delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent material change. If a change affects how we use SMS opt-in data, we will also update the SMS Disclosure page and (when required by law) notify affected recipients directly.