Privacy Policy

Overview

Cartoru (“we,” “us”) helps you evaluate used vehicle listings. This policy describes how we handle information when you use our website at cartoru.com and when you use the Cartoru browser extension on supported listing sites.

Information we collect

• Account information. If you create an account, our authentication provider (Supabase) processes your email address and issues session tokens so you can stay signed in.
• Contact and Autopilot details. If you use Autopilot, you may provide a contact email, optional phone number, listing URL, dealer name, and a dealership sales or BDC phone number so we can send transactional SMS and email on your behalf.
• Listing and vehicle details you submit. When you paste a listing URL, upload or enter vehicle information, or run an analysis from a supported marketplace page, we receive the fields needed to generate a comparison (for example year, make, model, trim, price, mileage, optional VIN, listing URL, and general listing text used to improve parsing). We do not ask for your driver license number or payment card in the product flows described here.
• Browser extension. The extension reads the visible listing page on supported sites to extract listing details, may send a compact text representation to help infer trim, and stores authentication session material locally in your browser so sign-in can persist. The extension does not read your full browsing history across the web.
• Diagnostics and analytics. We may use third-party analytics (for example Google Analytics) and error reporting on the website to understand usage and improve reliability. Those tools may receive technical data such as device type, general location derived from IP at the analytics provider, and interaction events in line with their policies.

How we use information

We use the information above to:

• Provide, operate, and improve Cartoru’s analysis and Autopilot features;
• Authenticate you and maintain your session;
• Send transactional SMS and email to dealerships you designate, on your behalf;
• Communicate with you about the service when appropriate;
• Detect abuse, protect security, and comply with law.

SMS / mobile information

Cartoru Autopilot may send transactional text messages to a dealership’s publicly listed or user-provided sales number to negotiate a vehicle purchase you requested. Message frequency varies. Message and data rates may apply. Recipients may reply STOP to opt out or HELP for help.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use Twilio as our SMS delivery provider solely to transmit messages you authorize. See our SMS program page for how consent is collected, and our Terms of Service for SMS terms.

Sharing and subprocessors

We use service providers to run Cartoru. Depending on your actions, data may be processed by vendors such as Supabase (authentication and database), Twilio (SMS delivery), our API hosting provider, and analytics or monitoring tools. These providers process data under agreements that limit their use to providing services to us. We do not sell your personal information. We do not use Cartoru data to determine creditworthiness or for lending decisions.

Retention

We retain information only as long as needed for the purposes described in this policy, unless a longer period is required by law. Saved analyses and account-related records follow our normal backup and deletion practices.

Security

We use industry-standard measures appropriate to the nature of the service. No method of transmission or storage is completely secure; we encourage you to use a strong, unique password for your account where applicable.

Your choices

• Sign out of Cartoru on the website or extension to end your session on that device.
• Remove or disable the extension at any time through your browser’s extension settings.
• Where applicable law grants rights (access, deletion, correction, portability, objection), you may contact us as below and we will respond in accordance with applicable law.

Children

Cartoru is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above.

Contact

For privacy-related requests or questions, contact us at cartoru.help@gmail.com.