How we handle your data

You were on a dealership’s website, and the dealership decides what happens with your enquiry — they are who you are a customer of. Fastturn Digital Inc. builds and runs the assistant on their behalf, which means we hold the conversation on our systems and act on the dealership’s instructions.

If you want something done with your data, either of us can start it. The dealership is usually faster, because they are the ones who know which conversation was yours.

• The messages you type, and the assistant's replies.
• Which vehicles were shown to you.
• A phone number and a name, if you give them — the assistant asks only when you are arranging a call or a test drive.
• The page you arrived from, whether you are on a phone or a desktop, your language, and an approximate city.

It does not ask for, and has no use for, a date of birth, an address, a licence number, a credit application or anything to do with financing approval.

Replies are generated by a large language model run by Anthropic. Your messages are sent to that model to produce an answer. The assistant can only describe vehicles that are actually in the dealership’s stock list — it has no way to mention one that is not — but it can still be wrong about a detail, which is why every answer is worth confirming with a person.

After a conversation goes quiet, the assistant writes a short summary of it and, where you have used it after seeing the notice in the chat window, a description of what you appeared to be looking for. That description is an inference — a machine’s reading of the conversation, not a fact about you — and the dealership sees it alongside the transcript. If you close the window without sending a message, none of it is written.

• The dealership whose website you were on, in their Fastturn dashboard.
• Their customer system, if they have connected one — your name, number and the summary are passed across when the conversation captures a lead.
• Anthropic, as the provider of the model generating the replies.
• Our email provider, when the dealership is notified that you asked to be contacted.

It is not sold, and it is not used to build advertising audiences.

Twelve months after your last message, everything identifying is removed automatically: the transcript is deleted, and the name, phone number, city, referring page and the inferred description are cleared. What remains is that a conversation happened on a date, which is what the dealership’s counts are built from and which no longer points at anyone.

You can ask for a copy of what a conversation holds, ask for a correction, or ask for it to be erased. Erasure is immediate and does the same thing the twelve-month sweep does, on the day you ask rather than in a year.

Ask the dealership, or write to hello@fastturn.ca and we will route it. We may need to check that the conversation was yours before acting — usually by the phone number on it.

We operate under PIPEDA. Where Quebec’s Law 25 applies, the machine-written description above is the automated processing it asks to be told about: it is used to brief a salesperson, it does not decide anything on its own, and you can ask for it to be explained or removed on the same address as anything else on this page.

The above is about the assistant on a dealership’s site. On this site, when a dealer asks us for a lot check or a walkthrough, we keep what the form asks for, the page and campaign that first brought them here (held for 30 days in a first-party cookie, and sent only with a form), and — for the lot check — the consent sentence they ticked, when, and from which address and browser. We use it to reply, and our sales system receives a copy. You can unsubscribe at any time by replying to any message or writing to hello@fastturn.ca.

The instant check on /check keeps the address that was typed, what our browser found on that homepage, and a screenshot of it. The screenshot and the link to the result last up to a day; what was found about the website stays with us. To cap checks per day we keep a keyed hash of the visitor’s IP address — never the address — and the campaign that brought them; both are cleared after 30 days. The check asks for no name, email or phone number.

Where the Meta pixel is switched on, it records page views on this site, and a lead event after a lot-check request the visitor consented to, so we can tell which of our ads work. The email or phone sent to Meta with that event is hashed first.

We use Google Analytics to count visits and see which pages and campaigns lead to a request. It sets its own cookies (named _ga) and receives the pages viewed, the referring site or campaign, the device and browser type and an approximate location; we also tell it when a form was sent, never what was typed in it. You can opt out with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

If this changes in a way that affects what happens to a conversation already held, the date at the top changes with it.