1. Scope and responsibility
This Policy forms part of the agreement and applies to the Dealership, every user, Dealership Data, custom field, uploaded document, integration, connected account, campaign, and use of Showroom 360. The Dealership is responsible for its users and must investigate and stop misuse.
The campaign and communications provisions apply only when the communications feature is enabled for the Dealership in the product or its Order. Publication of this Policy does not mean that promotional messaging is currently generally available.
2. Lawful CRM use
- Use the service only for the subscribing Dealership’s lawful internal business operations and only for people and information the Dealership is authorised to manage.
- Do not misrepresent identity, sender, source, consent, vehicle, price, offer, finance terms, availability, or another material fact.
- Do not violate privacy, data-protection, Aadhaar, consumer, telemarketing, intellectual-property, confidentiality, employment, anti-discrimination, fraud, or other applicable law.
- Do not facilitate harassment, stalking, threats, exploitation, discrimination, unlawful surveillance, or harm.
3. Prohibited data
Do not submit passwords, PINs, OTPs, authentication secrets, CVV or complete payment-card credentials, medical or health information, biometric templates, sexual-orientation information, children’s personal data, malicious files, or information collected for an unlawful, misleading, or undisclosed purpose.
Identity and finance documents may be submitted only under the restricted conditions stated in the Terms and DPA. A custom label or free-text field does not override this Policy.
4. Platform and access abuse
- Do not bypass security or usage controls; probe, scan, attack, overload, scrape, or disrupt the service; introduce malicious code; or test security without prior written authorisation.
- Do not access or attempt to identify another customer’s data, use another person’s credentials, share accounts, conceal the responsible user, or defeat tenant, branch, role, export, deletion, or audit controls.
- Do not resell, lease, sublicense, copy, frame, mirror, reverse engineer, or use the service to create a substitute derived from our Confidential Information or protected expression, except where applicable law expressly permits and cannot be waived.
- Do not evade limits by creating duplicate accounts, automating unsupported access, or routing activity through multiple connected accounts.
5. Dealership-owned communication accounts
Every Dealership campaign must be sent through a Dealership-owned provider account that the Dealership validly connects and is authorised to use. The Dealership is the sender and principal entity for its campaign; Showroom 360 provides technical orchestration and does not become the advertiser, telemarketer, or originator merely by transmitting an authorised instruction.
The Dealership must keep the connected account secure, comply with its provider agreement, protect tokens and credentials, promptly disconnect unauthorised access, and pay provider charges unless the Order expressly says otherwise.
6. Recipient permission and records
- Use only recipient details collected lawfully and maintain evidence of source, notice, consent or other valid permission, purpose, date, channel, scope, and withdrawal where required.
- Do not use purchased, scraped, harvested, guessed, or unlawfully shared lists, or continue messaging after permission expires or the underlying relationship ends where law requires cessation.
- Comply with recipient preferences, do-not-disturb choices, applicable consent and preference registers, sender and principal-entity registration, headers, content and consent templates, scrubbing requirements, calling windows, frequency limits, and provider codes.
- On request, promptly provide evidence reasonably needed to investigate consent, a complaint, provider action, or regulatory inquiry.
7. Content and sender identity
Campaign content must truthfully identify the Dealership or legally permitted sender, state the commercial purpose where required, avoid misleading urgency or concealment, comply with offer and finance law, and include the required opt-out mechanism.
Do not send unlawful, fraudulent, deceptive, abusive, discriminatory, defamatory, infringing, obscene, malware-bearing, or prohibited-product content. Do not impersonate Showroom 360 or imply our endorsement of a Dealership, vehicle, offer, finance product, or message.
8. Opt-outs and suppression
The Dealership must honour every channel-specific unsubscribe, consent withdrawal, preference, complaint, and valid do-not-contact request within the legally required period. Where the service supplies a suppression list, ordinary users must not bypass, delete, export for evasion, or re-import suppressed recipients.
The Dealership remains responsible for synchronising suppression and consent state with its connected provider account and any system outside Showroom 360. A provider’s successful delivery does not prove lawful permission.
9. Monitoring, complaints, and suspension
We may process delivery, bounce, spam complaint, unsubscribe, template, sender-account, campaign, actor, and volume information to operate and protect communication features. We do not undertake to pre-approve every list or message.
We may immediately throttle, block, or suspend campaigns or connected accounts following spam complaints, excessive bounces, missing or unreliable consent evidence, unlawful or prohibited content, provider or regulator action, security risk, abnormal volume, or other material abuse. We may require remediation, evidence, or provider confirmation before restoring access.
10. Cooperation and indemnity
The Dealership must promptly investigate complaints, preserve relevant evidence, stop affected activity, notify us of provider or regulator action concerning the integration, and cooperate with lawful inquiries. It must not retaliate against a recipient who complains or opts out.
The Dealership’s indemnity in the Terms applies to claims, complaints, provider charges, regulatory action, and lawfully indemnifiable penalties caused by its recipients, lists, content, missing permissions, registrations, templates, connected accounts, suppression failures, or other breach of this Policy.
11. Changes and enforcement
We may update this Policy to address law, provider rules, abuse patterns, security, or new communication channels. Urgent restrictions may take effect immediately; other material changes receive reasonable notice. Enforcement may be limited to affected users, data, campaigns, integrations, or channels where reasonably practicable.