Drive Solutions LLC – Privacy Policy

Effective Date: September 11, 2026

Drive Solutions LLC (“Drive Solutions,” “we,” “us,” or “our”) operates DealerCare and the websites, dealer-branded experiences, digital tools, and communications that link to this Privacy Policy (the “Services”). This policy explains how we collect, use, disclose, and retain personal information and how you can exercise your privacy choices.

This policy is a notice of our practices, not a request for blanket consent. Visiting a website, providing contact information, or purchasing a vehicle does not, by itself, provide consent to marketing communications or other activities that require separate consent.

1. Our Role and Information Sources

We help participating dealerships engage with their customers, present vehicle protection products, and facilitate quotes, purchases, payments, and customer support. We receive information directly from you, from your dealership and its dealership management or customer relationship systems, from product administrators and payment or financing providers, and automatically when you use the Services. We may also receive vehicle information from vehicle-data providers to verify or supplement vehicle details.

When we process information on behalf of a dealership, our use is subject to that dealership’s instructions, our agreement with it, and applicable law. We also process information for our own operation of the Services, including security, customer support, and service improvement, as described below and subject to applicable restrictions. Dealerships and product or financing providers remain responsible for the information they process for their own purposes under their respective privacy notices.

2. Information We Collect

The information we collect depends on your interactions and the services involved:

Contact and account information: name, mailing address, phone number, email address, account identifiers, and authentication information.
Vehicle, sales, and service information: VIN, year, make, model, mileage, ownership information, purchase or lease date, deal details, repair orders, service dates, service recommendations, repair and payment categories, and protection products purchased, declined, or available.
Quote, purchase, and payment information: eligibility and quote details, billing information, payment-method references, transaction identifiers and status, payment-plan or financing details, contracts, signatures, and product enrollment or cancellation information. Information entered directly into payment-provider fields may be collected by that provider; the information we receive depends on the payment flow and may include tokens, limited payment-method details, and transaction results.
Communications and preferences: messages, chat transcripts, support requests, information you provide to our AI assistants, and records of notices, authorizations, consent, and opt-outs.
Technical and usage information: IP address, browser and device information, session identifiers, pages viewed, clicks and other interactions, performance measurements, and diagnostic logs.
Derived information: vehicle or product eligibility indicators, product recommendations, and engagement or service-performance insights generated from the information above. Information linked to an identifiable person remains personal information even when it is derived or associated with an internal identifier.

Please do not send full payment-card numbers, security codes, Social Security numbers, or other sensitive information through ordinary chat, SMS, or email. Use the designated secure collection flow when such information is requested for a transaction.

3. How We Use Information

We use information to:

Operate and secure the Services, authenticate users, troubleshoot problems, and prevent fraud or misuse.
Verify vehicle details, identify relevant protection-product opportunities, personalize product presentations, and support eligibility checks and quotes.
Facilitate applications, purchases, payment processing, product enrollment, contract delivery, and customer support, including directing servicing or claims questions to the appropriate provider.
Communicate about requested services and, where permitted and based on any required consent, send product offers and follow-up messages for the relevant dealership or program.
Measure service performance, evaluate customer interactions, conduct product experiments, improve recommendations and support, and provide dealerships with reporting about their programs.
Maintain consent and suppression records, respond to privacy requests, comply with legal obligations, and establish, exercise, or defend legal claims.

We may combine information from the sources described above for these purposes, subject to applicable law and restrictions on information received from dealerships or other providers. These purposes do not authorize unrestricted reuse of dealership customer information for unrelated activities.

AI-Assisted Services and Analytics

Our AI assistants process conversation content and relevant customer, vehicle, and product information to respond to questions and assist with the Services. AI technology providers may process this information to support those functions. Authorized personnel may review interactions for customer support, quality evaluation, and service improvement. Analytics and experimentation may associate activity with customer, vehicle-event, or session identifiers; these activities are not necessarily anonymous.

We may de-identify conversations and related service data and use the resulting information to develop, train, fine-tune, test, and evaluate AI models and improve our products and services, including across dealership programs. This may include work with AI technology providers subject to the protections for de-identified information in Section 8. We do not treat information as de-identified merely because names are removed or replaced with identifiers; information that can still reasonably identify a person remains subject to the personal-information protections in this policy. Any use of personal information for model development remains subject to applicable law, contractual restrictions, and any required notice or consent. AI-generated information may be inaccurate; contact us if you believe information about you or your vehicle needs correction.

