Privacy Policy
Last updated: May 7, 2026 | Effective immediately upon account creation
CarDescribe is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using CarDescribe, you agree to the practices described in this policy.
1. Information We Collect
We collect the following types of information when you use CarDescribe:
Account Information:
- Dealership name, contact name, and contact email address
- Usernames and encrypted passwords for all users on your account
- Subscription and billing information
Usage Information:
- Vehicle data you enter into the platform (stock numbers, year, make, model, features, etc.)
- Description generation activity — which users generated descriptions, for which stores, and when
- Login activity and session information
Technical Information:
- Browser type and version
- Device type and operating system
- IP address and general geographic location
- Pages visited and features used within the platform
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the CarDescribe platform
- Process and generate AI-powered vehicle descriptions
- Manage your account and subscription
- Send you service-related communications including password resets and account notifications
- Monitor platform usage and activity for security and billing purposes
- Improve the platform based on usage patterns
- Respond to your support requests and inquiries
- Comply with applicable legal obligations
3. AI Processing and Third-Party Services
CarDescribe uses the Anthropic Claude API to generate vehicle descriptions. When you submit vehicle data for description generation, that data is transmitted to Anthropic's API for processing. By using CarDescribe, you acknowledge and consent to this data transmission.
Anthropic's use of data submitted through their API is governed by Anthropic's own privacy policy and terms of service. We encourage you to review Anthropic's policies at anthropic.com. CarDescribe does not sell or share your data with Anthropic for purposes beyond generating descriptions.
We also use the following third-party services:
- GoDaddy — website hosting and email services
- MySQL — secure database storage for your account data
- Google Analytics — website traffic and usage analytics. Google Analytics collects anonymous data about how visitors interact with our website including pages visited, time on site, and traffic sources. This data is used to improve our website and marketing. Google's privacy policy is available at policies.google.com/privacy. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout
4. Data Storage and Security
Your data is stored on secure servers hosted by GoDaddy in the United States. We implement industry-standard security measures including:
- Encrypted password storage using bcrypt hashing
- HTTPS encryption for all data transmission
- Database access controls limiting who can access your data
- Regular security monitoring of our hosting environment
While we take security seriously and implement reasonable protections, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your account data for as long as your subscription is active. Activity logs including description generation history are retained for up to 12 months. Upon account termination:
- Your account data will be retained for 30 days to allow for account reactivation
- After 30 days, your data will be permanently deleted from our systems
- You may request immediate deletion of your data by contacting support@cardescribe.com
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may disclose your information only in the following circumstances:
- Service providers — to trusted third-party service providers who assist us in operating the platform, subject to confidentiality agreements
- Legal requirements — when required by law, court order, or governmental authority
- Protection of rights — when necessary to protect the rights, property, or safety of CarDescribe, our users, or the public
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice provided to affected users
7. Cookies and Tracking
CarDescribe uses minimal browser storage (localStorage) to maintain your session state while using the platform. We do not use third-party tracking cookies, advertising cookies, or analytics services that track you across other websites. Your session data is stored locally in your browser and is cleared when you sign out.
Chrome Extension
CarDescribe offers a Chrome browser extension that provides access to the CarDescribe tool directly within your browser as a side panel. The extension operates as follows:
- Data collected: The extension stores your login session credentials (username, assigned stores, and session token) locally on your device using Chrome's built-in storage API. This data never leaves your device except to authenticate with cardescribe.com.
- Permissions used: The extension requests storage permission to save your session so you remain logged in between uses, and sidePanel permission to display the CarDescribe tool alongside your browser. No other permissions are requested.
- Data transmission: All API calls made by the extension are transmitted directly to cardescribe.com over HTTPS. The extension does not transmit data to any third parties.
- Vehicle data: Vehicle data you paste into the extension is transmitted to cardescribe.com solely for the purpose of generating descriptions. It is not stored, sold, or shared.
- No browsing history: The extension does not read, collect, or transmit your browsing history or any data from pages you visit.
- Uninstalling: Uninstalling the extension removes all locally stored session data from your device.
8. Your Rights and Choices
You have the following rights regarding your data:
- Access — you may request a copy of the data we hold about you
- Correction — you may update your account information at any time through the platform
- Deletion — you may request deletion of your account and associated data
- Portability — you may request your data in a portable format
- Objection — you may object to certain uses of your data
To exercise any of these rights, contact us at support@cardescribe.com or call 914-420-6293.
9. Children's Privacy
CarDescribe is a business-to-business service intended for use by automotive dealership professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete that information immediately.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. CarDescribe does not sell personal information. To exercise your California privacy rights, contact us at support@cardescribe.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify active users of material changes via email or through the platform at least 14 days before the changes take effect. Your continued use of CarDescribe after changes take effect constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: