Privacy Policy

1. Overview

Carillow ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use Carillow.com and related services.

2. Information We Collect

• Account information: name, email address, and role (buyer or dealer) when you register.
• Dealer profile information: dealership name, address, license number, phone number, and website.
• Transaction data: offer amounts, accepted prices, deal status, and platform fee records.
• Communications: messages and notifications sent through the platform.
• Usage data: pages visited, actions taken, and session information (collected automatically via cookies and server logs).
• Payment information: billing details are processed by Stripe and not stored directly on our servers. We store only a token reference to your Stripe customer record.

3. How We Use Your Information

• To operate and improve the Carillow marketplace.
• To match buyers with relevant dealer inventory.
• To send transactional emails (offer notifications, deal confirmations, invoices).
• To process platform fee payments from dealers.
• To detect and prevent fraud and abuse.
• To comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We share information only:

• Between parties to a deal: When a dealer submits an offer, the buyer's first name and general location (city/state) are shared. Dealer contact information is shared upon offer acceptance.
• With service providers: Stripe (payments), Resend (email delivery), Neon (database hosting), and Vercel (hosting) process data on our behalf under confidentiality agreements.
• With law enforcement: When required by law or to protect rights and safety.

5. Data Retention

We retain account and transaction data for 7 years to comply with financial record-keeping requirements. You may request deletion of your account data at any time; deal records required for legal or billing purposes will be anonymized rather than deleted.

6. Cookies

We use session cookies for authentication and minimal analytics cookies to understand how the platform is used. We do not use advertising cookies or cross-site tracking. You can disable cookies in your browser, but this will prevent you from logging in.

7. Security

We use industry-standard security practices including TLS encryption in transit, encrypted database connections, and role-based access controls. No system is 100% secure; please use a strong, unique password for your account.

8. Your Rights

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal retention requirements); opt out of non-transactional communications at any time by clicking unsubscribe in any email.

9. Children

Carillow is not intended for users under 18. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and update the effective date above.

11. Contact

Questions or requests? Email our privacy team at privacy@Carillow.com.