4. Communications and SMS Privacy

We communicate through SMS, email, telephone, and the Services about customer support, quotes, product offers, purchases, and servicing. Messages may use automated technology or AI assistance. Where consent is required, communications must be based on permission provided to us or the participating dealership for the relevant sender, purpose, and channel. Marketing consent is not a condition of purchase, and consent to one channel does not by itself authorize marketing through another channel.

DealerCare messaging may operate on behalf of the dealership identified in your enrollment or messages. Message frequency varies. Message and data rates may apply. Reply STOP to opt out of SMS or HELP for help. You may also contact support@drivesolutions.ai. We honor other reasonable requests that clearly express a desire to stop messages, not only the word STOP.

We apply opt-out requests to the relevant sender or program and more broadly where required by law. We may check and reuse subscription and suppression information across participating dealerships to honor communication preferences, particularly opt-outs, and prevent unwanted messages. An opt-in is specific to the dealership and program for which it was given; permission to receive messages from one dealership does not authorize marketing from another. Apart from these preference and suppression checks, we do not reuse identifiable customer information from one dealership for another dealership’s program. De-identified information may be used across programs as described in Sections 3 and 8. We may send a permitted, nonpromotional confirmation of your request. Using the Services again does not, by itself, renew withdrawn marketing consent. Any communications after an opt-out must be permitted by applicable law and consistent with the scope of your request; describing a message as transactional or servicing does not override a consent requirement.

We do not sell or share mobile information or SMS opt-in data and consent with third parties or affiliates for their own marketing or promotional purposes. We may disclose this information to providers that help operate and deliver the messaging program, subject to restrictions on its use. The disclosure categories elsewhere in this policy do not authorize sharing SMS opt-in data or consent for unrelated purposes.

Use the unsubscribe link in a marketing email or contact us to stop marketing emails. Opting out of messages does not, by itself, cancel a protection product or payment plan; contact the provider identified in your agreement for product cancellation or servicing.

5. How We Disclose Information

We do not sell personal information or share it with advertising or retargeting platforms for their advertising purposes. We do not provide customer information to lead buyers, unrelated dealerships, partners running their own campaigns, or affiliates for marketing outside the customer’s original program. This includes no sharing for cross-context behavioral advertising.

We disclose information as relevant to the following purposes, subject to these restrictions and the SMS protections above:

Your dealership and its authorized representatives: to carry out its customer-engagement program, assist with purchases and support, and report on program activity and performance.
Product administrators, obligors, and service providers involved in your product: to obtain quotes, determine eligibility, enroll or administer a product, and assist with servicing, cancellation, or claims requests.
Payment and financing providers: to process payments, facilitate payment plans or financing, verify transaction details, and manage transaction or account servicing. Their own privacy notices apply to their independent processing.
Operational service providers: companies supporting hosting, data storage, authentication, communications delivery, AI-assisted interactions, analytics, security, and customer support. Their processing on our behalf is limited to the services they provide and subject to applicable contractual and legal restrictions.
Legal and protective disclosures: where required by law or reasonably necessary to respond to lawful requests, protect people or the Services, prevent fraud, or establish, exercise, or defend legal claims.
Corporate transactions: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to applicable confidentiality protections and legal restrictions on subsequent use.

A reference to a dealership or provider in this policy does not authorize unrelated businesses to use your information for their own marketing. Additional disclosures at your direction or with your consent are limited to the purpose identified when you make that request or provide that consent.

6. Cookies and Similar Technologies

We and providers acting on our behalf use cookies, scripts, software development kits, browser storage, and similar technologies for authentication, session management, security, preferences, diagnostics, performance measurement, analytics, and product experiments. These technologies may collect or store technical and usage information and may associate it with the identifiers described above.

Some technologies last for a browser session; others persist until they expire or are deleted. You can manage cookies and stored website data through browser or device settings. Blocking essential technologies may affect authentication, security, or other functionality.

Where a dealer landing page displays an informational cookie notice, selecting “Got it” closes that notice for the current page view only. It does not change tracking settings or provide consent to an activity requiring separate consent. We do not store that dismissal choice. Browser controls and dismissing a notice are separate from the privacy rights described below.

