Our website address is: https://beyondengaged.com.
Autopilot by Beyond Engaged — Privacy Policy. Effective 06/24/2026.
Beyond Engaged LLC (“Beyond Engaged”, “we”) provides Autopilot, a service that runs Facebook and Instagram advertising for the vehicle inventory of automotive dealers who are Beyond Engaged clients (“dealers”). This policy explains what information Autopilot handles, why, and how it is protected. It covers two groups: dealers and their staff who use Autopilot, and people who submit a dealer’s lead form on Facebook or Instagram (“shoppers”).
| Where it comes from | What Autopilot keeps | Why |
|---|---|---|
| Meta, when a shopper submits a dealer’s lead form | Meta’s ID numbers for the lead, the Page, the form, the ad, the ad set and the campaign; when the lead was submitted; which of the dealer’s vehicles the ad showed | To record each lead against the ad and vehicle that produced it, and to check that no lead was missed |
| The shopper’s name, email and phone on that form | Not stored. Autopilot reads them once to create or update the shopper’s contact in the dealer’s CRM (GoHighLevel), and keeps only a keyed one-way code (HMAC-SHA-256) of the email and of the phone | Delivering the lead to the dealer, and recognizing the same shopper’s lead later without keeping their details |
| The dealer’s CRM (GoHighLevel) | The CRM’s ID numbers for the contact and the opportunity, and when the opportunity reached a stage the dealer marks as replied, booked, showed or sold | To measure which ads produce real customers, and to report those outcomes to Meta (below) |
| Meta ad results | Daily spend, impressions, clicks and lead counts per campaign, ad set and ad | Reporting to the dealer and managing their campaigns |
| The dealer’s inventory sheet | Vehicle details: stock number, VIN, year, make, model, trim, price, mileage | Advertising the dealer’s vehicles |
| The dealer’s authorization | The access tokens Meta and GoHighLevel issue to Autopilot, kept encrypted in a secrets vault | Acting for the dealer, as the dealer authorized |
Autopilot never stores a shopper’s name, email, phone number or form answers. Those stay in the dealer’s CRM, which the dealer controls.
When a dealer turns it on, Autopilot reports a lead’s progress to Meta: that the shopper replied, booked a visit, visited, or bought. Each report names the lead by Meta’s own lead ID and, where the dealer’s CRM has them, includes the shopper’s email and phone converted to SHA-256 one-way codes in the format Meta requires. Those codes are computed at the moment of sending and are not kept. Meta uses these reports to show the dealer’s ads to people more likely to become customers.
We do not sell personal information, and we do not use shoppers’ information to market our own services. We share it only as needed to run Autopilot:
Autopilot also learns which ad approaches work from results combined across at least three dealers. No dealer sees another dealer’s leads, customers or results.
Shopper contact details are not stored, and the codes kept for matching cannot be reversed without a secret key kept outside the database. Each dealer’s records are separated at the database level, so one dealer’s data cannot be read in another’s context. Access tokens are kept in an encrypted vault. Only authorized Beyond Engaged staff can view dealer records, and only for operating the service.
Lead records (ID numbers, codes and CRM stage dates) are kept while the dealer uses Autopilot and for 60 days after. Internal job records are deleted after two days.
Any record is deleted sooner on request, as described in our Data Deletion Instructions at beyondengaged.com/data-deletion.
A shopper can ask the dealer, or us, to delete what Autopilot holds about their lead. A dealer can disconnect Autopilot at any time and ask us to delete its records.
Beyond Engaged LLC, Privacy questions and requests: info@beyondengaged.com.
We may update this policy; the effective date above shows the latest version.