Privacy Policy

Last updated: September 11, 2026

Template content. This page describes, in plain language, how Deal Intake actually handles data today. It has not been reviewed by legal counsel and should not be relied on as a binding privacy policy until a lawyer has reviewed it for your dealership's jurisdiction and obligations.

What We Collect

  • Information from your driver's license (name, date of birth, address, license number, expiry date), captured by scanning the front and back of your license.
  • Pay stub / income information, captured by uploading a photo or file of a recent pay stub, used to verify your income.
  • A selfie photo, used for liveness detection and face-match verification against your driver's license photo.
  • Your phone number, used to reach you about your application.
  • Your IP address and a timestamp, recorded when you grant consent to the soft credit pull, for compliance record-keeping.

Why We Collect It

  • Identity verification - confirming you are who you say you are, using your driver's license and selfie.
  • Income verification - using your pay stub to calculate a debt-to-income (DTI) ratio as part of the pre-approval estimate.
  • Fraud and liveness prevention - your selfie is used to confirm a live person is completing the application and to detect spoofed or stolen identity documents.
  • The soft credit pull - with your explicit consent, we request a soft credit inquiry to help estimate financing options.

How It's Stored & Secured

  • Driver's license and pay stub data is encrypted at rest in our database. Uploaded document images are stored in Amazon S3 and are automatically deleted 7 days after upload.
  • All data is hosted in AWS's Canada (Central) region, to keep your data within Canada in line with PIPEDA data residency expectations.
  • Access to stored personal information is limited to systems and staff who need it to process your application.

Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

  • Access the personal information we hold about you.
  • Correct any information that is inaccurate or incomplete.
  • Withdraw your consent to the soft credit pull or further processing at any time, subject to legal or contractual restrictions.

To exercise any of these rights, contact us using the details below.

Third Parties We Share Data With

  • Equifax Canada - performs the soft credit inquiry you consent to. This is a soft inquiry only and does not affect your credit score.
  • A biometrics / liveness verification provider - processes your selfie to confirm liveness and match it against your driver's license photo.
  • The dealership's CRM (DealerTrack Canada or PBS Systems, depending on the dealership) - receives your application details and pre-approval result so dealership staff can follow up with you.

Contact

Questions about this policy or a request to access, correct, or withdraw consent for your data can be sent to the dealership that referred you to this application, or to Deal Intake support at privacy@dealintake.example.

Reminder: this is template/demo content for internal review purposes and has not been reviewed by legal counsel. Do not use it as-is in production.
See also our Terms of ServiceBack to home