PlatformModulesPricingSecurityCompanyBook a Demo
Legal

Privacy Policy

Last updated: [Effective date]
Working draft. This document reflects how CarConnective is built and operated, and is provided for review. It should be reviewed and finalized by qualified legal counsel before you rely on it. Bracketed items [ ] need completing (legal entity, governing-law state, effective date).

Contents

  1. Scope & who we are
  2. Information we collect
  3. Connected-vehicle data
  4. How we use information
  5. Regulatory framework
  6. How we share information
  7. Retention
  8. Security
  9. Your rights & choices
  10. Children
  11. Changes
  12. Contact

1. Scope & who we are

This Privacy Policy explains how CarConnective (“CarConnective,” “we,” “us”) — operated by [CarConnective legal entity name] — collects, uses, discloses and protects information in connection with our connected-vehicle intelligence platform and this website (together, the “Services”).

Much of the data we process belongs to our dealer customers and to the vehicle owners and consumers those dealers serve. For that data, the dealer is the controller and CarConnective acts as a service provider / processor on the dealer's behalf and under our agreement with them (see our Data Processing Addendum). This policy describes our own practices and applies to information we control directly, such as website visitors and prospective customers.

2. Information we collect

Dealer & business data

Account and contact details, and the operational records a dealer connects to the platform — deals, repair orders, customer and vehicle records, and market data — provided by or on behalf of the dealer to deliver the Services.

Consumer data (processed for dealers)

On behalf of dealers, we process information about their customers necessary to run the Services — for example contact details, vehicle ownership, service history and consent status — strictly to provide the contracted functionality.

Website & prospect data

When you visit this site or request a demo, we collect the information you submit (name, work email, dealer group, role) and standard technical data (IP address, device/browser, pages viewed) to operate and improve the site.

3. Connected-vehicle data

Connected-vehicle access is owner-consented and software-only— there is no hardware and no dongle, and vehicle credentials are never stored by us. With the owner's consent, we read vehicle-generated signals such as odometer, engine oil life, tire pressure, battery/charge, diagnostics and location, plus the VIN and service history. We limit connected-vehicle processing to title, odometer, history and telemetry needed to deliver the Services and do not use it to build profiles unrelated to the dealer relationship. An owner may disconnect their vehicle at any time.

4. How we use information

  • To provide, operate, secure and improve the Services for our dealer customers.
  • To surface the right action at the right moment — valuations, service, outreach — within the dealer's own workflows.
  • To enforce consent, Do-Not-Call, quiet hours and other compliance controls on outbound communications.
  • To communicate with you about a demo, an engagement, or this website.
  • To maintain security, prevent abuse, and meet legal obligations.

The Services are designed to operate within the regulations that govern dealer data, including the TCPA (consent, DNC and contactable-hours on outbound messaging), GLBA(safeguards for non-public financial information), the DPPA (vehicle title, odometer and history only — not owner PII), and FTC advertising and UDAP rules. We also support dealer compliance with applicable U.S. state privacy laws (e.g., CCPA/CPRA).

6. How we share information

We do not sell personal information. We share information only: (a) with the dealer customer to whom it relates; (b) with vetted sub-processors that help us provide the Services, each bound by contract and reviewed against their own security posture; and (c) where required by law or to protect rights and safety. A current list of sub-processor categories is available on request.

7. Retention

We retain information for as long as needed to provide the Services and to meet legal, accounting or reporting obligations. Data processed on a dealer's behalf is retained and deleted according to our agreement with that dealer; on termination, the dealer's data is returned or deleted as described in our DPA.

8. Security

CarConnective is engineered to the SOC 2 control set. Safeguards include row-level security on all data, a server-only privileged key (the browser can never reach dealer data), AES-256 encryption at rest and TLS in transit, hardened security headers, and a controlled change pipeline. See our Security page for the full, honest control matrix.

9. Your rights & choices

Depending on your jurisdiction, you may have rights to access, correct, delete or port your personal information, and to opt out of certain processing. For data we control (e.g., website or prospect data), contact us using the details below. For data we process on a dealer's behalf, please contact that dealer, and we will assist them in honoring your request.

10. Children

The Services are intended for businesses and are not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to customers.

12. Contact

Questions about this policy or our data practices: privacy@carconnective.com, or [CarConnective legal entity name], [mailing address].