Overview
Cartoru (“we,” “us”) helps you evaluate used vehicle listings. This policy describes how we handle information when you use our website at cartoru.com and when you use the Cartoru browser extension on supported listing sites.
Information we collect
- Account information. If you create an account, our authentication provider (Supabase) processes your email address and issues session tokens so you can stay signed in.
- Listing and vehicle details you submit. When you paste a listing URL, upload or enter vehicle information, or run an analysis from a supported marketplace page, we receive the fields needed to generate a comparison (for example year, make, model, trim, price, mileage, optional VIN, listing URL, and general listing text used to improve parsing). We do not ask for your driver license number or payment card in the product flows described here.
- Browser extension. The extension reads the visible listing page on supported sites to extract listing details, may send a compact text representation to help infer trim, and stores authentication session material locally in your browser so sign-in can persist. The extension does not read your full browsing history across the web.
- Diagnostics and analytics. We may use third-party analytics (for example Google Analytics) and error reporting on the website to understand usage and improve reliability. Those tools may receive technical data such as device type, general location derived from IP at the analytics provider, and interaction events in line with their policies.
How we use information
We use the information above to:
- Provide, operate, and improve Cartoru’s analysis features;
- Authenticate you and maintain your session;
- Communicate with you about the service when appropriate;
- Detect abuse, protect security, and comply with law.
Sharing and subprocessors
We use service providers to run Cartoru. Depending on your actions, data may be processed by vendors such as Supabase (authentication and database), our API hosting provider, and analytics or monitoring tools. These providers process data under agreements that limit their use to providing services to us. We do not sell your personal information. We do not use Cartoru data to determine creditworthiness or for lending decisions.
Retention
We retain information only as long as needed for the purposes described in this policy, unless a longer period is required by law. Saved analyses and account-related records follow our normal backup and deletion practices.
Security
We use industry-standard measures appropriate to the nature of the service. No method of transmission or storage is completely secure; we encourage you to use a strong, unique password for your account where applicable.
Your choices
- Sign out of Cartoru on the website or extension to end your session on that device.
- Remove or disable the extension at any time through your browser’s extension settings.
- Where applicable law grants rights (access, deletion, correction, portability, objection), you may contact us as below and we will respond in accordance with applicable law.
Children
Cartoru is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above.
