Privacy Policy — NexusMotive AI Inventory Connector
Effective 2026-08-02 · NexusMotive, Inc.
NexusMotive operates an AI Inventory Connector that exposes the vehicle inventory of dealerships in the NexusMotive network to AI shopping surfaces (ChatGPT, Perplexity, Claude, Gemini, Bing). This page describes what data the Connector processes, how we store it, and the rights end users (car shoppers) have over their data.
1. What the Connector receives from the AI surface
Each AI surface (e.g., ChatGPT) calls the Connector on behalf of its end user. The request typically contains:
- A natural-language query (e.g., “hybrid SUV under $40,000 near 91320”) plus structured filter fields extracted from the conversation.
- A bearer API key identifying the AI surface as the caller. No end-user PII is required to run a search.
- For agentic actions such as booking a test drive: the user's first name, last name, email, optional phone, and an optional preferred date/time the user confirmed in chat.
2. What the Connector returns
Search responses contain public vehicle data only — year, make, model, trim, mileage, price, advertised features, and the listing dealer's name, city, state, and phone number. No personal data from any other shopper is ever included in a response.
3. How we store data
- Search queries: not persisted beyond a 30-day rolling log used for fraud / abuse detection. No PII is included in the query itself.
- Test-drive submissions:stored as a “Lead” record in the relevant dealer's tenant. PII fields (name, email, phone, address) are AES-256-GCM encrypted at rest with a per-tenant KMS key. The NexusMotive platform admin role cannot decrypt these fields.
- Identity graph:we maintain an internal identity-graph node (“NexusID”) keyed on hashed email and hashed phone. The node is used to recognize repeat shoppers across the dealer network so AI follow-up conversations can pick up where prior ones left off.
4. Who we share data with
- The originating dealer.When a user books a test drive, the lead is routed to that dealer's CRM so they can follow up.
- Ad platforms, for attribution only.If a shopper later visits the dealer's NexusMotive-powered website, we may forward an anonymized identifier (NexusID, a random opaque string) to Google Ads, Meta CAPI, or GA4 so the dealer's campaign measurement is correct. No PII (only hashed values) is forwarded.
- We do not sell personal data. NexusMotive is a SaaS platform for dealers; we are not a data broker.
5. User rights (CCPA / CPRA)
Shoppers may request access to, correction of, or deletion of their personal data by emailing privacy@nexusmotive.com. We will respond within 45 days. Deletion of a lead removes the encrypted PII fields and the corresponding identity-graph node; the dealer's aggregate analytics are retained in anonymized form.
6. Children
The Connector is not directed to children under 13. If we learn that we have collected information from a child under 13 we will delete it.
7. Contact
Questions, opt-out requests, or data-rights requests: privacy@nexusmotive.com
8. Changes
We will post material changes to this policy at this URL and update the “Effective” date above. AI marketplace partners are notified when changes affect the data flow they depend on.