Privacy Policy

Last updated October 13, 2026

Draft — pending review

This policy has been drafted from how the site actually works but has not yet been reviewed or approved by the dealership. Please treat it as informational until that review is complete.

This policy explains what stewartcdjr.app collects when you browse inventory, ask for a payment estimate, submit a trade-in appraisal, sign up for a price-drop alert, or use the AI shopping assistant, and what we do with it. The site is operated by Stewart Chrysler Dodge Jeep Ram (“Stewart,” “we,” “us”). It covers this website only. If you visit the dealership in person, call us, apply for credit, or sign paperwork, additional disclosures apply at that time.

Information you give us

We only collect contact details when you choose to submit a form. Browsing inventory does not require an account and does not ask for your identity.

  • Vehicle and finance inquiries: your name, phone number, optional email address, any message you write, and the vehicles you were looking at.
  • Trade-in appraisals: the above, plus your vehicle's VIN, mileage, any notes you add (for example, condition or payoff details), and the photos you upload (4 to 12 images). Photos can show things like your license plate or the inside of your car.
  • AI assistant: the messages you type are sent to our AI provider to generate a reply (see “Who we share it with”). If you ask a specialist to follow up from inside the assistant, we store the name and contact details you enter together with your most recent messages in the conversation (up to the last 8 messages, about 900 characters) and the vehicles the assistant showed you, so the salesperson knows what you asked about.
  • Price-drop alerts: if you ask us to text you when a car's price drops, your mobile number, optional first name, and the car you are watching.

Information collected automatically

  • Web analytics: pages viewed and actions taken (for example, opening a price breakdown or starting a financing form), plus device and browser type and an approximate location (city or region) that the analytics provider derives from your IP address. We use Google Analytics 4 and Vercel Analytics for this. Google Analytics sets its own cookies to recognize a returning browser.
  • Marketing attribution: if you arrive from an ad, a search result, or a shared link, we store the campaign details in your own browser for up to 90 days so we know which channels are working. This stays on your device until you submit a form, at which point it is attached to your inquiry.
  • Cars you viewed: we keep a list of the last 10 cars you opened, in your own browser, for up to 30 days. It stays on your device until you submit a form, at which point it is attached to your inquiry so the salesperson knows what you were looking at.
  • Links we send you: if you open a link we texted or emailed to you (for example, a picture of a car with your name on it), we place a cookie that remembers that link for up to 90 days. While it is there, the car pages you open on this site are recorded with that link so your salesperson can follow up about the cars you are actually looking at. Clearing your browser's site data removes it.
  • Your preferred language, inferred from the version of the site you are reading, so we can follow up in that language.
  • When you submit a form, the time of submission, your IP address, your browser's user agent, and which version of the contact-consent notice you were shown, kept as a record of that consent.
  • Security and abuse prevention: your IP address is used to limit how many forms and chat messages can be sent in a short period. For the AI assistant we keep only a one-way scrambled (hashed) version of it for daily usage limits.

Categories of personal information we collect

California law groups personal information into categories. In the past 12 months this website has collected the following:

  • Identifiers: name, phone number, email address, IP address, and online identifiers such as analytics cookie IDs.
  • Customer records (Cal. Civ. Code § 1798.80(e)): name and phone number.
  • Commercial information: the vehicles you viewed, saved, or asked about; the trade-in vehicle you described (VIN, mileage, notes); and the price, payment, or appraisal estimates you requested.
  • Internet or other electronic network activity: pages viewed and actions taken on the site, the link or campaign that brought you here, your browser's user agent, and messages you send to the AI assistant.
  • Geolocation data: only an approximate location (city or region) derived from your IP address. We do not collect precise location from your device.
  • Audio, electronic, or visual information: the photos you upload with a trade-in appraisal.
  • Inferences: your preferred language, and which vehicles you seem interested in based on the pages you view. We do not use this to build profiles for advertising.

Sensitive personal information: this website does not collect it. We do not ask for your Social Security number, driver's license number, date of birth, or bank or card account numbers here. Credit applications are completed on the dealership's main website, stewartchryslerdodgejeepram.com, and are governed by that site's own privacy disclosures. Please do not type sensitive details into the AI assistant or a message field.

