Privacy Policy

1. Introduction

AUTONOMi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at goautonomi.com, use our platform, or engage with our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

2. Who We Are

AUTONOMi is an automotive growth infrastructure platform that connects dealerships directly to digital advertising platforms. We act as both a data controller (for information we collect about you directly) and a data processor (for dealership and consumer data processed on behalf of our clients).

Contact:

AUTONOMi
Email: privacy@goautonomi.com
Website: goautonomi.com

For EU-related inquiries:
Email: gdpr@goautonomi.com

3. Information We Collect

3.1 Information You Provide Directly

• Name, email address, phone number, and job title when you complete a contact form, request a demo, or create an account
• Billing and payment information when you subscribe to our platform
• Communications you send us via email, chat, or support tickets

3.2 Information Collected Automatically

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, links clicked, and referring URLs
• Cookie data and similar tracking technologies (see Section 7)

3.3 Information From Third Parties

• Business information from LinkedIn, Google, or other platforms if you connect those accounts
• Information from data enrichment providers used to verify business contact information

3.4 Dealership and Platform Data (Client Data)

When clients use the AUTONOMi platform, we process data on their behalf, including:

• CRM and DMS data synced to the platform
• Ad platform account data (Google Ads, Meta, TikTok, etc.)
• First-party audience data and customer lists uploaded by clients
• Campaign performance data and attribution reporting

This data is processed as a data processor acting on behalf of our clients (data controllers). We do not sell, share, or use client data for any purpose other than providing the contracted services.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform and services
• Process transactions and send related information including purchase confirmations and invoices
• Send administrative information, including changes to our terms, conditions, and policies
• Respond to inquiries, questions, and provide customer support
• Send marketing and promotional communications (where permitted and with opt-out options)
• Monitor and analyze usage patterns to improve our platform
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

We do not sell your personal information to third parties.

5. Legal Basis for Processing (GDPR — EU Users)

For users in the European Union, including Germany and Poland, we process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time.

6. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

6.1 Service Providers

We share data with trusted third-party vendors who assist in operating our platform, including:

• Cloud hosting and infrastructure providers
• Payment processors
• CRM and customer support software
• Email and marketing automation platforms
• Analytics providers

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.2 Advertising Platforms

As part of our core service, we connect client dealerships directly to advertising platforms (Google, Meta, TikTok, YouTube, Microsoft, and others). Data transmitted to these platforms is governed by their respective privacy policies and data processing agreements.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6.4 Legal Requirements

We may disclose your information where required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety, investigate fraud, or respond to a government request.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about how you use our website and platform.

Types of Cookies We Use:

Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. EU users will be presented with a cookie consent banner upon first visit in compliance with the ePrivacy Directive and GDPR.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Account data: Retained for the duration of the active account plus 3 years after termination
• Transaction records: Retained for 7 years for tax and legal compliance
• Marketing data: Retained until you opt out or request deletion
• Support communications: Retained for 2 years after resolution

Client data processed on behalf of dealerships is retained and deleted in accordance with the terms of the applicable Data Processing Agreement.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments and penetration testing
• Employee training on data protection practices

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights

10.1 All Users

• Opt out of marketing: Unsubscribe from marketing emails at any time via the link in any email or by contacting us at privacy@goautonomi.com
• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information

10.2 EU Users (GDPR Rights)

If you are located in the European Union, including Germany or Poland, you have the following rights under GDPR:

• Right of access (Art. 15) — Obtain confirmation of whether we process your data and receive a copy
• Right to rectification (Art. 16) — Request correction of inaccurate data
• Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten")
• Right to restriction (Art. 18) — Request restriction of processing in certain circumstances
• Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format
• Right to object (Art. 21) — Object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at gdpr@goautonomi.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

• Germany: Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI)
• Poland: Urząd Ochrony Danych Osobowych (UODO)

10.3 California Users (CCPA)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

To submit a CCPA request, contact: privacy@goautonomi.com

11. International Data Transfers

AUTONOMi operates in the United States, European Union (Germany and Poland), and may process data across these jurisdictions. For transfers of personal data from the EU to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all relevant service providers

By using our services, EU-based users acknowledge that their data may be transferred to and processed in the United States.

12. Children's Privacy

Our platform and services are intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately.

13. SMS Communications

Full SMS opt-in policy. The complete, standalone SMS Opt-In Policy — including the verbatim consent disclosure, sample messages, full STOP/HELP keyword list, and our toll-free number — is published at goautonomi.com/sms-opt-in. The summary in this section is governed by that policy; if the two ever conflict, the standalone policy controls.

What messages we send. If you provide your mobile phone number and explicitly consent to SMS during sign-up, AUTONOMi may send you SMS messages in three categories: (a) account notifications (confirmations, integration alerts, monthly performance summaries); (b) operational alerts (campaign pause notifications, budget thresholds, video render completions, OEM offer expirations); and (c) customer support responses (replies to questions you send to our toll-free number, generated by AEGIS, our AI agent).

