Privacy Policy - Autopilot Legal

Autopilot provides dealership workflow, customer management, reporting, communication, operational, and related software services for dealerships and related businesses.

This Privacy Policy explains how Autopilot collects, uses, shares, stores, and protects information when people use Autopilot websites, applications, services, support channels, and related communications.

This policy is written for Autopilot customers, users, dealership staff, partners, and people whose information may be entered into Autopilot by a customer or user.

Last updated: 23 June 2026

Information we collect

The information Autopilot collects depends on how a customer uses the service, which features are enabled, and what information users choose to enter.

Account information

We may collect account and user information such as:

names;
email addresses;
job titles;
dealership, group, or business information;
account credentials;
authentication information;
role, permission, and access-control information; and
information provided during onboarding, administration, or support.

Customer and dealership information

Customers and users may enter customer information, dealership information, and operational records into Autopilot. This may include:

customer contact information;
lead information;
vehicle information;
sales activity;
workflow information;
notes;
reporting information;
communications;
documents, attachments, or records; and
other information entered, uploaded, imported, generated, or managed through Autopilot.

The exact information processed depends on the customer's configuration, enabled features, dealership processes, and user activity.

Usage and technical information

When people use Autopilot websites or services, we and our providers may collect technical and usage information such as:

IP addresses;
browser information;
device information;
operating system information;
diagnostic information;
log information;
pages, features, and actions used within the service;
approximate location derived from technical information; and
information needed to operate, secure, troubleshoot, and improve the service.

Billing and subscription information

We may collect billing and subscription information such as:

billing contacts;
customer account details;
invoices;
subscription plans and status;
payment-related metadata;
tax or billing address information; and
records needed for billing, accounting, support, and administration.

Payment card information is generally processed by Stripe or another payment provider and is not stored directly by Autopilot.

How information is collected

Autopilot may collect information:

directly from customers and users;
when users create accounts, configure settings, submit forms, upload information, or use the service;
from dealership administrators and authorised users;
through support interactions and communications;
through billing and subscription processes; and
automatically through the operation, security, monitoring, and maintenance of the service.

How we use information

Autopilot may use information to:

provide, operate, and maintain the service;
authenticate users and manage accounts;
configure dealership, group, and user access;
deliver product features and workflows;
provide customer support;
communicate with customers and users;
process billing, invoicing, tax, and subscriptions;
maintain security and protect the service;
monitor, diagnose, and resolve technical issues;
investigate suspected misuse, incidents, or service problems;
improve services, support processes, and operational workflows;
comply with legal, accounting, tax, regulatory, or contractual obligations; and
enforce agreements and protect Autopilot, customers, users, and the service.

Customer information and dealership information

Dealership customers, leads, vehicle records, sales activity, operational notes, reporting information, and similar records are generally submitted by Autopilot customers and users.

Customers are responsible for deciding what information they enter into Autopilot and for ensuring they have the appropriate rights, notices, permissions, and legal bases for that information and for their use of the service.

Autopilot processes customer information to provide, secure, support, and improve the service, and for related operational purposes described in this policy and applicable customer agreements.

Autopilot does not own customer information entered into the service by customers or users.

AI features

Certain Autopilot features may use AI service providers to support user-requested assistant, analysis, drafting, summarisation, operational, or related functions.

When an AI feature is used, prompts, responses, and related context may be processed by Autopilot and its AI service providers to generate the requested output or perform the relevant operational function. The information processed depends on the feature, the user's request, the customer's configuration, and the context submitted to the feature.

AI services are used only to provide the relevant feature, service, development, support, or operational function.

Autopilot does not use customer information submitted through Autopilot to train public AI models.

More information about providers that may process customer information for AI-related functions is available on the Subprocessors page.

Autopilot may share information where needed to provide, secure, support, and operate the service. This may include sharing information:

with service providers and subprocessors;
with payment providers for billing, subscriptions, invoicing, tax, and payment-related operations;
with support, operations, engineering, administration, and incident-response providers;
with professional advisers where needed for accounting, legal, compliance, or business purposes;
where required by law, court order, regulator, or lawful government request;
where needed to protect rights, safety, security, customers, users, Autopilot, or the service; and
in connection with a business transaction such as a merger, acquisition, financing, restructuring, sale of assets, or similar event.

Autopilot does not sell customer information and does not share customer information with third parties for their own independent marketing purposes.

A current list of providers that may process customer information is available on our Subprocessors page.

International data transfers

Autopilot is based in New Zealand and uses reputable service providers that may process information in New Zealand, Australia, the United States, and other jurisdictions where Autopilot providers operate.

Where customer information is processed outside New Zealand, privacy and data-protection laws may differ from those in New Zealand. Autopilot uses reputable providers and takes reasonable steps and safeguards where applicable to support the protection of information processed through the service.

Data retention

Autopilot retains information for as long as needed for the purposes described in this policy and applicable customer agreements. This may include retaining information:

while customer accounts remain active;
as needed to provide, secure, support, and maintain the service;
for support, troubleshooting, audit, backup, and operational purposes;
to comply with legal, accounting, tax, regulatory, or contractual obligations;
to resolve disputes;
to enforce agreements; and
to protect Autopilot, customers, users, and the service.

Retention needs vary depending on the type of information, customer configuration, support activity, legal requirements, and operational context.

Security

Autopilot uses technical, organisational, and operational controls intended to protect customer information. These include HTTPS/TLS for data in transit, access controls, managed infrastructure providers, operational monitoring, and support processes designed to limit access to customer information to appropriate users, personnel, and providers.

No service can guarantee absolute security. Autopilot works to protect customer information using reasonable safeguards appropriate to the nature of the service and the information processed.

More information is available on the Security & Trust page.

Your rights

Under New Zealand privacy law, individuals may have rights to request access to personal information held about them and to request correction of personal information they believe is wrong.

If your information was entered into Autopilot by a dealership, business, or other Autopilot customer, that customer will often be the best first point of contact because they control the information they entered and how they use it.

In many cases, Autopilot acts as a service provider to the relevant dealership or customer organisation, and that organisation may be responsible for responding to requests relating to information they control.

You may also contact Autopilot about privacy questions, access requests, correction requests, or concerns. We may need to verify your identity, understand your relationship to the relevant customer or dealership, and coordinate with the relevant customer where appropriate.

Cookies and similar technologies

Autopilot and its providers may use cookies, local storage, analytics technologies, authentication technologies, and similar tools.

These technologies may be used to:

keep users signed in;
remember settings and preferences;
operate and secure the service;
understand service usage and performance;
diagnose technical issues;
support product improvement; and
protect against misuse or unauthorised access.

Browser settings may allow users to block or delete some cookies or local storage. Some parts of the service may not work properly if required authentication or security technologies are disabled.

Children

Autopilot is intended for business use by dealerships and related businesses. It is not directed at children.

Changes to this policy

Autopilot may update this Privacy Policy from time to time. When we update it, we will publish the updated version with a revised "Last updated" date.

If a customer has a separate written agreement with Autopilot that includes different notice or change terms, those agreement terms apply where applicable.

Contact

For privacy questions, requests, or concerns, please contact Autopilot at:

hello@aplt.ai

privacy@aplt.ai

You can also contact your usual Autopilot representative.