How DealerBridge handles your data

DealerBridge is operated by Yash Rajput, Sole Proprietor, based in New Delhi, India. For any privacy question, request, or concern, contact dealerbridge.team@gmail.com.

We process personal data on the basis of: performing our contract with a dealer (running their account and dashboard), a dealer's instruction to us when they connect a WhatsApp number and enable features on a customer's behalf, and our legitimate interest in operating, securing, and improving DealerBridge. Where required, we rely on consent — for example, a customer messaging a DealerBridge-connected WhatsApp number is treated as initiating that conversation voluntarily.

When a dealer creates a DealerBridge account, we collect information needed to run their dashboard and public showroom: business name, phone number, address, city, state, and PIN code; the dealership's established year; links to their Google Maps listing, Instagram, Facebook, or YouTube; their logo; and, if they choose to enable the WhatsApp chatbot, any custom instructions they write for it. Sign-in is via email and password or Google sign-in.

This information is used only to operate the dealer's account: displaying their public Vehicle Passport and showroom pages, running their dashboard, and configuring features they turn on.

If a dealer connects a WhatsApp number to DealerBridge, messages a customer sends to that number are received and stored by DealerBridge on the dealer's behalf: the customer's WhatsApp phone number and the text of each message, inbound and outbound. Where a message results in a sales lead, we also store the customer's name (if given) and the lead's status so the dealer and their sales team can follow up.

This data is used solely to let the dealer (and, where enabled, the automated chatbot described below) see and respond to that customer's messages. It is scoped to the receiving dealer only — one dealer cannot see another dealer's conversations or leads. DealerBridge never sends unsolicited or promotional WhatsApp messages — we only reply within a conversation a customer has already started with a connected dealership. A customer can stop the conversation at any time simply by not replying, or can ask us to delete their conversation data as described in Section 10.

If a dealer's public Digital Showroom has our Customer Interest feature enabled, a visitor who taps “Favourite” on a vehicle or requests a test drive gives us their phone number (and, for a test drive request, their name and a preferred time). This automatically creates or updates that specific dealer's own sales lead for you, so they can follow up — it is never shown to other visitors, and never shared with, or used to create a lead for, any other dealer. The underlying favourite/test-drive record is periodically deleted or anonymized on the schedule described in Section 8; the sales lead it generates is retained under the same rule as any other lead.

Dealers may enable an AI-powered WhatsApp chatbot to answer routine customer questions and search their own vehicle inventory. When enabled, an incoming customer message, the recent conversation history, and relevant dealership context (such as address or the dealer's own written instructions) are sent to OpenAI's API to generate a reply and to look up matching vehicles. Customer messages are not sent to OpenAI, or anywhere else, for any purpose other than generating that reply.

Subscription billing and prepaid chatbot credit purchases are handled by Razorpay. DealerBridge stores the identifiers and amounts Razorpay returns for a payment or subscription (such as order, payment, and subscription IDs, and the amount charged) so it can confirm and record what was paid. DealerBridge never receives or stores card numbers, bank account details, or other payment instrument data — that information is handled entirely by Razorpay.

DealerBridge relies on the following third-party services to operate. Each processes only the data needed for its specific function:

• Meta (WhatsApp Business Platform) — delivering and receiving WhatsApp messages.
• OpenAI — generating chatbot replies, where a dealer has enabled the chatbot.
• Razorpay — processing subscription and credit purchase payments.
• Cloudinary — hosting vehicle photos a dealer uploads.
• Google — optional “Sign in with Google” authentication.
• Resend — delivering account emails (verification codes, password resets, receipts).
• Neon — hosting the DealerBridge database.
• Vercel — hosting the DealerBridge application.

Some of the service providers listed above — including OpenAI, Vercel, and Google — process data on infrastructure located outside India, principally in the United States. Where personal data is transferred outside India, we rely on each provider's own contractual and security commitments, and only share the minimum data each provider needs to perform its specific function described above. We do not transfer data to any provider for marketing, resale, or any purpose unrelated to operating DealerBridge.

We keep dealer account data, vehicle listings, and WhatsApp conversation and lead data for as long as the dealer's account remains active, so the dealer can continue to access their own history. If a dealer permanently deletes their account (Section 11), all of this data is deleted immediately and is not retained afterward, except where we are legally required to keep limited records — such as payment records Razorpay requires us to retain for tax and accounting purposes under Indian law.

Favourite and test drive request data (Section 3) automatically creates a sales lead at the time of the interaction. The underlying favourite/test-drive record is deleted after 3 months of inactivity; the sales lead it generated is retained for as long as that lead is, under the same rule as any other lead.

DealerBridge uses a functional session cookie to keep a dealer signed in, and — on a dealer's public Digital Showroom, where the Customer Interest feature described in Section 3 is enabled — a second functional cookie that remembers a visitor's phone number on that browser so they are not asked for it again. Neither cookie is used for advertising or cross-site tracking. We do not use analytics, advertising, or third-party tracking cookies of any kind, and no analytics or advertising tooling is embedded in this site.

If you are a dealer or a customer whose data DealerBridge holds, you can ask us to: confirm what personal data we hold about you; correct inaccurate data; erase your data (see Section 11 for dealer self-service deletion); and ask questions about how your data has been processed. To make any of these requests, email dealerbridge.team@gmail.com — we aim to respond to every request within 7 business days, and to resolve straightforward requests (such as deleting a customer's conversation data) within 15 business days.

If you are not satisfied with how we have handled a request, you can escalate it to our Grievance Officer, Yash Rajput, at the same email address above.

A dealer can permanently delete their account at any time from Dashboard → Settings → Danger Zone. This immediately and permanently deletes their account, dealership profile, every vehicle listing, and all associated conversations, messages, and leads — this action cannot be undone and there is no retention period afterward.

A customer who wants their WhatsApp conversation data deleted, or anyone with another data question, can email dealerbridge.team@gmail.com.

All data is transmitted over HTTPS. Incoming WhatsApp and payment webhooks are verified using signature checks before being processed. Every dealer's data — vehicles, conversations, leads, and billing records — is scoped to that dealer at the database level, so one dealer's data is never visible to another. Authentication endpoints are rate-limited to reduce automated abuse.

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal data, we will notify affected dealers and take reasonable steps to comply with applicable Indian data protection law.

DealerBridge is intended for use by dealership businesses and their adult staff, and by adult customers contacting a dealership. It is not directed at, and we do not knowingly collect personal data from, children. If you believe a child's data has been provided to us, contact dealerbridge.team@gmail.com and we will delete it.

If we materially change what data we collect, how we use it, or who we share it with, we will update this page and change the “Last updated” date above. Continued use of DealerBridge after a change takes effect means you accept the updated policy. This policy is governed by the laws of India, and any dispute relating to it is subject to the jurisdiction of the courts in New Delhi, India.

For any question about this policy, or to make a request about your data, email dealerbridge.team@gmail.com.