Where it comes from

  • Directly from you, when you fill in a form or type into the AI assistant.
  • Automatically from your browser or device, when you use the site.
  • From our analytics providers (Google Analytics and Vercel Analytics), which report how the site is used.

How we use it

  • To respond to your inquiry and help you find a vehicle.
  • To prepare price and payment estimates you have asked for.
  • To appraise a vehicle you want to trade or sell.
  • To follow up with you by phone, text, or email about your inquiry and related offers, as described in “How we contact you.”
  • To text you when the price of a car you are watching drops, if you asked us to. A salesperson sends that text personally. Alerts stop after three price drops, after 90 days, or when the car sells, and you can ask us to stop at any time.
  • To understand which pages and marketing channels are working, and to improve the site.
  • To keep the site secure, prevent spam and abuse, and fix errors.
  • To keep a record of the consent you gave and of any request to stop contacting you.
  • To meet legal and record-keeping obligations that apply to licensed California dealers.

We use and keep personal information only for these business purposes, or for purposes compatible with the context in which you gave it to us.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We use the service providers below to operate the site. Each receives only what it needs to perform its service for us:

  • Supabase — database and file storage: inquiries, trade-in appraisals and their photos, price-drop alert sign-ups, consent records, and AI usage counters.
  • Vercel — website hosting, page analytics (Vercel Analytics), and short-lived rate-limiting counters keyed to IP address.
  • Google — Google Analytics 4 website usage measurement. It runs with Google signals and ad personalization turned off, so it is not used for advertising.
  • Telegram — internal staff notifications. Every inquiry, trade-in appraisal, and price-drop alert sign-up submitted on this site is sent to the dealership's Telegram account, including your name, phone number, email address, message (for AI assistant follow-ups, your recent messages), and the vehicles involved, so a salesperson can respond quickly.
  • Resend — email delivery: sends each inquiry to the dealership as an email notification.
  • Anthropic — AI provider for the shopping assistant. Messages you type into the assistant, and the inventory results shown alongside them, are transmitted to Anthropic to generate replies and are subject to its retention under its commercial terms. Please do not enter Social Security numbers, financial account numbers, or other sensitive details into the assistant.
  • Telnyx — text-message carrier for the dealership's business texting number. Texts you send to or receive from that number, including STOP requests, pass through Telnyx.
  • VinSolutions — the dealership's customer-relationship-management (CRM) system. This website does not send your inquiry to it automatically, but dealership staff may record your inquiry there and use it to follow up with you.
  • Stewart Chrysler Dodge Jeep Ram and its staff, who follow up with you directly.

We may also disclose information when required by law, to respond to legal process, to protect the rights and safety of our customers, staff, or the public, or as part of a sale or reorganization of the dealership's business.

How we contact you

If you give us your phone number, a member of the dealership may call or text you about your inquiry and related offers, and may use automated dialing or prerecorded messages to do so. Consent to those messages is not a condition of buying anything. Message and data rates may apply, and you can reply STOP at any time to stop text messages. If you give us an email address, we may email you for the same purposes; every marketing email includes an unsubscribe link.

How long we keep it

We keep personal information only as long as it is reasonably needed for the purpose it was collected for, and as required by law. In practice:

  • Inquiries and trade-in appraisals, including uploaded photos and any AI assistant messages attached to them: kept while we are working with you and the sales relationship is active, and afterward for as long as we need them as business records and as required by the record-keeping laws that apply to California dealers. When they are no longer needed, we delete or de-identify them.
  • Consent records and requests to stop contacting you: kept for as long as we may contact you and as long as needed to prove consent or honor your opt-out.
  • Price-drop alert sign-ups: active for up to 90 days, or until the car sells or you ask us to stop; the sign-up record is then kept as a business record on the same basis as an inquiry.
  • AI assistant conversations: this website does not store them unless you send the follow-up form from inside the assistant, in which case the messages described above are kept with your inquiry. Messages are also subject to our AI provider's retention.
  • Rate-limiting counters: minutes to one day. AI usage counters store only a hashed IP address and are kept for usage and cost tracking.
  • Analytics data: kept according to the data-retention settings of our Google Analytics and Vercel accounts.
  • Marketing attribution stored in your browser: 90 days, after which it expires on its own. Clearing your browser's site data removes it immediately.
  • Cars-you-viewed list stored in your browser: 30 days, after which each entry expires on its own.
  • Cars you viewed after opening a link we sent you: 90 days, after which the records are deleted automatically.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights:

