Privacy Policy for LotTalk™

Last Updated: September 13, 2025

LotTalk™ ("LotTalk") is a brand and product operated by Xlerates Technologies, L.L.C. ("Xlerates," "we," "us," or "our"). This Privacy Policy describes how we collect, use, and safeguard information from individuals who access the LotTalk brochure website (the "Website") and users of the LotTalk application (the "Application"). By using the Website or Application, you agree to the practices described herein.

1. Scope

This Privacy Policy applies to:

• Website Visitors: Individuals accessing www.lot-talk.com or related informational properties.
• Application Users: Any individual who signs up for and uses LotTalk. Certain features and permissions may be restricted to users affiliated with dealerships or organizations that have authorized accounts ("Dealership Users").

2. Information Collected

A. Website Visitors

• Technical identifiers such as IP address, browser type, operating system, and device information.
• Usage and analytics data, including cookies and similar technologies.
• Information voluntarily submitted via forms (e.g., name, email, phone number, inquiry content).

B. Application Users

• Registration Data: Name, email, optional organizational affiliation, and authentication credentials.
• Profile Data: Optional information such as user photo, job title, and preferences.
• User-Generated Content: Messages, files, posts, and communications shared within the Application.
• Operational Data: Login history, feature usage, and performance diagnostics.
• Technical Data: Device metadata, IP address, and session information for audit and security purposes.

3. Use of Information

We process information for the following purposes:

• Operating and maintaining the Website and Application.
• Authenticating users and enforcing authorization rules.
• Monitoring and improving security and performance.
• Conducting analytics and product development.
• Providing customer support and responding to inquiries.
• Complying with applicable laws, regulations, and contractual obligations.

We do not sell personal information to third parties.

4. Data Security

Xlerates employs layered security safeguards designed to meet or exceed industry standards, including but not limited to:

• Encryption: Data in transit is protected using industry-standard TLS protocols; data at rest is encrypted using AES-256 or equivalent mechanisms provided by our hosting infrastructure.
• Row-Level Security (RLS): Enforced at the database level to logically segregate user and organizational data.
• Multi-Factor Authentication (MFA): Required for administrative access to production systems.
• Audit Logging: Administrative access, queries, and system activity are logged and monitored.
• Least Privilege Access: Personnel are granted only the permissions necessary to perform their roles.
• Continuous Monitoring: Automated systems detect and alert on anomalous or unauthorized activity.

While no system can be guaranteed as fully secure, Xlerates applies a defense-in-depth approach to minimize risk of unauthorized access or disclosure.

5. Data Sharing

We may disclose information under the following circumstances:

• Service Providers: Third parties engaged for hosting, analytics, customer support, or similar functions, subject to confidentiality obligations.
• Other Users: Content shared within LotTalk (e.g., public channels, group messages) is visible to the intended recipients.
• Dealership Counterparties: If you are a Dealership User, administrators may access or manage information tied to your dealership account.
• Legal Compliance: When required by law, subpoena, or regulatory process.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, subject to confidentiality protections.

6. Data Retention

• Website analytics data is retained in aggregated or de-identified form.
• Application data (user accounts, communications, files) is retained during the period of active account use and thereafter in accordance with law, organizational policies, or verified deletion requests.

7. Individual Rights

Depending on applicable jurisdiction, individuals may have rights to access, correct, or delete their personal data. Requests may be directed to support@lot-talk.com. Xlerates will comply in accordance with governing laws and contractual obligations.

8. Children’s Privacy

The Website and Application are not intended for individuals under eighteen (18) years of age. We do not knowingly collect information from children.

9. Updates

We may revise this Privacy Policy from time to time. Updates will be posted at this location with a new “Last Updated” date. Material changes may be communicated directly to Application users.

10. Contact

For questions or requests regarding this Privacy Policy, please contact us at:

Xlerates Technologies, L.L.C.
522 W Riverside Ave Ste N
Spokane, WA 99201-0581
United States
Email: support@lot-talk.com