1. Introduction
AUTONOMi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at goautonomi.com, use our platform, or engage with our services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.
2. Who We Are
AUTONOMi is an automotive growth infrastructure platform that connects dealerships directly to digital advertising platforms. We act as both a data controller (for information we collect about you directly) and a data processor (for dealership and consumer data processed on behalf of our clients).
Contact:
AUTONOMi
Email: privacy@goautonomi.com
Website: goautonomi.com
For EU-related inquiries:
Email: gdpr@goautonomi.com
3. Information We Collect
3.1 Information You Provide Directly
- Name, email address, phone number, and job title when you complete a contact form, request a demo, or create an account
- Billing and payment information when you subscribe to our platform
- Communications you send us via email, chat, or support tickets
3.2 Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, links clicked, and referring URLs
- Cookie data and similar tracking technologies (see Section 7)
3.3 Information From Third Parties
- Business information from LinkedIn, Google, or other platforms if you connect those accounts
- Information from data enrichment providers used to verify business contact information
3.4 Dealership and Platform Data (Client Data)
When clients use the AUTONOMi platform, we process data on their behalf, including:
- CRM and DMS data synced to the platform
- Ad platform account data (Google Ads, Meta, TikTok, etc.)
- First-party audience data and customer lists uploaded by clients
- Campaign performance data and attribution reporting
This data is processed as a data processor acting on behalf of our clients (data controllers). We do not sell, share, or use client data for any purpose other than providing the contracted services.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our platform and services
- Process transactions and send related information including purchase confirmations and invoices
- Send administrative information, including changes to our terms, conditions, and policies
- Respond to inquiries, questions, and provide customer support
- Send marketing and promotional communications (where permitted and with opt-out options)
- Monitor and analyze usage patterns to improve our platform
- Detect, prevent, and address technical issues and fraudulent activity
- Comply with legal obligations
We do not sell your personal information to third parties.
5. Legal Basis for Processing (GDPR — EU Users)
For users in the European Union, including Germany and Poland, we process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
| Purpose | Legal Basis |
|---|---|
| Providing contracted services | Performance of a contract (Art. 6(1)(b)) |
| Billing and financial records | Legal obligation (Art. 6(1)(c)) |
| Marketing communications | Legitimate interest or consent (Art. 6(1)(a) / (f)) |
| Platform improvement and analytics | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time.
6. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
6.1 Service Providers
We share data with trusted third-party vendors who assist in operating our platform, including:
- Cloud hosting and infrastructure providers
- Payment processors
- CRM and customer support software
- Email and marketing automation platforms
- Analytics providers
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
6.2 Advertising Platforms
As part of our core service, we connect client dealerships directly to advertising platforms (Google, Meta, TikTok, YouTube, Microsoft, and others). Data transmitted to these platforms is governed by their respective privacy policies and data processing agreements.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
6.4 Legal Requirements
We may disclose your information where required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety, investigate fraud, or respond to a government request.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information about how you use our website and platform.
Types of Cookies We Use:
| Type | Purpose |
|---|---|
| Essential | Required for the website and platform to function |
| Analytics | Help us understand how visitors interact with our site |
| Marketing | Used to deliver relevant advertising and track campaign performance |
| Preferences | Remember your settings and preferences |
Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. EU users will be presented with a cookie consent banner upon first visit in compliance with the ePrivacy Directive and GDPR.
8. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Account data: Retained for the duration of the active account plus 3 years after termination
- Transaction records: Retained for 7 years for tax and legal compliance
- Marketing data: Retained until you opt out or request deletion
- Support communications: Retained for 2 years after resolution
Client data processed on behalf of dealerships is retained and deleted in accordance with the terms of the applicable Data Processing Agreement.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication requirements
- Regular security assessments and penetration testing
- Employee training on data protection practices
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your Rights
10.1 All Users
- Opt out of marketing: Unsubscribe from marketing emails at any time via the link in any email or by contacting us at privacy@goautonomi.com
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
10.2 EU Users (GDPR Rights)
If you are located in the European Union, including Germany or Poland, you have the following rights under GDPR:
- Right of access (Art. 15) — Obtain confirmation of whether we process your data and receive a copy
- Right to rectification (Art. 16) — Request correction of inaccurate data
- Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten")
- Right to restriction (Art. 18) — Request restriction of processing in certain circumstances
- Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format
- Right to object (Art. 21) — Object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at gdpr@goautonomi.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
- Germany: Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI)
- Poland: Urząd Ochrony Danych Osobowych (UODO)
10.3 California Users (CCPA)
California residents have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by us
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising privacy rights
To submit a CCPA request, contact: privacy@goautonomi.com
11. International Data Transfers
AUTONOMi operates in the United States, European Union (Germany and Poland), and may process data across these jurisdictions. For transfers of personal data from the EU to the United States, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all relevant service providers
By using our services, EU-based users acknowledge that their data may be transferred to and processed in the United States.
12. Children's Privacy
Our platform and services are intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. For significant changes, we will provide additional notice via email to registered users.
15. Contact Us
For questions, concerns, or requests regarding this Privacy Policy:
AUTONOMi Privacy Team
Email: privacy@goautonomi.com
Website: goautonomi.com
For EU/GDPR inquiries:
Email: gdpr@goautonomi.com