Privacy

Updated 6 September 2026

This page explains how DealerSlip handles your sign-in details and the information you put in your workspace.

Google sign-in

Google handles authentication. DealerSlip uses basic Google identity information, including your name, email address and account identifier, to sign you in and associate a workspace with your account. DealerSlip does not ask for or receive your Google password. Supabase provides the sign-in service.

Your dealership and customer information

Your workspace contains the dealership details, logo, drafts and saved invoices you enter. These may include customers’ names, addresses and contact details, vehicle information, prices and payment records. This information is used to prepare your documents and, when you sign in, to save your workspace across devices. The customer information you enter is separate from your Google sign-in details.

Where your workspace is stored

Without signing in, your workspace is stored in this browser using localStorage. Signing in opens a separate account workspace. Signed-in workspace data is stored in Supabase in the London region, with access rules that restrict each user to their own workspace.

A local recovery copy of your signed-in workspace also stays in this browser, including after you sign out. Signing out does not erase stored workspace data.

Hosting and service information

Cloudflare hosts the website. Cloudflare, Supabase and Google may process standard request metadata, such as IP addresses and browser information, when providing their services.

Customer links are optional. When you create one, a copy of that invoice pack, including the customer details, any signatures and your dealership details, is stored in Supabase under an unguessable address so the customer can view and download it without an account. Anyone with the link can open it. Links stop working after 180 days.

Optional analytics

If you choose “Allow analytics”, DealerSlip counts page views and successfully generated PDF document packs. It records only the day, fixed current-page and entry-page categories, a broad source category (such as Google, social or an AI assistant) and a running total in Supabase. The analytics records contain no names, email addresses, account or device identifiers, IP addresses, invoice contents, full referring URLs or search terms. Service providers still process request metadata as described above.

Analytics is off until you allow it. Choosing “No thanks” does not affect the invoice tool or Google sign-in. Use “Privacy choices” on any public page to change your choice. Your choice is remembered in this browser for up to 180 days. When analytics is allowed, broad source and entry-page categories are kept for the current browser-tab session so that an export can be associated with the page that brought you to the tool. A new external source starts a new entry. An entry is counted when consented measurement begins; no visitor or session identifier is created. Declining removes those session categories and stops future analytics events.

The private owner dashboard displays these aggregate counts over the last 30 days. Aggregate daily totals may be retained for historical comparison. They cannot be linked back to an individual to remove a particular event. The dashboard also shows account registrations and saved-workspace summaries to the authorized owner; ordinary accounts cannot access it. DealerSlip does not sell analytics data or use it for advertising profiles.

Invoices prepared with an AI assistant

If you connect an AI assistant to DealerSlip, your assistant provider handles what you share with it under its own policies. DealerSlip and Cloudflare process the invoice details submitted to the integration to validate them, calculate amounts and return a review link. This integration does not save the details in the DealerSlip database or write request bodies to application logs. Service providers may process ordinary request metadata.

The review link contains encoded invoice details, so treat it as private and do not share it with anyone who should not see them. Opening the link reads the details into your browser and removes the encoded part from the address bar. You review the document and download a PDF generated in your browser. Review pages are not included in DealerSlip analytics. The link, assistant conversation and downloaded PDF may still contain copies of the details.

Template downloads and updates

The Word and Excel invoice templates are offered in exchange for an email address. When you enter one, DealerSlip stores the address, whether you ticked the box to receive updates, the page you were on and the date. It is kept in Cloudflare's key-value storage on the same account that hosts the site. Nothing you have typed into an invoice is sent with it.

If you tick the updates box, the address may be used to tell you about new DealerSlip documents and guides. Untick it and the address is only used to show the download links. Email [email protected] to have an address removed.

Keeping and removing data

Cloud workspace data is retained until you request its removal. To request removal of your cloud workspace and account data, email [email protected] from the address you use to sign in. We may need to confirm that the account belongs to you before handling the request.

To remove guest data or local recovery copies, clear this website’s stored site data in your browser settings. This removes the copies in that browser; it does not remove your cloud workspace. Save any documents or backup you need first. Downloaded PDFs and backups remain wherever you saved them until you remove them yourself.

Questions

For privacy questions or data requests, contact [email protected].