Our Privacy Policy

About Foundation Data

Foundation Data, LLC ("Foundation Data," "we," "our," or "us") provides business intelligence, analytics, and AI-driven solutions that help automotive dealerships, dealer groups, manufacturers, and related industry partners understand and improve their digital performance. Our products and services include website analytics tagging, benchmarking, reporting dashboards, and AI-enabled insights (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our websites, platforms, mobile applications, and related services (together, the "Sites"). It also describes your rights and choices regarding your personal information. This Policy applies to personal information collected by Foundation Data on its own behalf. When we process information on behalf of a client (for example, a dealership or partner organization), that client's privacy policy governs how your information is used.

Our Commitment to Privacy

We believe privacy and trust are fundamental to the relationships we have with our clients and their customers. We apply strict safeguards to protect personal information, comply with applicable privacy laws in the United States and Canada, and use data responsibly to power insights that benefit our clients without compromising consumer privacy.

Information We Collect

We collect the following categories of information:

1. Information You Provide Directly

• Name, business title, email address, phone number, and mailing address.
• Dealership or company affiliation and related account information.
• Communications, inquiries, or feedback submitted through our Sites or customer support channels.

2. Information Collected Automatically

When you visit our Sites or use our Services, we may automatically collect:

• IP address, browser type, operating system, and device identifiers. Pages visited, date/time stamps, and interaction data.
• Website analytics event data (e.g., clicks, form submissions, or video views).
• Log data used for system monitoring, debugging, and product improvement.

We may use cookies, pixels, tags, and similar technologies to personalize your experience and measure engagement. You can manage or disable cookies through your browser settings; however, some features may not function properly if you do so.

3. Information from Clients and Partners

We may receive data from clients, their vendors, or authorized partners (e.g., website providers, CRM systems, or ad platforms). Such data may include aggregated website analytics, campaign metrics, or dealership performance data. When this information is provided by clients, it is governed by their own privacy policies.

How We Use Information

We use personal information to:

• Deliver and maintain our Services.
• Provide insights, benchmarking, and performance reporting.
• Communicate with you about your account, updates, or support inquiries.
• Improve our data models and Service features using aggregated and anonymized data.
• Comply with legal obligations and enforce our Terms of Use.

Foundation Data does not use any customer or dealer data to train AI models. All AI features, including Scout, operate exclusively on client-authorized data within the Foundation Data environment and are not used to train public or external models.

How We Share Information

We may share information as follows:

• With Clients and Partners: To deliver contracted Services and benchmarking insights.
• With Service Providers: Vendors supporting analytics, hosting, security, email delivery, or payment processing all of whom are bound by confidentiality and data protection obligations.
• In Corporate Transactions: In connection with mergers, acquisitions, reorganizations, or asset sales.
• For Legal Reasons: To comply with law, enforce our rights, or respond to lawful requests by authorities.

We do not sell personal information, and we do not share data with third parties for their independent marketing purposes.

Cookies and Similar Technologies

We use cookies, pixels, and similar technologies for functionality, analytics, and security. Some are essential for site operation, while others help us improve the user experience or measure campaign effectiveness. You can control cookie preferences through your browser settings or by using third-party ad control tools.

Data Security

We implement industry-standard administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, or disclosure. Despite these efforts, no system is completely secure. In the event of a data breach, we will notify affected individuals as required by applicable law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, or enforce our agreements. Aggregated and anonymized data may be retained indefinitely.

Jurisdiction and Data Transfer

Foundation Data operates in the United States and Canada. All information we collect is processed and stored in these countries. By using our Sites or Services, you consent to the transfer and processing of your information in the United States and Canada, which may have privacy laws different from those in your jurisdiction.

Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information.
• Request that we limit or stop certain uses of your information.
• Opt out of marketing communications by following the "unsubscribe" link in emails or contacting us directly.
• Exercise rights under the California Consumer Privacy Act (CCPA/CPRA) or similar state privacy laws.

To exercise your privacy rights or submit a request, email us at Legal@foundationdata.com. We may verify your identity before responding.

Changes to This Policy

We may update this Privacy Policy periodically. The "Effective Date" above indicates the most recent revision. Any material changes will be communicated through our Sites or via email where legally required.