Coast Privacy Policy

This policy applies to visitors to and users of the Site. It does not apply to the data a Coast customer (such as a dealership) processes using the Coast product under a separate Master Services Agreement and Data Processing Agreement — that relationship is governed by those contracts, not this policy.

Information you provide to us:

• Demo and contact requests: your name, business or dealership name, email address, phone number, and any message or details you submit.
• Demo sandbox: the email address you provide to access the interactive demo, and the inputs and interactions you generate within the demo environment.
• Other communications: information you include when you email or otherwise contact us, and, if offered, a newsletter signup email address.

Information we collect automatically:

• Usage and device data: IP address, browser type, operating system, device identifiers, referring/exit pages, pages and content viewed, and approximate location derived from your IP address.
• Cookies and similar technologies: as described in §6.

We do not intentionally collect sensitive personal information through the Site, and you should not submit sensitive information (such as Social Security numbers or financial account numbers) through Site forms or the demo sandbox.

We use personal information to:

• respond to demo requests, sales inquiries, and your communications;
• provide, operate, secure, and improve the Site and the interactive demo;
• send you communications you have requested and, where permitted, information about Coast (you can opt out of marketing emails at any time);
• analyze Site usage and improve our content and offerings;
• detect, prevent, and address security incidents, fraud, and misuse; and
• comply with legal obligations and enforce our terms.

We do not sell your personal information for money. We share personal information only as follows:

• Service providers: vendors that host the Site, deliver email, provide analytics, and perform similar functions on our behalf, who may use the information only to provide services to us. Our current service providers are listed in our Subprocessor Registry at https://startcoast.com/subprocessors.
• Legal and safety: to comply with law, legal process, or government requests; to enforce our agreements; or to protect the rights, safety, and property of Coast, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy; mobile numbers and SMS opt-in data remain subject to the restrictions in this Section 4 and Section 14.

Mobile and SMS information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services that enable us to deliver messages to you. Mobile opt-in and SMS consent data will not be transferred to any party for marketing purposes in connection with any merger, acquisition, financing, or sale of assets.

Some U.S. state laws define "sale" or "sharing" broadly to include certain analytics or advertising data flows. Where we honor it, we treat a recognized Global Privacy Control (GPC)browser signal as an opt-out of such "sale"/"sharing" to the extent required by law.

California (CCPA/CPRA).If you are a California resident, you may have the right to: know and access the personal information we have collected, used, and disclosed; request correction; request deletion; and opt out of any "sale" or "sharing" of personal information. We will not discriminate against you for exercising these rights. To exercise them, contact us at privacy@startcoast.com. We will verify your request as required by law, and you may use an authorized agent.

Other states. Residents of other U.S. states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a portable copy of, and opt out of certain processing of their personal data. To exercise any such right, contact privacy@startcoast.com.

We use cookies and similar technologies to operate the Site, remember preferences, and understand and improve usage:

• Strictly necessary cookies enable core Site functionality.
• Analytics/preference cookies help us measure and improve the Site.

You can refuse or delete cookies through your browser settings (some features may not work as a result) and use browser privacy controls, including GPC as described in §4.

The Site is intended for business users and adults and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact privacy@startcoast.com and we will delete it.

We retain personal information only as long as needed for the purposes in §3:

• Demo/contact inquiry data: retained while we follow up with you and for up to 24 months after our last contact, unless you become a customer (then governed by the customer contract) or you ask us to delete it sooner.
• Demo sandbox data: the demo environment is for evaluation only and is periodically reset; sandbox inputs are deleted within 30 days.
• Usage/analytics data: retained per our analytics configuration and then deleted or aggregated.

We dispose of personal information using reasonable measures when it is no longer needed, except where retention is required by law.

We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and authorities as required by applicable law.

Coast is based in the United States and operates the Site from the United States. If you access the Site from outside the United States, you understand your information will be processed in the United States, where data-protection laws may differ from those of your location.

We may update this policy from time to time. We will post the updated policy with a new "Effective date" and, for material changes, take reasonable steps to provide additional notice. Your continued use of the Site after the effective date constitutes acceptance to the extent permitted by law.

Coast connects to a dealership’s Facebook Page and advertising account, with the dealership’s authorization, to provide our services to that dealership. Through that connection, and on the dealership’s behalf, we may: (a) receive the information you submit on the dealership’s Facebook lead ad — such as your name, email, phone number, and your answers — so the dealership can follow up with you; and (b) create, publish, and manage advertising campaigns and lead forms on the dealership’s Page and ad account.

For this information the dealership is the controller and Coast acts as its processor (service provider) under our customer agreement. To access or delete information you provided to a dealership through Facebook, contact that dealership directly — it can delete the information in Coast, and Coast deletes it on the dealership’s instruction. We do not receive your Facebook password and do not post to your personal Facebook account.

With your authorization, Coast connects to your Google account (Gmail and Google Calendar) so that you — a dealership team member using Coast — can send and manage customer email and appointments from within Coast. We request only the Google account permissions ("scopes") needed for those features:

• Send, read, and organize email (gmail.modify):to send email to your customers on your behalf, display your customer email conversations inside Coast, and keep message state (read/unread, labels, archive) in sync. Coast does not permanently delete your mail; "delete" moves a message to Gmail’s Trash, where Google’s normal retention then applies.
• Calendar events (calendar.events): to create and update appointment events on your primary Google Calendar and reflect changes back inside Coast.
• Basic profile and email address (userinfo.email, userinfo.profile): to identify which Google account is connected and display it in Coast.

How we store and protect this data.OAuth access and refresh tokens are stored encrypted. Email content synced into Coast is stored in Coast’s database to power the in-app inbox and customer timeline, and is accessible only to authorized users within your dealership’s Coast workspace.

Limited Use.Coast’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Coast does not use Google user data for advertising; does not sell Google user data; does not transfer or disclose it except as necessary to provide or improve the Coast features you use, to comply with applicable law, or in connection with a merger or acquisition; and does not use it to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. Human access to Google user data is limited to the narrow cases that policy permits (for example, with your consent, for security, to comply with law, or for internal operations on data that has been aggregated and anonymized).

Revoking access.You can disconnect your Google account at any time from within Coast (Settings → Email) or from your Google Account security settings at https://myaccount.google.com/permissions. Disconnecting stops further sync and revokes Coast’s access.

Texts from Coast about your demo request. If you submit a demo request on the Site and check the SMS consent box, Coast Technologies LLC will send you text messages about your demo request — for example, scheduling your demo and following up on your inquiry. Consent is captured only through your express, affirmative opt-in (an unchecked checkbox you choose to check); agreeing to receive texts is not a condition of requesting a demo or of any purchase. We record the consent language you were shown, with a timestamp, when you opt in. Message frequency varies; message and data rates may apply. Reply STOP at any time to opt out and HELP for help. We do not sell or share your mobile number, mobile opt-in information, or SMS consent data with third parties or affiliates for their marketing purposes.

Texts from a dealership that uses Coast. When you provide your mobile number to a dealership that uses Coast Technologies, we process it to deliver text messages from that dealership related to your inquiry. We do not sell or share mobile opt-in information or SMS consent data with third parties or affiliates for their marketing purposes. Message and data rates may apply; reply STOP to opt out, HELP for help. See our SMS Terms of Service.

Questions or privacy requests: privacy@startcoast.com.
Coast Technologies LLC, a Georgia limited liability company.
1945 Dr. Bramblett Road, Cumming, GA 30028.