Privacy Policy

Hermes Data, Corp. (“Hermes Data”, “we”, “us”) operates this website and the Hermes Data customer portal. This policy describes what we collect when you visit the site, what we do with it, and how to reach us if you have a question.

When you visit the site, we automatically collect:

• Anonymized IP address (the last octet of IPv4 / last 80 bits of IPv6 are zeroed before storage)
• Browser user-agent string
• Pages and URLs you visit, including referring URL
• Clicks on buttons, links, and tracked UI elements
• Time spent on each page
• Country (derived from your IP at the network edge)

When you submit a contact form, sign up, or use the portal, we collect the information you give us directly (name, email, company, payment details processed by our payment provider).

When you create an account and use the customer portal, we collect and process the information you give us and generate as you work — your profile (name, company, job title, phone), billing details (processed by our payment provider, Stripe), the filter selections and searches you run, your order and download history, API usage, and any content you upload. You retain ownership of this account and usage data.

We process it to operate the Service, fulfill and support your orders, secure your account, and meet our legal and accounting obligations. We may also use it in aggregated, de-identified form — which cannot reasonably be linked back to you — to improve the Service, including our data coverage, accuracy, and product recommendations. We do not sell your account information. This section and the “Your data” section of our Terms of Service describe the same commitments.

When you create an account we sign you up for our product and marketing emails by default; you can opt out at any time from Account & Billing or via the unsubscribe link in those emails. Transactional messages — order receipts, security notices, and similar — are sent regardless of that setting because they are needed to operate your account.

Separately from the data we collect about visitors and account holders, Hermes Data compiles and licenses business-contact and business directory data about automotive dealerships and the professionals who work at them (for example, name, business role/title, work email, work phone, and public professional profile). We source this business-contact data from public and commercial sources and make it available to our business customers for their own internal sales and marketing, subject to our Terms of Service and the compliance obligations they place on those customers.

If you are an individual whose information appears in one of our data products, you may have the right — depending on where you live (for example, under the CCPA/CPRA, GDPR, or similar laws) — to request access to, correction of, deletion of, or opt-out of the “sale” or sharing of the personal information we hold about you. To make a request, email [email protected] and we will respond within the time required by applicable law. Where required, Hermes Data registers as a data broker in the jurisdictions that maintain such registries.

The site uses cookies and similar storage in three categories:

• Essential — login session, security tokens, and identifiers used purely to keep the site working.
• Analytics — a random per-visit identifier stored in your browser's sessionStorage, used only to stitch together page views from the same visit. No personal information is attached.
• Marketing — Google Analytics (GA4), Google Ads, and the LinkedIn Insight Tag. These help us measure which marketing channels send us real traffic. You can opt out of Google tracking at tools.google.com/dlpage/gaoptout and LinkedIn tracking via your LinkedIn ad settings.

We use this information only to:

• Improve the site's performance, layout, and content
• Diagnose bugs and abuse
• Understand which marketing channels work
• Operate the portal and fulfill your orders

We do not sell, rent, or share your browsing data with anyone. Site analytics data stays inside Hermes Data and is used strictly for the purposes above. The aggregate marketing data Google and LinkedIn collect via their tags is governed by their own privacy policies.

We do not store the raw IP address of any visitor. IP addresses are anonymized at the moment they are received and the original is discarded.

Because the analytics records contain no personal information once IPs are anonymized, we retain them indefinitely so we can compare year-over-year trends. Account and order data is retained for as long as you have an account, plus the period required by tax and accounting law.

Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information we hold about you. To make a request, email [email protected]. We will respond within 30 days.

Questions about this policy can be sent to [email protected].