← Back to legal

Privacy Policy

Effective: 2026-07-21 · Version 2026-07-21

This Privacy Policy describes what data TrailerShopperAI ("TSAI," "we," "us") collects, why, who we share it with, and the rights you have over it. This Policy applies to dealers who hold accounts with us and — as described in Sections 1 and 6 — to members of the public whose data reaches us through a dealer's connected accounts or website features, and is incorporated by reference into our Terms of Service.

1. Who is responsible for your data

TSAI acts as a data controller for account information you provide directly to us, and as a data processor for inventory data, photographs, voice samples, and other content you upload for us to process on your behalf. Where a trailer buyer messages, comments on, or submits a lead to one of your connected accounts or to a TSAI feature embedded on your website, you are the controller of that buyer's personal data and we act as your processor; the social platform the message originated on is a separate controller for its own processing.

2. Data we collect

From you, directly

Automatically, when you use the Service

From third parties

3. How we use your data

4. Lawful basis (where applicable)

For dealers and end users in jurisdictions with formal lawful-basis requirements (e.g., GDPR), we process personal data on the following bases: (a) contract — to provide the Service you signed up for; (b) legitimate interests — to operate, secure, and improve the Service, including audit logging and fraud prevention; (c) legal obligation — to comply with tax, accounting, and regulatory requirements; (d) consent — for optional features such as voice cloning, where consent can be withdrawn by removing the cloned voice from your dashboard.

5. Third-party processors and recipients

We share your data with the following processors strictly to the extent needed for each function:

Each processor receives only the data its function requires, is bound by a written agreement to process it solely on our instructions, and is not permitted to use it for its own purposes. On request we will identify the specific processors to whom your personal data has been disclosed.

We do not sell your personal data, and we do not share it with advertising networks. We may disclose data in response to a subpoena, court order, or other valid legal process; in connection with a payment dispute via the audit-log mechanism described in our No-Refund Policy; or in connection with a merger, acquisition, financing, or sale of assets, with notice to affected dealers.

6. Meta Platform data (Facebook, Instagram, WhatsApp, Threads, Marketplace)

When you connect a Facebook Page, an Instagram professional account, a WhatsApp Business number, a Threads profile, or a product/vehicle catalog to TSAI, you authorize us — through Meta's official Graph, Instagram, WhatsApp Business, Threads, and Commerce/Catalog APIs — to access and process the following on your behalf. In this role TSAI is a Meta Technology Provider: we act for you, the connected business, and you remain responsible for your Meta assets and for the people who interact with them.

Two groups of people are covered by this section: (a) you, the dealer who connects the assets, and (b) the trailer buyers and other members of the public who comment on, message, or otherwise interact with your connected accounts — whose data flows through TSAI solely so that we can surface it to you and act on your behalf.

We use Meta-sourced data only to operate the features you enable — publishing, comment / DM / WhatsApp management and AI-assisted replies, catalog and Marketplace listings, and analytics. We do not use it to advertise to third parties, we do not sell it, and we do not use it to train or fine-tune AI models or to build advertising or interest profiles. Meta Platforms, Inc. is both a source of this data and a subprocessor; message content routed through our AI features may also be processed by the AI subprocessors listed in Section 5 for the sole purpose of drafting the reply you requested.

You can disconnect any Meta asset at any time from Settings → Connections, which destroys the credentials we hold for it and stops all further access by TSAI. You can additionally revoke the app's permissions from your Facebook settings. To request deletion of Meta-sourced data we hold, disconnect the asset and email …, or use the mechanism described at trailershopper.ai/legal/data-deletion. Removing the TSAI app from your Facebook settings also sends us an automated data-deletion request, which we log and action. If you are a member of the public who messaged or commented on a dealer's connected account and you want the data we hold about you deleted, email … — you do not need a TSAI account, and we will action your request without routing you through the dealer.

7. International data transfers

We are a US-based service. If you access the Service from outside the United States, your data may be transferred to and processed in the United States and other countries where our processors operate. By using the Service you consent to those transfers. Where required by law (e.g., GDPR), we rely on standard contractual clauses or other approved transfer mechanisms.

8. Data retention

9. Your rights

Depending on your jurisdiction, you may have the right to:

To exercise these rights, email …. We will respond within 30 days. We may require identity verification before fulfilling sensitive requests.

10. California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, how it's used, and with whom it's shared, the right to request deletion, the right to correct inaccuracies, and the right to opt out of any sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising— the specific meaning "share" carries under the CPRA. We disclose personal information to the service providers listed above, bound by written contract, solely to perform the Service on our behalf. We also do not sell or share the personal information of consumers under 16. To exercise CCPA rights, email ….

11. Cookies and tracking

We use first-party session cookies set on our API domain for authentication and session management. We do not deploy third-party advertising cookies, behavioral retargeting, or cross-site tracking on the dealer panel, and we do not sell or share personal information for cross-context behavioral advertising — so there is no opt-out for us to apply to a browser privacy signal.

12. Security

Data in transit is encrypted via TLS 1.2+, and data at rest is encrypted by our infrastructure providers. Account passwords are stored only as salted hashes, and the access credentials we hold for your connected social accounts are encrypted at rest.

Generated videos, voiceovers, and photos are held in non-public storage that cannot be listed or browsed by outside parties, and are reachable only through our own service layer. Media links are long, randomly generated, and shared only with you and the services you have authorized to publish on your behalf; anyone who obtains such a link can currently retrieve that file, so treat media links as confidential. We are rolling out expiring media links to narrow this further.

We follow least-privilege internal access controls, record administrative actions to a separate append-only admin audit log, and run an automated review of our integrations and data-handling controls on a recurring schedule. No system is perfectly secure; in the event of a breach affecting your data, we will notify you as required by applicable law.

13. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy. Material changes require re-acceptance from existing dealers and trigger a version bump above. Prior versions remain on file in our audit log so you can confirm what you originally agreed to.

Privacy questions: …. Security incidents: ….