This page describes how ProInventory360 protects your dealership's information and lists the service providers that process it. For who operates ProInventory360, see our Privacy Policy.
Each dealership's records are kept apart
Every record is stamped with the dealership it belongs to, and the database itself filters every read and write to the dealership you are signed in to, as an active member. This is enforced in the database, not only in the app's screens.
Accounts and roles
Accounts are created by invitation; public sign-up is turned off. People sign in with their email address and a password, and a new account confirms its email address before it can be used. A dealership's administrator assigns each person one of five roles.
A history that cannot be rewritten
Every change is added to a permanent activity history with who made it and when. The database refuses to edit or delete an entry; a correction is a new entry.
Documents
Uploaded invoices are kept in private storage under your dealership. They are opened through links that expire after 60 seconds, and an uploaded file is never overwritten.
Dealership logos are the exception: they are stored publicly so they can be displayed, and anyone with a logo's link can view it.
Keys and connections
The keys for our database's full access, our AI provider and our email service stay on our servers and are never sent to your browser; the browser holds only public keys. Connections to the website, the app and our providers use HTTPS.
Notifications
Push notifications on your lock screen use generic text, such as "A vehicle was sold". The database refuses any other text, so a customer's name, a vehicle or a stock number never appears there.
No tracking in the app
The app contains no analytics or advertising tracking.
Service providers we use
| Provider | What it does for us | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage | The app's records, accounts and uploaded documents, and walkthrough requests |
| Vercel | Hosts the website and the app, and runs our server functions | Website and app traffic, including documents passing through to our AI provider |
| Anthropic | Reads uploaded invoices and decodes typed VINs (see our AI Use Policy) | The uploaded document or the VIN |
| Resend | Sends email | Sign-in emails, and walkthrough requests and contact-form messages sent to our team |
| Mapbox | Satellite images for the Lot Map | Which map area is being viewed; vehicle positions are drawn in your browser and are not sent |
| Hetzner | File storage in Helsinki, Finland | The file of public website listings that your dealership's listing provider sends us |
| Fonts for the website and the app; analytics on the website only | Your IP address and browser type; website visits | |
| Browser push services (Apple, Google, Mozilla) | Deliver the push notifications you turn on | Encrypted notifications with generic text |
The provider that sends us your dealership's website listings only sends to us. We send it nothing.
Reporting a security issue
If you believe you have found a security issue, contact us through our contact form and choose "Security report".