Privacy Policy

What we collect

Information you give us

• Car listing details — year, make, model, mileage, asking price, and VIN you submit for analysis. We use these to run the analysis and nothing else.
• Inspection check ratings — your pass/fail/concern ratings during a guided inspection. These are stored and used to generate your inspection report.
• Purchase outcome — if you tell us whether you bought the car and what you paid, we store that to improve CarPal GI and calculate aggregate statistics.
• Email address — if you choose to enter it. This is entirely optional.
• Payment information — handled entirely by Stripe. We never see or store your card number, expiry, or CVV.

Information collected automatically

• IP address — used for rate limiting (to prevent abuse) and general analytics. We do not use IP addresses to identify individuals.
• Page views and basic usage data — via Vercel Analytics. This includes pages visited and general geographic region. No individual-level tracking.
• Browser extension activity — the CarPal GI extension reads listing data from used car listing pages you visit on supported platforms. It analyzes listing content automatically when you open a supported listing page and when you open the extension popup. It does not track your general browsing history or access pages that are not supported used car listing platforms.
• Mobile app usage — the CarPal GI mobile inspection app records which checks you complete and your ratings. No location data is collected.

How we use your information

• To run the listing analysis and guided inspection you request
• To generate and store your inspection report
• To send product updates and tips if you've opted in via email
• To understand which features are being used and improve the product
• To calculate aggregate statistics (e.g. average savings for CarPal GI users)
• To detect and prevent abuse of our free tools
• To improve market pricing models using anonymized listing and outcome data

We do not sell your data. We do not share your data with advertisers. We do not use your data to build advertising profiles.

Data sharing

We share data with the following third parties only as necessary to operate CarPal GI:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Supabase — database hosting. Data is stored on Supabase infrastructure.
• Anthropic — AI analysis of listing data, inspection verdicts, and negotiation scripts. Listing text and inspection results are sent to Anthropic's API for processing. Subject to Anthropic's Privacy Policy.
• Marketcheck — market pricing data. We send make, model, year, and mileage to retrieve comparable market listings.
• NHTSA — recall lookups. We send make, model, and year to the US government's vehicle recall database.
• Vercel — hosting and analytics.

We may disclose information if required by law or to protect the rights and safety of our users.

Browser extension — data access

The CarPal GI browser extension accesses listing page content on the following platforms: Facebook Marketplace, Autotrader, CarGurus, Cars.com, Craigslist, CarMax, TrueCar, OfferUp, Cars & Bids, and Edmunds. It reads listing data — vehicle details, price, description, and seller information — solely to provide the analysis shown in the extension popup. It does not access any other pages, does not read personal messages or account information, and does not transmit data about pages outside of supported listing platforms.

Data retention

• Inspection sessions and reports are retained indefinitely to allow you to access your report later.
• Browser extension analysis results are retained to improve market pricing models.
• Email addresses are retained until you unsubscribe.
• Payment records are retained as required by law (typically 7 years).

You can request deletion of your data by emailing us at privacy@checkcarpal.com.

Cookies

CarPal GI uses minimal cookies. We set a short-lived session cookie when you purchase an inspection (to link your payment to your session). We do not use advertising cookies or third-party tracking cookies.

Children's privacy

CarPal GI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Your choices

• Email — every email we send includes an unsubscribe link. You can also email us at privacy@checkcarpal.com to be removed.
• Data deletion — email us at privacy@checkcarpal.com and we'll delete your data within 30 days.
• Browser extension — you can remove the CarPal GI extension at any time via your browser's extension settings.
• Mobile app — inspection data is stored per session. You can request deletion of all stored inspection data by contacting us.

Beta

CarPal GI is currently in beta. Features, data practices, and third-party integrations may change as the product evolves. We will update this policy to reflect material changes.

Changes to this policy

We may update this policy as CarPal GI evolves. We'll update the "Last updated" date at the top of this page. For material changes, we'll notify users who have provided an email address.

Contact

Questions about this policy? Email us at privacy@checkcarpal.com.