7. Your Privacy Choices and Rights

Depending on your state of residence, the information involved, and applicable law, you may have rights to:

Confirm whether we process your personal information and access information about that processing.
Obtain a copy of your personal information, including in a portable format where applicable.
Correct inaccurate personal information or request deletion, subject to applicable exceptions.
Opt out of a sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling that produces legal or similarly significant effects, where those activities occur and the relevant law applies.
Limit certain uses or disclosures of sensitive personal information, or withdraw consent where processing is based on consent.
Appeal a decision about a privacy request, where applicable, and exercise your rights without unlawful discrimination.

To make a request or appeal, email privacy@drivesolutions.ai. Include the right you want to exercise and enough information to identify your interaction, such as the relevant dealership and contact information. Do not include full payment-card details or sensitive identity documents in your initial email. We may request information reasonably necessary to verify your identity or authority, and we respond within the time required by applicable law. Authorized agents may submit requests where permitted; verification or proof of authority may be required. If we deny a request, we will explain the basis and any applicable appeal process.

Where we process information on a dealership’s behalf, we may direct your request to that dealership or assist it in responding. Some information may be subject to different legal requirements or exemptions, including financial-privacy requirements. These exceptions do not apply automatically to every record or activity.

Where applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control, that signal is a method of exercising the relevant opt-out right. You may also contact us at the address above about an opt-out request or signal. This policy does not treat an informational cookie notice as a substitute for a legally required opt-out mechanism.

8. Retention and De-Identified Information

Our retention schedule is based on the record’s purpose, applicable law, and contractual obligations. We retain only the information needed for an authorized purpose, and shorter binding deadlines or applicable privacy requests take precedence over the defaults below.

Customer operational records: we retain these while necessary to deliver the active service. Following termination of the applicable agreement for our Services, we delete or de-identify company-controlled active copies within 90 calendar days, unless a shorter obligation applies or specific records have a documented continuing legal or contractual retention basis. Active contact records follow this rule rather than the transcript schedule.
SMS and AI interaction transcripts: the default is 12 months from the interaction, subject to earlier required deletion, contract termination, or applicable verified privacy requests. Longer retention requires a documented purpose, period, and authorization.
Enrollment, transaction, accounting, and warranty records: we retain these for the period supported by the applicable legal or contractual requirement, with the basis and start event documented. A seven-year period applies only where a specific requirement supports it; it is not a blanket period for all customer information or VIN data. A provider may have independent retention obligations for its own records.
Logs: security and audit logs are retained for at least 90 days; the default for nonsecurity diagnostic logs is 30 days. Longer periods must have a documented purpose and comply with applicable requirements.
Consent and suppression records: we retain the minimum records needed to demonstrate permissions, honor opt-outs, and prevent unwanted contact, including after other information is deleted. A continuing retention purpose and period must be documented; these records are not retained for unrelated marketing.
Backups: recovery points follow a rolling 30-day schedule by default. Deleted active data may remain in isolated backups until those recovery points expire, normally no more than 30 additional days after active deletion. Longer backup retention requires a recorded purpose and period; shorter binding deletion obligations take precedence. We reapply deletion records after a restoration so deleted information is not returned to active use.

Legal holds apply only to the records and period within their documented scope. Where a continuing obligation requires an archive, we limit it to necessary records and restrict access; archiving alone is not deletion. We review retention purposes and exceptions at least annually and delete or de-identify records when no authorized retention purpose remains. Information is not exempt from retention limits or deletion rights merely because it is enriched or derived.

We may retain aggregated or de-identified information for analytics, benchmarking, service improvement, and AI model development, training, fine-tuning, testing, and evaluation when it no longer identifies individuals under applicable law. The personal-information retention periods above do not apply to information that meets that standard. We take reasonable measures against reidentification, do not attempt to reidentify it except as legally permitted, and require recipients of information we disclose as de-identified to maintain those protections.

9. Security and Children’s Privacy

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure.

The Services are intended for adults age 18 and older and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the Services, contact privacy@drivesolutions.ai so we can investigate and take appropriate action, including deletion where required.

10. Other Notices, Changes, and Contact

This policy applies to the Services that link to it. Other websites, dealerships, product administrators, and payment or financing providers may have separate notices governing their own activities. Review the notices presented by those parties for information about their practices and choices.

We may update this policy and will identify the revised effective date. For material changes, we will provide additional notice and obtain consent where required by applicable law. Posting a revision does not, by itself, authorize a new use that requires separate consent.

For privacy questions, requests, or appeals, contact:

Drive Solutions LLC
Attn: Privacy Officer
Email: privacy@drivesolutions.ai

For messaging, purchase, or general customer support, contact support@drivesolutions.ai.