Back to home

Privacy Policy

Effective date: July 15, 2026

This Privacy Policy explains how Driveflow ("Driveflow", "POSTR", "we", "us", or "our") collects, uses, discloses and protects information when you use the POSTR website at postr.ca, the POSTR mobile applications for iOS and Android, and any related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Who we are

POSTR is a product of Driveflow, based in Ontario, Canada. POSTR helps automotive dealerships generate Facebook Marketplace listings from their public online inventory.

Contact: For privacy questions, please contact us through the support channels listed on postr.ca.

2. Information we collect

We collect the following categories of information:

a) Account information

  • Name, email address, and password (stored hashed) when you create an account.
  • Dealership name, inventory website URL, and account type (dealership owner, staff, etc.).
  • Role and permissions within your dealership.

b) Dealership content

  • Publicly available vehicle inventory data scraped from the dealership website URL you provide (year, make, model, price, photos, description, VIN/stock number, features, etc.).
  • AI-generated Facebook Marketplace listing drafts, templates, and notes you save in the Service.

c) Usage and device information

  • Log data such as IP address, browser type, operating system, device identifiers, and pages/screens visited.
  • Actions taken in the app (e.g., which vehicles you posted, when a listing was marked as posted or sold).
  • Crash reports and performance diagnostics.

d) Cookies and similar technologies

The web version of POSTR uses cookies and local storage to keep you signed in, remember preferences, and provide a secure session. Mobile apps use equivalent on-device storage.

e) Information we do NOT collect

  • We do not collect payment card numbers directly. Any paid plans are processed by a third-party payment processor (e.g., Stripe), which handles card data under its own privacy terms.
  • We do not access your Facebook account, and POSTR does not post to Facebook Marketplace on your behalf. You copy generated content to Facebook manually.
  • We do not access your device camera, microphone, contacts, or location unless you explicitly grant permission for a specific feature.

3. How we use information

We use the information we collect to:

  • Provide, maintain, and improve the Service, including scraping your dealership inventory and generating listings.
  • Authenticate users and secure accounts.
  • Send transactional emails (account verification, password reset, invite acceptance, sold-vehicle notifications, etc.).
  • Respond to support requests and demo inquiries.
  • Monitor usage, prevent abuse, detect and fix bugs, and improve reliability.
  • Comply with legal obligations.

We do not sell your personal information, and we do not use your dealership's inventory content to train third-party AI models.

4. AI-generated content

POSTR uses third-party large language model providers to generate Marketplace listing text from your vehicle data. The vehicle data and template snippets you provide are sent to those providers solely to generate the requested output. We select providers that contractually agree not to use your inputs to train their models.

5. How we share information

We share information only in the following limited circumstances:

  • Within your dealership. Users assigned to the same dealership share access to inventory, listings, and templates. Dealership admins can see users on their account.
  • Service providers. We share information with vendors who help us operate the Service — including hosting, inventory scraping, AI providers, email delivery, and analytics — under confidentiality obligations.
  • Legal. We may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Driveflow or others.
  • Business transfers. If Driveflow is involved in a merger, acquisition, or asset sale, your information may be transferred, subject to this Policy.

6. Data retention

We retain account and dealership data for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 30 days, except where we are required to retain it to comply with legal, tax, or accounting obligations.

7. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), encrypted storage, hashed passwords, role-based access controls, and row-level security on stored records. No system is 100% secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to:

  • Access, correct, update, or delete your personal information.
  • Withdraw consent to processing.
  • Object to or restrict certain processing.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with a data protection authority (e.g., the Office of the Privacy Commissioner of Canada, or your local EU/UK regulator).

You can update most account information directly in the app under Settings. To delete your account or request a data export, use the in-app "Delete account" option or contact us.

9. Children's privacy

POSTR is a business tool for automotive dealerships and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

10. International data transfers

We are based in Canada and our service providers may process data in Canada, the United States, or the European Union. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

11. Mobile app permissions

The POSTR mobile apps may request the following permissions:

  • Photos / Files: to save vehicle photo bundles to your device so you can upload them to Facebook Marketplace.
  • Notifications: to alert you when inventory is refreshed or a vehicle is marked sold.

You can revoke any permission at any time in your device settings. Revoking a permission may disable the related feature.

12. Third-party links

The Service links to third-party sites (e.g., Facebook Marketplace, dealership websites). We are not responsible for the privacy practices of those sites. Please review their policies separately.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the "Effective date" above. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have questions about this Privacy Policy or our data practices, please contact us through the support channels listed at postr.ca.