How you opt in. You opt in by checking the SMS consent checkbox on our sign-up form at goautonomi.com/sign-up and providing your mobile phone number. After submission, we send a one-time confirmation SMS asking you to reply YES to activate. You are only fully opted in after replying YES (double opt-in).

Frequency and rates. You will receive approximately 5 messages per month from us, plus replies to any questions you send to our number. Message and data rates may apply per your carrier plan.

How to opt out. Reply STOP to any message from us at any time to immediately unsubscribe. You will receive a confirmation that you have been removed and will not receive further messages unless you opt back in. For help, reply HELP to any of our messages or email support@autonomitech.com.

Third-party sharing. We do not share your phone number with third parties for marketing purposes. Your phone number is used only to deliver the SMS messages described above. We may use a third-party SMS delivery provider (Twilio) to transmit messages, but they act as a processor on our behalf and do not use your number for their own marketing.

Data retention. We retain SMS conversation history (inbound + outbound messages, opt-in/opt-out timestamps, and consent audit trail) as required by TCPA recordkeeping rules and for the duration of your account relationship with AUTONOMi. You may request deletion at any time per the data rights section above.

13.1 Account security messages (two-factor authentication)

A separate number, for security only. Account-security messages are sent from a dedicated toll-free number, +1 (855) 920-0517, which is kept entirely separate from the customer-care number described above. This number sends one-time sign-in codes and security alerts only — never marketing, promotional, or conversational messages.

How you opt in. When you sign in to the AUTONOMi application at app.autonomitech.com, you are asked to add a mobile number for account security. That screen discloses, before you submit anything, that the number will receive one-time sign-in codes and security alerts, that frequency depends on how often you sign in, that message and data rates may apply, and that you can reply STOP to opt out or HELP for help. You then prove you own the number by entering the code we text you before it is saved to your account. No number is ever messaged before you have entered it yourself on that screen. Consent for these security messages is separate from, and not a condition of, any marketing consent.

What you will receive. Sample messages:

• "AUTONOMi: Your sign-in code is 482913. It expires in 5 minutes. Never share this code. Reply HELP for help."
• "AUTONOMi: Your account password was just changed. If this was not you, contact support@goautonomi.com immediately."
• "AUTONOMi: New sign-in to your account from a new device. If this was not you, contact support@goautonomi.com."

Frequency, rates and stopping these messages. You will receive one message per sign-in that requires verification, plus occasional security alerts. Message and data rates may apply per your carrier plan. These are security messages rather than marketing, so they are not something you opt out of while two-factor sign-in is switched on for your account — the way to stop them is to ask your account administrator to turn two-factor off for you, or to email support@goautonomi.com. Your carrier also honours STOP on any text message and we cannot override that: if you send it to this number your sign-in codes will stop arriving, and you will not be able to sign in until you text START back to the same number. This number is separate from the customer-care program described above — stopping one has no effect on the other.

Third-party sharing. We do not share the mobile number you provide for account security with any third party for marketing. It is used solely to deliver sign-in codes and security alerts, transmitted by our SMS provider (Twilio) acting as a processor on our behalf.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

15. YouTube API Services

AUTONOMi is an API Client of YouTube API Services. Our video features use those services to upload videos to YouTube, manage the videos we publish on your behalf, and read the performance figures YouTube reports for them. By using AUTONOMi you agree to be bound by the YouTube Terms of Service, available at https://www.youtube.com/t/terms.

15.1 Google Privacy Policy

Information handled through YouTube API Services is also governed by the Google Privacy Policy, available at http://www.google.com/policies/privacy. Please read it alongside this policy.

15.2 What We Store

When you connect a YouTube channel to AUTONOMi we store the authorization tokens Google issues to us, the channel identifier and channel name, and the identifiers, titles, descriptions, tags, and privacy status of the videos we publish on your behalf, together with the performance figures YouTube reports for those videos. We do not store YouTube viewer identities or viewer contact information.

15.3 How Long We Keep It

Authorization tokens are retained only while your channel remains connected to AUTONOMi. Channel details we read from YouTube are refreshed whenever you or we re-run discovery from your connections settings, and are deleted when you disconnect. Performance figures for the videos we publish for you are retained for the term of your agreement, consistent with the consent you granted.

15.4 Revoking Our Access

You may revoke AUTONOMi's access to your YouTube data at any time, in either of two ways:

• In the AUTONOMi dashboard, open Settings, then Connections, and use Turn off YouTube access. We stop using your YouTube channel immediately and no longer reach your YouTube account. Your other Google connections are not affected, and you can turn it back on from the same place.
• To remove the Google authorization itself, use the Google security settings page at https://myaccount.google.com/connections, where you can review and remove AUTONOMi's access to your Google and YouTube account.

15.5 Deleting Stored Data

Turning YouTube access off stops our use of your channel. To have the YouTube data we already hold deleted as well, request it at any time by emailing privacy@goautonomi.com. We delete the requested data as soon as possible, and in every case within 7 calendar days of the request.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. For significant changes, we will provide additional notice via email to registered users.

17. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:

AUTONOMi Privacy Team

Email: privacy@goautonomi.com
Website: goautonomi.com

For EU/GDPR inquiries:

Email: gdpr@goautonomi.com