Privacy Policy

Last updated: May 14, 2026 · Effective as of the application's release

This Privacy Policy describes how information is collected, used, stored, and protected in CloserDesk, a CRM platform for automotive dealerships, available as a web application and as a mobile application for iOS and Android. By using CloserDesk, you agree to the practices described in this document.

1. Data Controller

The party responsible for the processing of personal data collected through CloserDesk is Wiliam Duran Feliu, operating under the trade name "CloserDesk," based in the state of Florida, United States.

For any privacy-related inquiries or questions about this policy, you can contact us at support@closerdesk.io.

2. Who This Policy Applies To

CloserDesk is a professional (B2B) tool. We distinguish two groups of people whose data is processed on the platform:

Platform users — dealership staff (salespeople, managers, administrators) who log in and use CloserDesk for their work.
Dealership contacts — each dealership's end customers and prospects, whose information is entered and managed by dealership staff within the platform.

With respect to end-customer data, each dealership acts as the data controller of its own customers' data, and CloserDesk acts as the data processor (service provider) on its behalf.

3. Information We Collect

3.1 Platform User Data

Full name, email address, and phone number.
Password (stored hashed; never in plain text).
Profile photo, if the user chooses to upload one.
Phone number for two-factor authentication (2FA), if the user enables it.
Technical session data: session token, IP address, and device type, for security and session-maintenance purposes.
Account preferences (language, time zone, visual theme).

3.2 Dealership Contact Data

Dealership staff enter and manage information about their customers and prospects within the platform. This information may include:

Contact details: name, phone, email, address.
Information about vehicles of interest and trade-in vehicles.
Information about deals, quotes, and financing.
Credit applications, which may include sensitive data such as the Social Security Number (SSN) of the applicant and co-applicant.
Communications (SMS messages, emails, notes, and, where applicable, call recordings) managed through the platform.

3.3 Mobile Device Permissions

The mobile application requests the following permissions, always with your explicit consent and only when needed for a specific feature:

Camera — to scan VIN numbers and capture photos of vehicles.
Photos / gallery — to attach images to contacts, deals, or the profile photo.
Microphone — to record voice notes in customer conversations, when used by the user.

The application does not access these resources in the background or without an explicit user action.

4. Sensitive Data

CloserDesk processes Social Security Numbers (SSNs) when dealership staff enter them as part of a credit application. This data:

Is stored encrypted using AES-256-GCM encryption.
Is not displayed in full on general-use screens; where possible, only the last four digits are shown for identification.
Is only accessible to authorized users of the corresponding dealership.

5. How We Use Information

To provide and operate the platform's features (contact management, sales pipeline, quotes, messaging, inventory, appraisals, etc.).
To authenticate users and maintain account security.
To send service-related notifications and, if the user enables it, two-factor authentication codes.
To provide technical support and resolve issues.
To maintain, debug, and improve how the platform works.

We do not sell personal data. We do not use dealership contact data for our own marketing purposes, nor do we share it with third parties beyond what is described in this policy.

6. Multi-Tenant Architecture

CloserDesk is a multi-tenant platform: each dealership operates in a logically separated space. One dealership's data is not accessible to users of another dealership.

7. Providers and Infrastructure

To operate the service, we rely on the following providers, which act as sub-processors:

Provider	Function
Hostinger	Server and database hosting.
Twilio	Sending SMS (two-factor authentication, notifications) and telephony, when the dealership enables this integration.
Resend	Sending emails, when this feature is enabled.
Marketcheck	Automotive market data for the appraisals module, when the dealership enables this integration.

The Twilio, Resend, and Marketcheck integrations are optional and are enabled by each dealership using its own credentials. The mobile application itself does not include third-party analytics services or advertising trackers; it communicates only with CloserDesk's servers.

8. Data Retention

We retain data while the dealership's account is active and for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When a dealership stops using the service, its data may be deleted or anonymized after a reasonable period, unless the law requires us to keep it longer.

9. Security

Passwords are stored hashed; sensitive data such as SSNs is stored encrypted with AES-256-GCM.
Access to the platform takes place over HTTPS connections.
Integration credentials are stored encrypted.
Two-factor authentication (2FA) via SMS is available to strengthen account security.

No system is completely infallible, but we apply reasonable technical and organizational measures to protect information.

10. Your Rights

Depending on the jurisdiction that applies to you, you may have the right to:

Access the personal data we hold about you.
Request the correction of inaccurate data.
Request the deletion of your data.
Object to or restrict certain processing.

If you are a platform user, you can exercise several of these rights directly from your account settings, or by writing to us at support@closerdesk.io.

If you are an end contact of a dealership and wish to access, correct, or delete your data, we recommend contacting the dealership you have a relationship with directly, as it is the party that controls that data. You may also write to us and we will help route the request.

11. Children's Privacy

CloserDesk is a professional tool and is not directed at minors. We do not knowingly collect data from individuals under 18 years of age as platform users.

12. International Transfers

Data is processed and stored on our providers' infrastructure, which may be located in the United States or other jurisdictions. By using the service, you understand that your data may be transferred to and processed outside your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top. If the changes are significant, we will notify you through reasonable means. Continued use of the service after changes are published constitutes acceptance of the revised policy.

14. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your data, you can write to us at:

Email: support@closerdesk.io