Privacy Policy

This policy covers visitors to utahdealers.ai, users of our search and AI assistant, and dealership representatives who claim or manage a profile. The dealerships we list are businesses, not consumers; most of what we publish is business information, not personal information.

• Business & public records. Dealership names, addresses, locations, contact details, license and registration data, and similar facts from official government sources and public records.
• Aggregate ratings (via official APIs). Aggregate star ratings and review counts obtained through licensed application programming interfaces (for example, the Google Places API). We store the source’s aggregate figures and a reference identifier — we strip and do not store individual reviewer names, profiles, or contact details.
• Dealer-submitted information. If a dealership claims a profile, we collect ownership and licensing documentation (such as a state dealer license, business registration, or tax identification number) for the limited purpose of identity and license verification, plus the contact and billing details of the submitting representative.
• Account information. Email address and authentication data for registered users and dealer accounts.
• Usage information. Device, browser, pages viewed, and similar analytics, and the queries you submit to our AI assistant. We use this to operate, secure, and improve the service.

We do not knowingly collect special categories of sensitive personal data, and we do not seek information about children (see Section 11).

• To build, maintain, and publish the dealer registry and the 7-Star Dealer Trust Score.
• To verify dealership identity and active licensing for claimed (“Verified”) profiles.
• To operate the AI assistant, search, and other features.
• To detect and prevent fraud, manipulation, and abuse, and to maintain security.
• To communicate with you and provide customer and dealer support.
• To comply with legal obligations and enforce our Terms.

Where required, we rely on our legitimate interests in maintaining an accurate, public-interest registry of business reputation and licensing; performance of a contract for claimed dealer accounts; consent for optional marketing; and compliance with legal obligations.

We use artificial intelligence to read source records and score individual qualitative signals (for example, sentiment in public reviews). The published Trust Score itself is produced by a transparent, deterministic formula — not by an opaque model — and is subject to human review and override. A dealership may contest its score and the underlying data; see our methodology and the correction process in our Terms.

We do not sell personal information. We share information only with:

• Service providers that operate the platform under contract — including hosting and database (Supabase, Vercel), payments (Stripe), AI processing (Anthropic), mapping/ratings data (Google), email (Resend), and analytics and error monitoring (e.g., PostHog, Sentry).
• Authorities or others where required by law, or to protect rights, safety, and security.
• A successor in connection with a merger, acquisition, or asset transfer, subject to this policy.

Any future market-data products will use only aggregated and anonymizedinformation and will never identify an individual reviewer.

We acquire data through official APIs, licensed data providers, public government records, and first-party submissions. We do not scrape access-controlled or terms-restricted platforms, defeat technical controls, or republish third-party review text in violation of a provider’s terms. Third-party ratings are displayed separately and attributed to their source — never blended into a single re-published number.

We use strictly necessary cookies to run the site and limited analytics cookies to understand and improve usage. You can control cookies through your browser settings.

We retain business and registry data for as long as a dealership is part of the registry. Cached third-party review text, where retained at all, is kept for no more than 12 months; aggregate, non-identifying figures may be retained longer. Verification documents are retained for the life of the claimed account and a reasonable period afterward to evidence the verification. Security and integrity logs are retained as needed for those purposes.

We protect information using encryption in transit and at rest, row-level access controls, least-privilege service credentials, and an append-only, tamper-evident audit log of score-related changes. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

Depending on where you live, you may have the right to access, correct, delete, or port your information, and to opt out of certain processing:

• Utah residents (UCPA): rights to access and delete personal data and to opt out of its “sale” and of targeted advertising. We do not sell personal data or use it for targeted advertising.
• California residents (CCPA/CPRA): rights to know, delete, and correct, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined.
• EEA/UK (if applicable): rights of access, rectification, erasure, restriction, portability, and objection.

To exercise any right, contact hello@gridtheory.com. We will verify your request and respond within the time required by law.

If you operate a listed dealership, you may claim your profile, correct factual information, and dispute your Trust Score or its inputs. Verification confirms your identity and active license; it does not change your score.

The service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 13.

We may update this policy and will revise the “last updated” date above. Questions or requests: hello@gridtheory.com.