Privacy Policy

The RPM Dashboard is an internal operations tool used by staff of Dolan Enterprises, Inc., trading as Dolan Auto Group. The software is built and operated by Red Moon Media. It is not open to the public and has no sign-up.

• Name, job title, and which store you work at
• Mobile number — this is your login, and where codes are sent
• Email address, if one has been recorded
• Your working schedule and availability status
• A record of your work in the system: deals you took and closed, notes you wrote, vehicles you moved, and when

This information is entered by an administrator or created as you use the tool. It is used to run the operation and to report on it internally.

When a deal is submitted, staff record the customer's name, the vehicle, and — optionally — a mobile number so the deal can be worked. This is used only to complete that purchase.

Customers are not sent messages by this system.

Text messages are sent only to staff, and only for two things: a one-time sign-in code, sent when that person requests one; and an alert that a colleague has messaged them inside the dashboard, sent only when they are not already using it. A reply to an alert is recorded in that conversation in the dashboard, where the colleague they were talking to can read it. Messages are delivered through Twilio.

Message alerts can be switched off at any time by replying STOP, or by asking an administrator. Sign-in codes are unaffected.

Mobile numbers and messaging consent are never sold, rented, or shared with third parties for marketing. Numbers are shared only with our messaging provider for the sole purpose of delivering these messages.

Full details are in the Messaging Terms.

Data is stored in a hosted Postgres database with access restricted to the application and its administrators. Login codes are stored only as a cryptographic hash and expire after ten minutes; the code itself is never retained. Sign-in sessions can be revoked by an administrator at any time — for example if a phone is lost.

Staff records are kept while the person has access and afterwards as part of the historical record of work, so past deals still show who handled them. Expired login codes and old sessions are deleted automatically. An administrator can remove a person's access immediately.

Nobody, beyond the service providers needed to run the system: our hosting provider, our database provider, and our messaging provider. We do not sell personal information.

To see, correct, or remove what is held about you, contact an administrator or write to luke@redmoon.media. You can stop text messages at any time by replying STOP, though that also ends your ability to sign in.

Dolan Enterprises, Inc., trading as Dolan Auto Group — luke@redmoon.media.