Is my data safe?

Short version: your workspace's data belongs to you, it is isolated to your workspace, and we do not sell it.

What protects it

Encryption in transit and at rest.
Workspace isolation enforced on the server on every request. One dealer's data is never shown to another dealer, and a personal workspace and a dealership workspace never mix.
Role-based access. What a person can open depends on their role in the store — a salesperson, for example, does not open the desk.
Customer-safe outputs. Quote PDFs and Customer Mode never show ACV, dealer cost, gross, or money factor.
Hosting with established infrastructure providers that maintain independent security certifications.

We use workspace data to provide, secure, support, and improve the service for that workspace. We do not sell your data, and we do not share one dealer's identifiable business data with another dealer or with any third party for their own marketing.
Anonymized, aggregated data may be used for industry benchmarks. It never includes customer personal information and never identifies a dealership without that dealership's consent. You can opt out in Settings → Data & Privacy.
Product help and the public assistant cannot read your deals. SummitIQ reads only the workspace you are signed into.

You own your data and can export it at any time from Settings → Data & Privacy.
You can request correction or deletion from the same place. Deletion follows the legal retention rules for transaction records.
After an account closes, data is retained for 90 days and then permanently deleted, unless the law requires longer.

Never send a password, a one-time code, or a screenshot of a token to the assistant or to email.

The full detail is in the Privacy Policy and Terms of Service on summitdesk.io. Questions go to support@summitdesk.io.