  • Right to know: to ask what personal information we have collected about you, the categories of sources, the purposes, the categories of service providers we disclosed it to, and the specific pieces of information we hold.
  • Right to delete: to ask us to delete personal information we collected from you, subject to exceptions the law allows (for example, records we must keep).
  • Right to correct: to ask us to correct inaccurate personal information.
  • Right to opt out of sale or sharing: we do not sell or share personal information, but you may still opt out, and we honor Global Privacy Control (see below).
  • Right to limit use of sensitive personal information: this website does not collect sensitive personal information, and we do not use any for purposes that would require offering this right.
  • Right to non-discrimination: we will not deny you service, charge you a different price, or give you a lower quality of service because you exercised any of these rights.

How to make a request

You can make a request in either of these ways:

  • Call the dealership at the phone number listed under “Contact us” below and ask for a privacy request.
  • Write to us at the mailing address listed under “Contact us,” marked “Attn: Privacy Request.” Include your name, the phone number or email address you used on this site, and what you are asking for.

Verification: to protect you, we verify a request before acting on it by matching the details you give us with the information we hold — usually your name plus the phone number or email address you submitted on the site — and we may contact you at that phone number or email address to confirm. A request for the specific pieces of information we hold requires a closer match than a request for categories. We use the information you provide for verification only for that purpose.

Authorized agents: someone you authorize may make a request for you. We will ask the agent for your signed written permission, and we may ask you to verify your identity directly with us, unless the agent holds a power of attorney under California Probate Code sections 4121 to 4130.

Timing: we will confirm that we received your request within 10 business days and respond within 45 calendar days. If we need more time (up to another 45 days), we will tell you why. Requests to opt out are processed as soon as feasible and within 15 business days.

Do Not Sell or Share My Personal Information

We have not sold or shared personal information in the past 12 months, and we do not sell or share it now. We do not knowingly sell or share the personal information of anyone under 16. Google Analytics runs on this site with Google signals and ad personalization turned off, so the usage data it receives is not used for cross-context behavioral advertising.

This site honors the Global Privacy Control (GPC). If your browser or a browser extension sends a GPC signal, we automatically turn off Google Analytics and Vercel Analytics for your visit — you do not need to click anything, and no banner will interrupt you. Several browsers support GPC directly and others support it through a free extension.

You can also opt out by contacting us with the details below, and we will process the request manually.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is no common standard for how websites should respond to it, this site does not change its behavior when it receives a Do Not Track signal. We do honor Global Privacy Control, as described above, which turns off analytics for your visit.

Security

We use reasonable safeguards for the information we hold, including encrypted connections (HTTPS), access controls on our database and file storage, and limiting access to dealership staff and the service providers listed above. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

This site is intended for adults shopping for a vehicle and is not directed to children. We do not knowingly collect personal information from children under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change what we collect, how we use it, or who we share it with, we will update this page and change the “last updated” date at the top. If a change is material, we will also post a notice on the site before it takes effect. Changes apply to information collected after the updated policy is posted.

Language and accessibility

This policy is published in English. If you would like it explained, contact us: Silvio can go through it with you in English or Spanish, and a coworker can help in Tagalog. The website is also available in Chinese. If you have a disability and need this policy in another format, call us and we will provide it in a format that works for you. In the event of any inconsistency, the English version governs.

Contact us

Stewart Chrysler Dodge Jeep Ram
800 Serramonte Blvd, Colma, CA 94014
+1-415-500-0862