Privacy Policy

Our privacy policy explains how we treat your personal data and protect your privacy when you use our Services. By using our Services, you give AutoTracker Pro access to use your data for analytical purposes only. We will not provide access or sell your data to any third party. AutoTracker Pro does not read any cookies on your machine, basically because we think that is a violation of your privacy.

AutoTracker Pro offers an optional integration that allows you to connect a YouTube channel in order to publish and manage vehicle marketing videos directly from our platform. This integration is entirely voluntary. If you never connect a YouTube channel, AutoTracker Pro accesses no Google user data whatsoever.

When, and only when, you expressly authorize the integration through Google’s OAuth 2.0 consent screen, AutoTracker Pro requests and accesses the following categories of Google user data:

• YouTube channel identity — the channel identifier and channel title of the channel you elect to connect, used to confirm and display which channel is linked to your account.
• YouTube video metadata — the titles, descriptions, privacy settings, thumbnails, publication dates, and identifiers of videos on the connected channel, together with aggregate view, like, and comment counts, used to populate the video management interface within AutoTracker Pro.
• OAuth 2.0 credentials — the access token and refresh token issued to us by Google, used solely to maintain your authorized session so that you are not required to re-authenticate before every operation.

AutoTracker Pro requests these permissions through the youtube.readonly, youtube.upload, and youtube scopes. We never receive, request, or have access to your Google account password. We do not access your Gmail messages, Google Contacts, Google Drive files, Google Photos, location history, or any other Google service or data category outside the YouTube scopes enumerated above.

AutoTracker Pro’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data obtained through the YouTube integration is used exclusively to provide the user-facing features you have requested, namely:

• To display the name of the connected channel so that you can confirm the correct account is linked.
• To retrieve and display the list of videos on your channel within the AutoTracker Pro video management interface.
• To upload vehicle marketing videos to your channel at your direction.
• To update the title, description, or privacy status of videos when you make those changes within AutoTracker Pro.
• To delete videos from your channel when you expressly request deletion.
• To display aggregate performance statistics so that you can evaluate the reach of your vehicle listings.

We expressly do not use Google user data for advertising or marketing purposes; sell, rent, or lease Google user data to any party under any circumstances; use Google user data to build advertising profiles or perform behavioral targeting; use Google user data to train, refine, or develop generalized artificial intelligence or machine learning models; or use Google user data for credit assessment, lending, or any determination of eligibility. Human beings do not read or review your Google user data except in the narrow circumstances described in Section 5 below.

AutoTracker Pro does not share, transfer, sell, rent, lease, or otherwise disclose your Google user data to any third party. We do not transmit Google user data to advertising networks, data brokers, analytics providers, marketing platforms, or artificial intelligence service providers.

Google user data is transmitted solely between your browser, AutoTracker Pro’s servers, and Google’s own APIs for the purpose of performing the operations you have requested. The only limited exceptions to the foregoing are:

• Our hosting infrastructure provider. AutoTracker Pro is hosted on Microsoft Azure, which stores data on our behalf under contractual confidentiality and security obligations. Microsoft acts strictly as a data processor and is contractually prohibited from accessing, using, or disclosing your data for its own purposes.
• Compliance with law. We may disclose data where we are compelled to do so by valid legal process, such as a subpoena, court order, or binding governmental request. Where we are legally permitted to notify you before making such a disclosure, we will make reasonable efforts to do so.
• Protection of rights and safety. We may disclose data where we reasonably believe disclosure is necessary to investigate or prevent fraud, to address a security incident, or to protect against imminent harm to the rights, property, or safety of AutoTracker Pro, our users, or the public.

In the event of a merger, acquisition, reorganization, or sale of assets, any transfer of Google user data would remain subject to the commitments described in this policy, and you would be given advance notice together with a meaningful opportunity to disconnect your YouTube channel and have the associated data deleted before any transfer occurred.

AutoTracker Pro treats OAuth 2.0 access tokens and refresh tokens as sensitive credentials and applies layered technical and organizational safeguards to protect them against unauthorized access, disclosure, alteration, and destruction:

• Encryption in transit. All communication between your browser, our servers, and Google’s APIs is transmitted exclusively over TLS-encrypted HTTPS connections. We do not accept unencrypted connections for any operation involving Google user data.
• Encryption at rest. OAuth tokens are stored in a managed database protected by Transparent Data Encryption, so that stored credentials remain encrypted on disk and within backups.
• Segregated credential storage. Our Google client identifier and client secret are held in Microsoft Azure Key Vault, a dedicated hardware-backed secrets management service. These values are never committed to source control and never exposed to browsers or client-side code.
• Tenant isolation and least privilege. Authorization records are scoped to the individual company account that created them and are accessible only to authenticated users holding an appropriate role within that account. Users of one company cannot access the Google user data of another.
• Minimum necessary scope. We request only the narrowest set of OAuth scopes required to deliver the features described in Section 3, and we do not request additional scopes speculatively or for future use.
• Restricted internal access. Access to production systems is limited to a small number of authorized personnel bound by confidentiality obligations, granted strictly on a need-to-know basis for the purposes of system maintenance, security response, or diagnosing a support issue you have reported to us.
• Credential hygiene. Access tokens are short-lived and refreshed automatically. Where a token is revoked or has expired, the stored authorization record is invalidated and removed rather than retained in an unusable state.

While no method of electronic storage or transmission can be guaranteed to be perfectly secure, we maintain these controls in accordance with recognized industry practice and review them periodically. In the event of a data breach affecting your Google user data, we will notify affected users and any applicable supervisory authority without undue delay and consistent with applicable law.

