Who owns your customer database when you use a dealer website provider?
Legal ownership vs. practical portability
Two separate questions get conflated when dealers ask “who owns the customer data”:
Legal ownership — whose asset is it under the contract terms? For customer information collected through your dealer website, the answer in almost every legitimate contract is: yours. The customers are your dealership’s customers. The information they provided (name, email, phone, vehicle interest, financing pre-qual data) was submitted to your business, not to the vendor’s business.
Practical portability — can you actually get the data out when you need to? This is where dealers get burned. Some contracts explicitly grant ownership but make export practically impossible — restricted formats, high fees, long timeframes, or “we’ll get to it when we get to it” service levels.
Both matter. Legal ownership without practical portability is nearly worthless if you’re trying to move to a new provider.
What’s typically in your dealer database
Depending on your platform, the customer database includes:
- Contact info (name, email, phone, address) from lead forms
- Vehicle interest data (which VDPs they viewed, which vehicles they inquired about)
- Financing pre-qualification data (income range, credit tier, down payment)
- Trade-in evaluation submissions
- Test drive request history
- Service appointment records (if service is integrated)
- Purchase history (if the site tracks post-sale)
- Communication history (emails sent, forms submitted, chats)
- Behavioral data (page views, time on site, referral source)
All of this is customer information about YOUR customers, belonging to your business.
What the contract should say
Look for these specific clauses:
“Customer Data Ownership” — explicit statement that customer information collected through the platform belongs to the dealer. Not the platform. Not shared. Not licensed back to you.
“Data Export” — specifying the format (usually CSV, sometimes JSON or XML), the completeness (all customer records or only “active” ones), the timeframe (24 hours vs. 30 days), and any fees.
“Data Retention on Termination” — how long the vendor keeps your data after contract ends, and what happens to it (deleted, returned, or held indefinitely).
“Vendor Data Use Rights” — this is critical and often overlooked. Some contracts grant the vendor rights to use your customer data for their own purposes (aggregated analytics, ML training, “product improvement”). If you don’t want your customer data feeding a competitor’s benchmark reports, this needs to be explicit.
“Data Sharing with Third Parties” — whether your customer data can be shared with vendor partners, affiliates, or advertisers.
Common contract patterns
Best (rare in older dealer contracts):
- Dealer owns all customer data
- Free CSV export any time
- Vendor uses data only to provide services to dealer
- No third-party sharing without dealer permission
Middle (common):
- Dealer owns customer data, but vendor has broad license to use it
- Export available on request, possibly with fee
- Vendor uses aggregated data for internal purposes
- Third-party sharing per vendor’s privacy policy (which may be broad)
Worst (some legacy platforms):
- Vendor owns customer data as a “system output”
- Export requires “professional services” engagement (thousands of dollars)
- Vendor freely uses data for anything they want
- Third-party sharing is broadly permitted
If your current contract falls into the “worst” bucket, you have real exposure — not just for the future switch, but for what your current vendor might be doing with your customer data right now.
Practical steps before your next switch
- Request a data export today. Not as a threat, just to verify you can. If the vendor stalls, quotes fees, or asks why — that’s information about how bad the switch would be.
- Review the exported data. Is it complete? Just names and emails, or the full history including vehicle interest and communication logs? Missing data means you’re leaving customer intelligence behind when you switch.
- Read the CCPA/GDPR compliance sections of your vendor’s privacy policy. Understand what they’re doing with your customer data even under the current contract.
- In your NEXT contract, demand explicit ownership language and free, unlimited exports. Any reputable modern platform will agree without argument.
The Zoomshop position
Zoomshop’s contract explicitly states: your customer database belongs to you. Full export in CSV or JSON is available at any time through the admin, no request required, no fees. Zoomshop does not use your customer data for any purpose other than providing services to your dealership. No data sharing with third parties. No aggregated analytics for other customers to see. When you cancel Zoomshop, the export includes complete history — communication, vehicle interest, everything.
That’s how modern SaaS contracts are structured. Dealer platforms that don’t match this pattern are behind the industry, and you can push back.
Thinking about a rebuild?
Zoomshop builds modern websites specifically for auto dealers — with the SEO, AI visibility, and inventory schema this rubric expects, standard on every install.