Compliance & Privacy
Audit-ready, by design.
A modern automotive lead-gen program lives or dies on its consent posture. Ours is engineered to hold up — to your auditors, to regulators, and to consumers.
One-to-One Consent (TCPA)
Following the FCC's 2024 ruling on prior-express-written-consent, every funnel we run captures consent on a one-to-one basis — explicitly naming the seller the consumer agrees to hear from, the channel, and the topic. Consent is logged with IP, user agent, timestamp, and a TrustedForm or Jornaya certificate.
TCPA
We treat the Telephone Consumer Protection Act as a product-design constraint, not a compliance afterthought. Internal Do-Not-Call list scrubs, federal & state DNC honoring, time-of-day windowing, and STOP-keyword honoring across SMS — all standard.
GLBA
Auto-finance funnels are built to the Gramm-Leach-Bliley Act's safeguards rule. Personally-identifiable financial information is encrypted in transit and at rest, access is least-privileged, and partner data-handling is contractually mirrored.
CCPA / CPRA & State Privacy Laws
California, Virginia, Colorado, Connecticut, Utah, Texas, and the wider patchwork — we honor consumer rights requests across the board: access, deletion, correction, opt-out of sale/share, and limit-use of sensitive data.
FTC & CARS Rule
The FTC's CARS rule reshaped automotive disclosures. Our funnels mirror its disclosure standards on price, financing terms, and add-ons — and our publisher-network policies prohibit any practice that contradicts them.
Records & Retention
Lead records, consent certificates, IP & UA, and source attribution retained per partner contract and applicable law. Subpoena-response and regulator-inquiry workflows are documented and rehearsed.
For our advertisers
What you can expect from us, contractually.
- One-to-One Consent capture on every lead delivered, naming you (or your authorized seller hierarchy) explicitly
- TrustedForm or Jornaya certificate URL on every record
- Source-of-traffic disclosure to the publisher tier or campaign level
- Audit-trail access for regulator inquiries and consumer DSARs
- Indemnification language in MSA aligned to industry-standard frameworks
- Cooperation with internal brand-safety reviews and external compliance audits
For our publishers
What we ask of partners — and what we don't.
We work hard to be a publisher-friendly network. The list of things we ask for is short, but non-negotiable: clean traffic sources, honest landing pages, properly disclosed forms, and certificate capture on every submit. In return, you get evergreen offers, consistent payouts, and a compliance team that is on your side.
- Disclosed-source traffic only — no incentivized, co-reg pop-under, or click-injected leads
- One-to-One Consent language on the form, naming the seller(s) clearly
- TrustedForm or Jornaya integrated and firing on submit
- STOP and HELP keywords honored on any SMS follow-up
- Compliance team responsive within one business day on any escalation
A note on the regulatory environment
This space changes. We move with it.
The 2024 FCC ruling on prior-express-written-consent reset the floor for the entire industry. State-level privacy laws continue to proliferate. The FTC's CARS rule reshaped automotive disclosures. We track these changes in real time, brief our partners proactively, and update funnels before deadlines — not after.
If you're a brand with specific compliance requirements you'd like to confirm we meet, ask. We're happy to share documentation, walk your team through our consent capture, and accommodate audits.
This page is informational and does not constitute legal advice. Specific contractual terms govern each engagement.