Privacy Policy

The short version

A dealership gives us the customer details it already holds so that we can send that customer a service coupon and let a service advisor redeem it. We use the information for that and nothing else. We do not sell it, we do not rent it, and we do not share it for advertising.

Who is responsible for what

The dealership is the controller of its customers’ personal information. It decides whose details enter Fossaris, what coupons are sent and to whom, and it holds the relationship with the customer.

Foundry & Grit, LLC is a processor acting on that dealership’s instructions. We do not decide who receives a coupon and we do not contact a dealership’s customers on our own initiative.

This matters for a practical reason: if you are a customer and you want your information corrected or deleted, your dealership can act on that immediately, and we will act on their instruction. Either route works — see Your choices.

What we hold

About a dealership’s customers

Supplied by the dealership from its own records:

• Name.
• Email address, and telephone number if text messaging is later enabled.
• Mailing address. This is used to bind a coupon to a household, which is what stops a coupon from circulating as a transferable voucher.
• Vehicle and service information relevant to the offer — for example the vehicle on file and the service history the dealership keeps.
• The coupons issued to that customer: what the offer was, when it was sent, when it was saved to a wallet, and when and where it was redeemed.

About dealership staff

• Name, work email address, role, and which store they work at.
• A record of the actions they take in the system, such as issuing or approving a coupon.

What we do not collect

• No payment card numbers or bank details.
• No Social Security numbers, driver’s licence numbers, or credit applications.
• No customer passwords, because customers never create an account.
• No location tracking, and no advertising or cross-site tracking cookies.

This public website holds nothing at all. It is static pages with no forms, no accounts, no analytics, and no cookies.

What we use it for

• Creating a coupon and generating its Apple Wallet or Google Wallet pass.
• Sending the customer the message containing their coupon link.
• Displaying the coupon and its terms when the customer opens the link.
• Verifying and recording redemption, including enforcing that a coupon is redeemed only once.
• Reporting back to the dealership: how many coupons were issued, saved, and redeemed, and by which member of staff.
• Keeping the service secure, diagnosing faults, and preventing abuse.

We do not use customer information to build advertising profiles, and we do not use one dealership’s data to benefit another. Each dealership’s records are isolated at the database level.

Messages, consent, and opting out

Coupons go only to a dealership’s own existing customers — people with a prior business relationship with that store. Each message is sent by a member of staff, to one customer, about one specific coupon. We do not send bulk or promotional broadcasts, and we do not use purchased or rented contact lists.

Email is the only channel in service today. Every message identifies the dealership sending it and includes a way to stop receiving further messages.

Text messaging is planned and not currently in service. When it launches, the dealership will obtain the customer’s consent before any text is sent; every message will identify the dealership; replying STOP will end them and HELP will return contact information. Message and data rates may apply. Message frequency is low — coupons are issued individually and capped by a weekly allotment per member of staff. Mobile opt-in data and consent are never sold or shared with third parties for their own marketing.

Wallet passes

When a customer adds a coupon to Apple Wallet or Google Wallet, the information shown on the pass — the dealership, the offer, the expiry, and the coupon code — is handled by Apple or Google in order to store and display it on the customer’s device. Their handling is governed by their own privacy policies. We place no tracking on a pass.

Who else processes it

We use a small number of service providers, each for one job, each bound to use the information only to provide that service to us:

• Vercel — website and application hosting.
• Supabase — database.
• Amazon Web Services (Simple Email Service) — email delivery.
• Apple — Apple Wallet passes.
• Google — Google Wallet passes.

Beyond these, we share personal information only with the dealership the customer belongs to, or where we are required to by law. We do not sell personal information and have never done so.

How long we keep it

Customer information is retained while the dealership’s account is active and for as long as needed to operate and account for coupons that were issued. When a dealership ends its relationship with us, or instructs us to delete a record, we delete or de-identify it, retaining only what the law requires us to keep.

Security

• Traffic is encrypted in transit.
• Each dealership’s data is separated at the database level rather than by application code, so one dealership cannot read another’s records.
• Staff sign in with a single-use link sent to their work email; there are no shared passwords.
• Coupon redemption is enforced on the server and can happen only once.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects a dealership’s customers, we will notify that dealership without undue delay.

Your choices

Depending on where you live, you may have the right to see, correct, delete, or receive a copy of the personal information held about you, and to object to certain uses of it.

• Start with your dealership. It controls your record and can act fastest.
• Or write to us at team [at] foundryandgritllc [dot] com. We will pass the request to the dealership, act on their instruction, and confirm back to you.
• To stop receiving messages, use the opt-out link in any email you have received from us.

We will not treat you differently for exercising any of these rights.

Children

Fossaris is a tool for businesses and is not directed to children. We do not knowingly collect information from anyone under 13. If we learn that we have, we will delete it.

Changes

If this policy changes materially we will update the effective date above and, for significant changes, notify the dealerships using Fossaris so they can tell their customers.

Contact

Foundry & Grit, LLC
138 Bryant Street, Gadsden, Alabama 35901, United States
team [at] foundryandgritllc [dot] com