Privacy Policy

RevCore (“RevCore,” “we,” “us,” or “our”) is a software-as-a-service product operated by GalacticGeeks Inc. We provide a dealership management platform that helps automotive retailers run their sales, service, F&I, accounting, and marketing operations.

You can reach us at [email protected]. Our website is revcore.galacticgeeks.com.

This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website, sign up for an account, or use the RevCore platform (collectively, the “Services”). It applies to dealership employees who use RevCore as authorized users, dealership owners and administrators, and visitors to our marketing website.

We collect information in three ways:

• Information you provide. Account profile (name, email, phone, role), dealership profile (legal name, EIN if provided, address, license numbers), customer records you upload (CRM contacts, vehicles, deals, F&I applications), payment information you submit to our payment processor, and any messages you send us.
• Information collected automatically. Device and usage data such as IP address, browser type, pages viewed, timestamps, referrer URL, and cookies. We use this to keep the platform secure and improve performance.
• Information from third parties. When you connect integrations (for example, Meta Ads, Google Ads, TikTok, Snapchat, Yelp, credit bureaus, payment processors, accounting systems, OEM lead providers, or external CRMs), we receive data through those services as you authorize.

Some dealership workflows in RevCore involve sensitive data such as Social Security numbers, driver’s license numbers, dates of birth, and credit reports. We treat this data as “Restricted Data”:

• Restricted Data is encrypted at rest and in transit (TLS 1.2+; AES-256 at rest).
• Only the dealership employees you authorize can view it. RevCore engineers do not access Restricted Data unless required to resolve a documented support ticket and the dealership has approved.
• We never sell Restricted Data. We never use it for advertising or analytics outside of providing the Services.

We use the information we collect to:

• Operate, maintain, and improve the Services.
• Authenticate users and authorize access based on role.
• Communicate with you about your account, support tickets, and product updates.
• Generate aggregated, anonymized analytics so we can improve product performance and benchmark dealerships.
• Detect, investigate, and prevent fraud, security incidents, and policy violations.
• Comply with legal obligations (for example, FTC Safeguards Rule, Gramm-Leach-Bliley Act, OFAC screening when applicable).

We disclose information only as described below:

• With your dealership. Authorized users at the dealership can see records you create within that dealership’s workspace.
• With service providers. We use vetted vendors for hosting, monitoring, communications, payments, and credit/OFAC services. They are contractually limited to the data they need.
• With your authorized integrations. When you turn on an integration we send only the data required for that integration.
• For legal reasons. If we receive a valid subpoena, court order, or other legal process, or if disclosure is necessary to protect rights, life, or safety.
• Business transfers. If we are acquired, merged, or sell assets, we may transfer information as part of that transaction. We will notify you and your dealership before any transfer.

We do not sell personal information. We do not share it for cross-context behavioral advertising.

You can update your account profile, change your password, and adjust notification preferences in Settings. Dealership administrators can manage user access, roles, and integrations from the same area. To request data export or deletion, email us at [email protected] from the address on your account.

Customers of dealerships using RevCore (for example, the people listed in the CRM) should contact the dealership directly. The dealership is the data controller for those records.

We retain account data for as long as your dealership maintains an active subscription. After cancellation, we retain data for 30 days for backup purposes, after which we delete it from production systems. Some records may persist in encrypted backups for up to 90 days before they are overwritten.

We follow security practices reasonably designed to protect personal information: encryption in transit and at rest, role-based access controls, mandatory two-factor authentication for our staff, audit logging, and regular vulnerability scans. No system is impenetrable; if we ever detect a breach affecting your dealership, we will notify the dealership administrator within 72 hours.

RevCore is a B2B product and is not intended for individuals under 16. We do not knowingly collect personal information from children.

We operate from the United States. If you access RevCore from outside the U.S., information you provide will be transferred to and processed in the U.S. under the safeguards described in this policy.

California (CCPA/CPRA): California residents may request to know, delete, or correct personal information, and may opt out of sharing for cross-context behavioral advertising (we do not engage in that). Requests can be sent to [email protected].

Other states (Virginia, Colorado, Connecticut, Utah, etc.): Comparable rights may apply under your state’s privacy law. Send requests to the same address.

If we materially change this Privacy Policy we will update the “Last updated” date and notify dealership administrators by email or in-app notice at least 14 days before the change takes effect.

Questions or requests? Reach us at [email protected] or by mail at GalacticGeeks Inc., Attn: Privacy, 2261 Market Street, San Francisco, CA 94114.