Privacy Policy

Effective date: May 9, 2026  ·  Last updated: May 13, 2026

Velance Inc., a Nevada corporation ("Velance," "we," "us," or "our") provides a customer relationship management platform for automotive dealerships, including our website at velancecrm.com, our web application, and our mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect information in connection with the Service.

Quick summary. Dealerships are our customers. The dealership controls the personal information of its leads and customers; Velance processes that information on the dealership's behalf. We do not sell personal information. We do not train AI models on customer-identifiable conversation content. We use industry-standard security measures, including encryption in transit and at rest, row-level isolation between dealerships, and 72-hour breach notification.

1. Who This Policy Covers

This Policy applies to:

2. Our Role: Data Controller and Data Processor

For information about Dealership Personnel and Website Visitors, Velance acts as a data controller. We determine the purposes and means of processing for account, billing, support, and security purposes.

For information about Dealership Customers and Leads, Velance acts as a data processor (or "service provider" under California law). The dealership is the controller. We process this information only on the dealership's instructions and to provide and improve the Service. If you are a consumer and want to exercise privacy rights with respect to data the dealership holds about you, please contact the dealership directly. Where required, we will assist them in responding to your request.

3. Information We Collect

Information you provide

Information collected automatically

Information from third parties

4. How We Use Information

5. Artificial Intelligence and Machine Learning

The Service uses third-party AI models (currently Anthropic Claude, OpenAI GPT, and Google Gemini) to draft messages, summarize conversations, recommend follow-ups, and answer dealership-staff questions. We design our use of AI to protect dealership and consumer information.

6. SMS and Text Messaging

The Service enables dealerships to send and receive SMS messages with their leads and customers. The dealership is responsible for obtaining all required consents under the Telephone Consumer Protection Act (TCPA), state law, and applicable carrier requirements before initiating SMS communications, and for honoring opt-out requests promptly. Velance assists by processing keywords such as STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT, and by maintaining suppression records.

We do not share, sell, rent, or disclose mobile opt-in consent or SMS consent data to third parties or affiliates for their marketing or promotional purposes. SMS consent is used solely for communications between the dealership and its leads and customers through the Service.

Message and data rates may apply for recipients. Reply HELP for help, STOP to unsubscribe.

7. How We Share Information

We do not sell personal information for monetary consideration. We share information only as follows:

8. Data Retention

We retain information for as long as the dealership maintains an active subscription, plus a reasonable post-termination period for billing reconciliation, dispute resolution, and legal-hold purposes. Specific defaults:

CategoryDefault Retention
Active lead, customer, and deal recordsFor the term of the dealership's subscription
SMS and email message content24 months from delivery
Server and security logs90 days
Backup snapshots35 days rolling
Account and billing records7 years (tax and audit)
Data following dealership offboardingDeleted within 30 days, except as required by law

9. Security and Breach Notification

We implement administrative, technical, and physical safeguards designed to protect information, including:

Breach notification. If we discover a security incident affecting personal information, we will notify affected dealerships without undue delay and, in any event, within 72 hours of confirmation, with the information available at that time. We will assist dealerships in their downstream notification obligations to consumers as required by applicable law.

10. Your Rights

Subject to applicable law, you may have rights to:

Dealership Personnel and Website Visitors may exercise these rights by contacting privacy@velancecrm.com. We will respond within 45 days, with one 45-day extension where reasonably necessary.

If you are a Dealership Customer or Lead, please contact the dealership that holds your information; we will support the dealership in honoring your request.

11. California Privacy Rights (CCPA / CPRA)

This section provides additional disclosures required for California residents. Velance does not sell or share personal information for cross-context behavioral advertising. The categories of personal information we collect, the sources, and the purposes are summarized below.

Category (Cal. Civ. Code §1798.140)CollectedDisclosed for Business Purpose
A. IdentifiersYesYes — to subprocessors, dealership integrations
B. Customer recordsYesYes — to subprocessors
C. Protected classificationsNoNo
D. Commercial information (vehicles of interest, deal data)YesYes — to subprocessors, dealership integrations
E. Biometric informationNoNo
F. Internet/network activityYesYes — to analytics subprocessor
G. Geolocation (approximate, IP-based)YesYes — to subprocessors
H. Sensory dataNoNot collected
I. Professional/employment informationYesYes — to subprocessors
J. Education informationNoNo
K. Inferences (lead score, conversion likelihood)YesYes — to dealership users
L. Sensitive personal informationNoNot collected

Right to Limit Use of Sensitive Personal Information. We do not use sensitive personal information for purposes other than those necessary to provide the Service.

Non-Discrimination. We will not discriminate against you for exercising your rights.

To exercise California rights, email privacy@velancecrm.com or use the form at velancecrm.com/do-not-sell. Authorized agents may submit requests with verifiable authorization.

12. Mobile Application — Apple App Store Disclosures

The Velance mobile application is distributed through the Apple App Store. The data-collection categories disclosed in our App Store privacy nutrition label correspond to the categories described in this Policy. We do not engage in cross-app or cross-website tracking and will not request App Tracking Transparency authorization.

Specific iOS permissions and their purpose:

You may revoke notification permission at any time in iOS Settings. If we add features in future versions that require additional permissions, we will request them at the point of use, update this Policy, and update the App Store privacy disclosure accordingly.

13. Mobile Application — Google Play Disclosures

The Velance CRM mobile app is distributed through Google Play. The data categories disclosed in our Google Play Data Safety section correspond to the categories described in this Policy. The app is free to download, requires an existing dealership-provisioned login, does not sell user data, and does not share data for advertising. Specific Android permissions and their purpose:

You may revoke notification permission at any time in Android Settings. If we add features in future versions that require additional permissions, we will request them at the point of use, update this Policy, and update the Google Play Data Safety disclosure accordingly.

14. Cookies and Similar Technologies

We use a small number of cookies and similar technologies. They fall into three categories:

You may control cookies through your browser settings. Disabling strictly-necessary cookies will prevent authentication.

15. Children

The Service is intended for business use by dealership personnel aged 18 and over. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it.

16. International Users

The Service is operated from and intended for users in the United States. Information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Service and by email to dealership administrators at least 30 days before they take effect, except where a shorter period is required by law. The "Effective date" above will be updated each time.

18. Contact

For questions, complaints, or to exercise a right, contact us at: