Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains how FlashFender Technologies Inc. (“FlashFender”, “we”, “us”) collects, uses and protects personal information when you use flashfender.com (the “Site”) and the FlashFender dealership management service (the “Service” or “app”).

We are a Canadian product built for Canadian dealerships. Where the law distinguishes between an organization and a dealership, this policy is written so the dealership — not FlashFender — is the controller of dealership records.

The short version

Your dealership data belongs to your dealership. We don’t sell it, mine it for ads, or share it with anyone to market to your customers.
We collect the minimum we need to run the Site and the Service.
We apply PIPEDA-style principles platform-wide: consent, purpose, access, accuracy and safeguards.
US-only regimes (like NHTSA) are not part of our Canadian product.

Information we collect

From the Site

Basic technical data needed to serve pages and diagnose issues (e.g. IP address, browser type, pages visited, timestamps). Analytics is disabled on this marketing site.
Anything you submit through contact channels (name, email, message).

From the Service

Account information you provide when creating a dealership: business name, address, dealer licence details, contact information, and tax settings (e.g. HST) where you print Bills of Sale.
Dealership data you enter or import: inventory, customers, leads, deals and compliance records. This is your data, processed to run the Service for you.
Consent records for email marketing under CASL, including when consent was given and for what purpose.

How we use information

To operate the Service, including the draft-first Flash AI copilot, which never sends anything without your review.
To respond to support and security requests.
To meet legal obligations that apply to us as a service provider.

We do not use dealership data to advertise to your customers. Flash AI outputs are drafts you review before anything sends.

We share data only with:

Service providers who process data on our behalf (hosting, email delivery, vehicle history). The current sub-processor list is published on our Trust page.
Law or regulators, when legally required.
You, via export. Full dealership data export, webhooks and an open API shipped in Tier 1 — portability is a feature, not a request form.

Retention and deletion

Records live for as long as your dealership needs them — nothing is quietly purged. You can delete data explicitly, and export comes first. Ten-year retention exports and a compliance document pack shipped in Tier 1.

Security

Data is encrypted at rest (AES-256) and in transit (TLS 1.2+), scoped per dealership, and audited. We describe our controls as “SOC 2-aligned” until the certification work is complete — see the Security page and the Trust page for the honest details.

Your rights

You can request access to, correction of, or deletion of your personal information by emailing hello@flashfender.com. We respond within a reasonable time and without charge for reasonable requests.

Contact

Questions about this policy or privacy in general: hello@flashfender.com. Security disclosures: security@flashfender.com.

This page is provided for transparency and is not legal advice. Consult your own counsel for obligations specific to your dealership.