Retention. AutoTracker Pro retains Google user data only for as long as your YouTube channel remains connected and only for as long as is necessary to provide the features you have requested. Specifically:

• OAuth access tokens, refresh tokens, and the connected channel identifier and title are retained for the duration of the active connection.
• Video metadata and statistics are retrieved from Google in real time for display and are not retained in a permanent AutoTracker Pro archive after your session concludes.

Deletion at your request. You may disconnect your YouTube channel at any time from the YouTube Account Settings page within AutoTracker Pro. When you disconnect, we immediately transmit a revocation request to Google invalidating the tokens issued to us, and we permanently delete the corresponding authorization record, including all stored tokens and channel identifiers, from our production database. No manual request or waiting period is required.

You may additionally revoke AutoTracker Pro’s access directly through your Google Account at myaccount.google.com/permissions. Where access is revoked by that route, or where Google otherwise invalidates our credentials, AutoTracker Pro detects the revoked grant on its next use and automatically deletes the corresponding stored authorization record.

Deletion upon account closure. If you close your AutoTracker Pro account, all associated Google user data is deleted as part of the account closure process.

Backups. Encrypted database backups are retained on a rolling basis for disaster recovery purposes and are overwritten in the ordinary course within thirty (30) days. Deleted Google user data persisting in such backups is not restored to production systems and is not accessible for operational use.

Requests and questions. To request deletion of your Google user data, to ask what data we hold about you, or to raise any question regarding this policy, contact us at support@autotrackerpro.com. We respond to verified requests within thirty (30) days.

AutoTracker Pro offers an optional integration that allows you to list and manage vehicle inventory on the eBay Motors marketplace directly from our platform. As with the YouTube integration, this feature is entirely voluntary. If you never connect an eBay seller account, AutoTracker Pro accesses no eBay user data associated with you.

When you expressly authorize the integration through eBay’s own consent page, AutoTracker Pro accesses the following categories of eBay data:

• eBay authorization token — the authentication token issued to us by eBay, used to act on your behalf for the listing operations you initiate. We never receive, request, or have access to your eBay password.
• Seller listing data — the identifiers, titles, descriptions, prices, listing durations, categories, photographs, and current status of the vehicle listings created or managed through AutoTracker Pro, used to populate the ad management interface and to keep listing status synchronized.
• Contact designation — a payment or contact email address that you supply so that it can be included on the listings we create at your direction.

Separately, and independently of any seller account, AutoTracker Pro queries eBay’s publicly available marketplace catalog using application-level credentials issued to AutoTracker Pro itself. This is used to research comparable vehicle pricing and market availability. These queries return only public listing information and are not associated with, and do not draw upon, any individual user’s eBay account.

We do not access your eBay buyer history, saved searches, watch lists, feedback records, financial account details, or payment instrument information.

eBay data is used exclusively to provide the marketplace features you have requested, namely to create vehicle listings on your behalf, to revise or end those listings when you make those changes within AutoTracker Pro, to relist inventory at your direction, and to retrieve listing status and performance information for display in your dashboard and reports.

AutoTracker Pro does not sell, rent, lease, or otherwise disclose your eBay data to any third party. We do not use eBay data for advertising or behavioral targeting, and we do not use it to train, refine, or develop generalized artificial intelligence or machine learning models. The only disclosures we make are those described in Section 4 above, which apply equally to eBay data: our hosting infrastructure provider acting as a data processor, compliance with valid legal process, and protection of rights and safety.

Information that you elect to publish as part of a listing — including vehicle details, photographs, pricing, and any contact address you supply — is by its nature transmitted to eBay and displayed publicly on the eBay marketplace. That publication is the purpose of the feature and occurs only at your direction. Once published, such information is also subject to eBay’s own User Privacy Notice.

Protection. eBay authorization tokens are treated as sensitive credentials and are protected by the same safeguards described in Section 5 above, including encryption in transit over TLS, encryption at rest, storage of application credentials in Microsoft Azure Key Vault, tenant isolation so that one company cannot access another’s authorization records, and restricted internal access limited to authorized personnel on a need-to-know basis.

Retention. We retain your eBay authorization token only for as long as your eBay seller account remains connected to AutoTracker Pro. Listing records are retained for as long as they remain relevant to your inventory management and historical sales reporting.

Deletion at your request. You may disconnect your eBay seller account at any time from the eBay Authorization page within AutoTracker Pro. Disconnecting permanently deletes the stored authorization record, including the authorization token, from our production database. No manual request or waiting period is required. You may additionally revoke AutoTracker Pro’s access directly from within your eBay account settings.

Marketplace account deletion notifications. In accordance with eBay’s Marketplace Account Deletion and Closure requirements, AutoTracker Pro maintains a dedicated endpoint that receives and processes account deletion notifications published by eBay. When we receive a valid notification that an eBay account has been closed or that a user has requested deletion of their data, we automatically and permanently delete the corresponding authorization record from our systems and record the deletion in our audit log. This process requires no action on your part.

Backups. As described in Section 6, encrypted database backups are retained on a rolling basis for disaster recovery purposes and are overwritten in the ordinary course within thirty (30) days. Deleted eBay data persisting in such backups is not restored to production systems and is not accessible for operational use.

To request deletion of your eBay data or to ask what data we hold about you, contact us at support@autotrackerpro.com. We respond to verified requests within thirty (30) days.

You agree not to disclose AutoTracker Pro Confidential Information without our prior written consent. “AutoTracker Pro Confidential Information” includes all AutoTracker Pro software, technology and documentation relating to the Services and any information made available by AutoTracker Pro that is marked confidential or would normally be considered confidential under the circumstances in which it is presented. AutoTracker Pro's Confidential Information does not include information that you already knew prior to your use of the Services, that becomes public through no fault of yours, that was independently developed by you, or that was lawfully given to you by a third party.