← Back to Carillow

Privacy Policy

Effective date: August 5, 2026

1. Overview

Carillow Company ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect through Carillow.com and related services (the "Service"), how we collect it, how we use and share it, and the choices and rights you have. It applies to buyers, dealers, and visitors alike.

2. Information We Collect

  • Account information: name, email address, and role (buyer or dealer) when you register.
  • Dealer profile information: dealership name, address, license number, phone number, and website. For dealer groups, the group name and billing contact.
  • Buyer profile information: phone number and ZIP code/city/state, if provided; financial profile details for buyers who opt into our premium financing features.
  • Transaction data: offer amounts, accepted prices, deal status, and platform fee records.
  • Listing content: vehicle photos and details a dealer uploads or links to.
  • Communications: messages and notifications sent through the platform.
  • Usage and device data: pages visited, actions taken, IP address, and session information, collected automatically via cookies and server logs.
  • Payment information: billing details are processed by Stripe and not stored directly on our servers — we store only a token reference to your Stripe customer record.

3. How We Collect Information

We collect information: (a) directly from you, when you register, submit a listing, place a bid, or contact us; (b) automatically, through cookies and server logs as you use the Service; and (c) from other users, where the Service's design requires it — for example, a dealer's bid on your Showroom, or a buyer's Deal Lock confirmation.

4. How We Use Your Information

  • To operate and improve the Carillow marketplace.
  • To match buyers with relevant dealer inventory and route bids.
  • To send transactional emails (offer notifications, deal confirmations, invoices).
  • To process platform fee and premium-feature payments.
  • To detect and prevent fraud and abuse, including rate-limiting suspicious activity.
  • To comply with legal obligations.

5. Cookies & Similar Technologies

We use session cookies for authentication and first-party analytics (PostHog and Vercel Analytics) to understand how the platform is used and improve it. We do not use advertising cookies, and we do not use cookies for cross-site or cross-context behavioral advertising. You can disable cookies in your browser, but this will prevent you from logging in.

6. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

  • Between parties to a potential deal: while bidding, dealers see your general vehicle requirements and location, but not your name or contact information. Your name and email are shared with a dealer only once you accept that dealer's offer.
  • Within a dealer group: a dealer group's designated admin account can see aggregated listing, deal, and volume information across the group's rooftops for billing and reporting — never buyer contact information beyond what that specific rooftop already has.
  • With service providers who process data on our behalf under confidentiality obligations: Stripe (payments), Resend (email delivery), UploadThing (photo hosting), Neon (database hosting), Vercel (hosting and analytics), and Sentry (error monitoring, including limited, privacy-masked session replay to help us diagnose bugs).
  • With law enforcement or as required by law, or to protect the rights, property, or safety of Carillow, our users, or the public.
  • In a business transfer, such as a merger or acquisition, subject to this Policy continuing to apply to your information.

7. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws (such as California, Virginia, Colorado, Connecticut, or similar) to: know what personal information we hold about you; request a copy of it; correct inaccurate information; delete it, subject to legal retention requirements; and not be discriminated against for exercising these rights. Because we don't sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out to exercise. To submit a request, email admin@carillow.com — we'll verify your identity before responding and reply within the time required by applicable law.

8. Data Retention

We retain account and transaction data for 7 years to comply with financial record-keeping requirements. You may request deletion of your account data at any time; deal records required for legal or billing purposes will be anonymized rather than deleted.

9. Security

We use industry-standard security practices including TLS encryption in transit, encrypted database connections, role-based access controls, and rate limiting on authentication endpoints. No system is 100% secure; please use a strong, unique password for your account.

10. Your Rights & Choices

In addition to the state-specific rights above, you can: access and update most of your account information directly in-app; opt out of non-transactional emails at any time by clicking unsubscribe; and request account deletion by emailing us. Some information, such as records tied to a completed deal or a legal obligation, may be retained as described in Section 8.

11. Children

Carillow is not intended for, and we do not knowingly collect personal information from, anyone under 18. If we learn we've collected information from someone under 18, we will delete it. Contact us if you believe this has occurred.

12. Third-Party Links

The Service may link to third-party sites we don't control, such as a dealer's own website or Google Business profile. This Policy doesn't apply to those sites — review their privacy practices separately.

13. International Users

Carillow currently operates only within the United States, and the Service is not directed at or intended for use outside the U.S. If you access it from elsewhere, you do so on your own initiative and are responsible for compliance with local law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and update the effective date above.

15. Contact

Questions or requests? Email our privacy team at admin@carillow.com, or write to us at Carillow Company, PO Box 1061, Walkertown, NC 27051.