Terms of Service

DealSafe Corporation
Effective date: September 2026
Applies to: dealsafe.com and the DealSafe platform
Contact: DealSafe Corporation, 211 W 19th St Ste 300, Cheyenne, WY 82001, support@dealsafe.com

1. Agreement

These Terms of Service ("Terms") govern access to dealsafe.com and to the DealSafe platform (the "Service") provided by DealSafe Corporation ("DealSafe," "we"), a Wyoming corporation. By creating an account, subscribing, or using the Service, the dealership or other business customer ("Customer," "you") agrees to these Terms. If you use the Service on behalf of a dealership, you represent that you are authorized to bind that dealership.

2. The Service

DealSafe provides compliance software for automobile dealerships, including (per the subscribed tier): secure QR-based customer intake with identity verification; capture of deal-level consents, each separately time-stamped; a role-restricted vault for consumer personal information; routing of completed applications at the Customer's direction to the Customer's credit networks, lenders, and DMS; Red Flags screening on every deal and OFAC screening on demand; training and audit support; and exportable compliance evidence records.

DealSafe is not a consumer reporting agency, not a lender, not a credit network, and not a law firm. DealSafe does not make credit decisions, does not pull credit (credit reports are obtained through the Customer's own 700Credit account, with consumer consent captured in the intake flow), and does not provide legal advice. The Service supports the Customer's compliance program; it does not replace it. Regulatory compliance remains the Customer's own responsibility (Section 5).

3. Accounts and roles

The Customer administers its own users. The Customer must: maintain individual (non-shared) credentials for every user; restrict roles with access to consumer personal information (General Manager and Finance & Insurance roles) to personnel with a business need; promptly remove access for departed personnel; and ensure role assignments are accurate. Role changes and PII access events are logged by the Service and are part of the Customer's compliance record.

4. Fees, billing, and term

  • Pricing is per rooftop per month as published at dealsafe.com/pricing, billed monthly in advance, month-to-month, with no setup fee.
  • Taxes are additional where applicable.
  • Cancellation. Either party may cancel with effect at the end of the current monthly billing period. No refunds of partial periods, except where required by law or expressly agreed.
  • Price changes are notified at least 60 days before taking effect and apply only to billing periods after the notice period.

5. Customer responsibilities

The Customer remains the "financial institution" under the Gramm-Leach-Bliley Act and is responsible for its own compliance program under the FTC Safeguards Rule, the Red Flags Rule, and applicable state law, including: its own written information security program and Qualified Individual; its own privacy notices and consumer-facing disclosures; the lawfulness of its collection, use, and sharing of consumer information; the accuracy of data routed through the Service; and its own contracts with bureaus, credit networks, and lenders. The Customer will not use the Service to process data it has no right to collect, and will not attempt to defeat the Service's access controls or logging.

6. DealSafe's data commitments (service provider terms)

For consumer personal information processed through the Service, DealSafe acts as the Customer's service provider (and, where the CCPA/CPRA applies, as a "service provider" and "contractor" under California Civil Code §1798.100 et seq.). DealSafe commits to:

  1. Process personal information only to provide the Service as documented and instructed by the Customer, and for no other purpose;
  2. Not sell or share personal information, and not use it for cross-context behavioral advertising;
  3. Not retain, use, or disclose personal information outside the direct business relationship with the Customer;
  4. Not combine personal information received through the Service with personal information from other sources, except as permitted by law for service providers;
  5. Maintain the administrative, technical, and physical safeguards described in DealSafe's Privacy & Information Security Program, including encryption of stored data, role-based access restrictions, access logging, and multi-factor authentication on personnel systems;
  6. Ensure personnel are bound by confidentiality obligations;
  7. Assist the Customer, through the Service's export and deletion capabilities and support process, in responding to consumer requests;
  8. Notify the Customer without undue delay of any security incident affecting its data, per DealSafe's documented Data Breach Management Procedure;
  9. Notify the Customer if DealSafe determines it can no longer meet these obligations; and
  10. On termination, make available for export the Customer's applications, consent records, and access logs, and thereafter delete Customer data per the retention schedule, subject to legal holds.

Subprocessors are listed in DealSafe's subprocessor register and are bound by written terms no less protective than these. DealSafe will notify Customers before a new subprocessor gains access to consumer data.

7. Intellectual property

DealSafe owns the Service, its software, designs, and documentation. The Customer owns its data. DealSafe receives a limited license to process Customer data solely to provide the Service. Feedback may be used to improve the Service without obligation.

8. Confidentiality

Each party will protect the other's non-public information with reasonable care and use it only for the relationship. DealSafe's handling of consumer personal information is governed by Section 6, the Privacy Notice, and the Privacy & Information Security Program, which are more specific and control.

9. Warranties and disclaimers

DealSafe warrants that it will provide the Service in a professional manner consistent with its published documentation. EXCEPT AS STATED, THE SERVICE IS PROVIDED "AS IS." DEALSAFE DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. DealSafe does not warrant that use of the Service will achieve or ensure the Customer's regulatory compliance, or any particular audit, examination, or enforcement outcome.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES; AND (b) DEALSAFE'S TOTAL LIABILITY ARISING OUT OF THE SERVICE IN ANY 12-MONTH PERIOD IS LIMITED TO THE FEES PAID BY THE CUSTOMER FOR THE SERVICE IN THAT PERIOD. These limits do not apply to a party's indemnification obligations, to liability that cannot be limited by law, or to DealSafe's breach of Section 6 (data commitments), for which the cap is three (3) times the fees paid in the applicable 12-month period.

11. Indemnification

The Customer will indemnify DealSafe against third-party claims arising from the Customer's unlawful use of the Service, its instructions to route data, or its breach of these Terms. DealSafe will indemnify the Customer against third-party claims that the Service, as provided by DealSafe and used as permitted, infringes intellectual-property rights.

12. Term and termination

These Terms apply while the Customer uses the Service. Either party may terminate for material breach uncured 30 days after written notice. On termination: Customer data export per Section 6(10); accrued fees are due; Sections 5–11 and 13–15 survive.

13. Changes

We may update these Terms with at least 30 days' notice for material changes (posted and emailed to account contacts). Continued use after the effective date constitutes acceptance; if you do not accept, you may cancel per Section 4 before the change takes effect.

14. Governing law and disputes

These Terms are governed by Wyoming law, without regard to conflicts rules. The courts located in Laramie County, Wyoming (state) or the District of Wyoming (federal) have exclusive jurisdiction, and each party consents to venue there. Before filing, the parties will attempt good-faith resolution for 30 days.

15. General

These Terms, the Privacy Notice, and any order or tier selection are the entire agreement. Neither party may assign without the other's consent (except to a successor in interest). Neither party is liable for delays caused by events beyond its reasonable control. If a provision is unenforceable, the remainder stays in effect. Notices to DealSafe: support@dealsafe.com or the address above.