1. Introduction
AUTONOMi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at goautonomi.com, use our platform, or engage with our services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.
2. Who We Are
AUTONOMi is an automotive growth infrastructure platform that connects dealerships directly to digital advertising platforms. We act as both a data controller (for information we collect about you directly) and a data processor (for dealership and consumer data processed on behalf of our clients).
Contact:
AUTONOMi
Email: privacy@goautonomi.com
Website: goautonomi.com
For EU-related inquiries:
Email: gdpr@goautonomi.com
3. Information We Collect
3.1 Information You Provide Directly
- Name, email address, phone number, and job title when you complete a contact form, request a demo, or create an account
- Billing and payment information when you subscribe to our platform
- Communications you send us via email, chat, or support tickets
3.2 Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, links clicked, and referring URLs
- Cookie data and similar tracking technologies (see Section 7)
3.3 Information From Third Parties
- Business information from LinkedIn, Google, or other platforms if you connect those accounts
- Information from data enrichment providers used to verify business contact information
3.4 Dealership and Platform Data (Client Data)
When clients use the AUTONOMi platform, we process data on their behalf, including:
- CRM and DMS data synced to the platform
- Ad platform account data (Google Ads, Meta, TikTok, etc.)
- First-party audience data and customer lists uploaded by clients
- Campaign performance data and attribution reporting
This data is processed as a data processor acting on behalf of our clients (data controllers). We do not sell, share, or use client data for any purpose other than providing the contracted services.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our platform and services
- Process transactions and send related information including purchase confirmations and invoices
- Send administrative information, including changes to our terms, conditions, and policies
- Respond to inquiries, questions, and provide customer support
- Send marketing and promotional communications (where permitted and with opt-out options)
- Monitor and analyze usage patterns to improve our platform
- Detect, prevent, and address technical issues and fraudulent activity
- Comply with legal obligations
We do not sell your personal information to third parties.
5. Legal Basis for Processing (GDPR — EU Users)
For users in the European Union, including Germany and Poland, we process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
| Purpose | Legal Basis |
|---|---|
| Providing contracted services | Performance of a contract (Art. 6(1)(b)) |
| Billing and financial records | Legal obligation (Art. 6(1)(c)) |
| Marketing communications | Legitimate interest or consent (Art. 6(1)(a) / (f)) |
| Platform improvement and analytics | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time.
6. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
6.1 Service Providers
We share data with trusted third-party vendors who assist in operating our platform, including:
- Cloud hosting and infrastructure providers
- Payment processors
- CRM and customer support software
- Email and marketing automation platforms
- Analytics providers
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
6.2 Advertising Platforms
As part of our core service, we connect client dealerships directly to advertising platforms (Google, Meta, TikTok, YouTube, Microsoft, and others). Data transmitted to these platforms is governed by their respective privacy policies and data processing agreements.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
6.4 Legal Requirements
We may disclose your information where required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety, investigate fraud, or respond to a government request.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information about how you use our website and platform.
Types of Cookies We Use:
| Type | Purpose |
|---|---|
| Essential | Required for the website and platform to function |
| Analytics | Help us understand how visitors interact with our site |
| Marketing | Used to deliver relevant advertising and track campaign performance |
| Preferences | Remember your settings and preferences |
Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. EU users will be presented with a cookie consent banner upon first visit in compliance with the ePrivacy Directive and GDPR.
8. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Account data: Retained for the duration of the active account plus 3 years after termination
- Transaction records: Retained for 7 years for tax and legal compliance
- Marketing data: Retained until you opt out or request deletion
- Support communications: Retained for 2 years after resolution
Client data processed on behalf of dealerships is retained and deleted in accordance with the terms of the applicable Data Processing Agreement.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication requirements
- Regular security assessments and penetration testing
- Employee training on data protection practices
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your Rights
10.1 All Users
- Opt out of marketing: Unsubscribe from marketing emails at any time via the link in any email or by contacting us at privacy@goautonomi.com
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
10.2 EU Users (GDPR Rights)
If you are located in the European Union, including Germany or Poland, you have the following rights under GDPR:
- Right of access (Art. 15) — Obtain confirmation of whether we process your data and receive a copy
- Right to rectification (Art. 16) — Request correction of inaccurate data
- Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten")
- Right to restriction (Art. 18) — Request restriction of processing in certain circumstances
- Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format
- Right to object (Art. 21) — Object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at gdpr@goautonomi.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
- Germany: Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI)
- Poland: Urząd Ochrony Danych Osobowych (UODO)
10.3 California Users (CCPA)
California residents have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by us
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising privacy rights
To submit a CCPA request, contact: privacy@goautonomi.com
11. International Data Transfers
AUTONOMi operates in the United States, European Union (Germany and Poland), and may process data across these jurisdictions. For transfers of personal data from the EU to the United States, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all relevant service providers
By using our services, EU-based users acknowledge that their data may be transferred to and processed in the United States.
12. Children's Privacy
Our platform and services are intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately.
13. SMS Communications
Full SMS opt-in policy. The complete, standalone SMS Opt-In Policy — including the verbatim consent disclosure, sample messages, full STOP/HELP keyword list, and our toll-free number — is published at goautonomi.com/sms-opt-in. The summary in this section is governed by that policy; if the two ever conflict, the standalone policy controls.
What messages we send. If you provide your mobile phone number and explicitly consent to SMS during sign-up, AUTONOMi may send you SMS messages in three categories: (a) account notifications (confirmations, integration alerts, monthly performance summaries); (b) operational alerts (campaign pause notifications, budget thresholds, video render completions, OEM offer expirations); and (c) customer support responses (replies to questions you send to our toll-free number, generated by AEGIS, our AI agent).
How you opt in. You opt in by checking the SMS consent checkbox on our sign-up form at goautonomi.com/sign-up and providing your mobile phone number. After submission, we send a one-time confirmation SMS asking you to reply YES to activate. You are only fully opted in after replying YES (double opt-in).
Frequency and rates. You will receive approximately 5 messages per month from us, plus replies to any questions you send to our number. Message and data rates may apply per your carrier plan.
How to opt out. Reply STOP to any message from us at any time to immediately unsubscribe. You will receive a confirmation that you have been removed and will not receive further messages unless you opt back in. For help, reply HELP to any of our messages or email support@autonomitech.com.
Third-party sharing. We do not share your phone number with third parties for marketing purposes. Your phone number is used only to deliver the SMS messages described above. We may use a third-party SMS delivery provider (Twilio) to transmit messages, but they act as a processor on our behalf and do not use your number for their own marketing.
Data retention. We retain SMS conversation history (inbound + outbound messages, opt-in/opt-out timestamps, and consent audit trail) as required by TCPA recordkeeping rules and for the duration of your account relationship with AUTONOMi. You may request deletion at any time per the data rights section above.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. For significant changes, we will provide additional notice via email to registered users.
16. Contact Us
For questions, concerns, or requests regarding this Privacy Policy:
AUTONOMi Privacy Team
Email: privacy@goautonomi.com
Website: goautonomi.com
For EU/GDPR inquiries:
Email: gdpr@goautonomi.com