Your numbers, your customers, your comps.
A dealer’s buy bands and customer list are the business. Here is exactly what we hold, what we do with it, and what we don’t claim yet.
The data is yours
Export your quotes, lines, customers and settings to CSV whenever you want, without asking. Close your account and say the word and we delete it — not archive it quietly.
We don’t sell what we see
Your buy bands, premium shares, offers and customer records are not brokered, resold, or aggregated into a product other dealers can buy. No exceptions we’d have to write in small print.
Encryption
TLS 1.2 or better in transit, AES-256 at rest, on managed infrastructure with encrypted backups. Customer-facing quote links are unguessable and can be revoked from your side at any time.
Access and attribution
Individual staff logins rather than one shared password, roles that separate pricing from settings, and every line stamped with who quoted it and who priced it. Staff names stay off the customer’s copy unless you show them.
Payments
Subscription billing runs through Stripe. Card numbers never reach our servers, and we don’t store them anywhere. CounterMint does not process the money between you and your walk-in — that stays at your counter.
Customer contact and consent
Contact details are captured on the quote for your records. Delivery and any future marketing are two separate opt-ins, off unless the customer turns them on, each stamped with when it was given. Email runs with per-shop authentication and your own reply-to address; SMS is composed for you and sent from your own phone, so no customer number is handed to a third-party texting service.
The retrieval portal
A printed quote opens at quote.countermint.io with a Quote ID and a six-digit PIN — both required, neither guessable from the other. The portal will not confirm whether a Quote ID exists, and repeated failed attempts are rate-limited, so a mislaid sheet can’t be used to enumerate your customers or your pricing.
Where the numbers come from
Spot arrives from redundant market feeds; if one goes quiet the quote says so instead of guessing. Comps are public sold records, normalized to the spot on the day each one closed. Every line shows the comp set behind it, so you can audit the number rather than trust it.
We don’t have a SOC 2 report yet, so we’re not putting a badge in the footer. It’s on the list, and when it lands we’ll say so with a date on it. If your insurer or your accountant needs specifics before then, ask us directly and we’ll answer in writing.
Ask a security question →