Privacy Policy

Veltrix Automation operates DealerPulse SA. Contact uwais@voltrixautomation.com for privacy requests. The contracting dealership is normally the responsible party for customer records; DealerPulse acts as its operator under agreed instructions.

DealerPulse processes dealership user identity and access details; branch and stock records; customer and lead contact details; trade-in inputs; deal, task, delivery and audit history; documents and vehicle images; public enquiry submissions; and limited security and operational telemetry.

Records are processed to authenticate users, isolate dealership tenants, operate the requested dealership workflows, publish selected vehicle listings, respond to enquiries, secure and monitor the service, provide support, meet contractual duties and comply with law. Each dealership must establish its own lawful basis and customer notices.

A buyer who submits an enquiry or trade-in request provides details to the identified dealership so its authorised staff can respond. DealerPulse does not sell those details. Public forms are validated and rate limited, but users should not submit unnecessary sensitive information.

Supabase provides authentication, PostgreSQL database and storage services; Vercel is the intended application host. Sentry and email delivery are optional and must be separately configured and verified before use. Current subprocessors and data locations must be confirmed in the customer data-processing agreement before production.

DealerPulse uses authenticated sessions, role checks, row-level tenant isolation, private storage with signed access, validated uploads, audit trails, redacted logs, secure environment separation and dependency scanning. No service is risk-free; suspected incidents follow the documented response process.

Retention must follow the dealership agreement, legal duties and the documented retention schedule. Authorised dealership users may request correction, export or closure through support. Automatic production deletion is not represented as active until backup and restore operations have been drilled in hosted infrastructure.

Subject to POPIA and applicable exceptions, an individual may request access, correction or deletion, object to processing, or complain to the Information Regulator. We coordinate requests concerning dealership-controlled data with that dealership.

Hosting and support locations must be disclosed in the signed data-processing terms. We will notify contracting dealerships of material policy changes through agreed account or email channels.