Privacy Policy

Last Updated: 2026-09-02

Cara Inc ("Cara Inc," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and secure your personal information when you use our websites findcara.com, caraclaims.com, and microverselabs.com, as well as Cara (collectively, the "Services"). cara.microverselabs.com is a legacy address that serves the same Cara application and is also covered by this policy.

Cara Inc is the successor operator of the Cara services previously provided by Microverse Labs LLC. Personal information collected before this change continues to be handled in accordance with this policy.

Any data collected through these domains is governed by this Privacy Policy. By accessing or using our Services, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

1. Information We Collect

We collect personal information that you voluntarily provide and usage data collected automatically when you interact with our Services.

1.1 Personal Information You Provide

We may collect the following types of personal data when you interact with our Services:

• Contact Information: Name, email address, phone number, company name.
• Vehicle-Related Information: VIN numbers, stock numbers, trade-in details, preferences, financing interests.
• Communication Data: Chat interactions, messages, and other correspondence between you and our AI assistant or concierge team.
• Concierge & Outreach Data: If you opt into our concierge service, we may collect vehicle preferences, budget parameters, desired deal terms, and dealer communication preferences to act on your behalf.
• Authentication Data: We use Auth0 as our authentication provider. Auth0 currently supports Google sign-in and may support additional sign-in methods (such as Apple, email/password, etc.) in the future. When you sign in, we receive and store your email address, name, and (if provided) profile picture.

1.2 Information Collected Automatically

When you use our Services, we may collect:

• Usage Data: Pages visited, interactions with our AI assistant, session duration, and navigation patterns.
• Device & Browser Information: IP address, browser type, operating system, and device identifiers.
• Cookies & Tracking Technologies: Used to enhance functionality, analyze traffic, and improve user experience (see Section 5 below).

1.3 Data Minimization Principle

We are committed to collecting only the minimum personal data necessary to provide our Services. We do not request or collect:

• Government identification numbers (Social Security, Driver's License, etc.).
• Financial account credentials or payment card numbers stored in our systems.
• Precise GPS location (we use general location based on city/region when needed).
• Full conversation transcripts when accessed through third-party platforms.

This describes what we request. Documents you choose to upload to our claims services are supplied by you and may incidentally contain identifiers we would never ask for — see Section 1.4 for how we treat them.

1.4 Insurance Claim Information

Our claims services (offered at caraclaims.com and within the Cara app) analyze an insurer's valuation of a vehicle after a total loss, or the diminished value of a vehicle that was damaged and repaired. To provide them we collect:

• Claim Documents You Upload: Total-loss valuation reports, settlement letters, repair estimates, appraisals, and similar insurer correspondence.
• Information Contained in Those Documents: Vehicle year, make, model, trim, VIN, mileage, condition and options; the insurer's valuation figures and adjustments; the comparable vehicles the insurer relied on; claim number, policy number, date of loss, and insurer and adjuster names; and the name and address of the insured or claimant as they appear on the document.
• Claim Context You Provide: The type of claim, corrections or additions to the insurer's description of the vehicle, and any notes you add about the loss.
• Firm Information: If you use Cara as a law firm or other professional, we collect your firm name, your contact details, and the client claim materials you submit.

Please redact what you do not need to send. We do not need your Social Security number, driver's license number, financial account numbers, or any medical or injury records in order to analyze a vehicle valuation, and we ask that you remove them before uploading. If such information nonetheless appears in a document you upload, we do not use it for any purpose, and you may ask us to delete the document at any time (see Section 8).

2. How We Use Your Information

We use the collected information for:

• Providing and improving the AI assistant experience.
• Personalizing vehicle recommendations and responses.
• Analyzing user interactions to enhance the AI's accuracy.
• Assisting with financing, trade-in evaluations, and vehicle availability.
• Facilitating concierge services, including contacting dealers, negotiating terms, and conducting outreach on your behalf when you explicitly opt in.
• Communicating with users via email, SMS, or phone for operational notifications, product updates, feature announcements, feedback requests, and service-related messages. By using our Services, you consent to receiving these communications.
• Monitoring usage patterns to detect and prevent abusive behavior, security threats, or violations of our Terms.
• Ensuring compliance with legal and regulatory requirements.
• Preventing fraudulent activities and security threats.
• Improving early access and beta features using anonymized usage patterns, feedback, and interaction data from participants.
• Analyzing insurance claim documents you upload, researching comparable vehicles, and producing the free analysis, the paid valuation report, and any accompanying counter letter — and making them available in your account.

3. Data Sharing & Disclosure

We do not sell your personal data without your consent. We may also share your data under the following circumstances:

3.1 With Dealerships, Lenders, and Other Partners

We will only share your personally identifiable information (PII) with dealerships, lenders, insurance providers, or other third-party partners with your consent, on a case-by-case basis. For example:

• When you direct us to send a specific inquiry, offer, or trade-in request to a specific dealer.
• When you request a financing pre-approval and authorize us to share information with a specific lender.

We do not auto-share your PII with dealers or other partners as part of our default operation.

Aggregated, anonymized data (e.g., search trends, vehicle interest patterns, usage statistics that cannot be tied back to any individual user) may be used for analytics, product improvement, AI model improvement, and may be shared with partners for these purposes. This data is stripped of all identifiable information before any external use.

3.2 Concierge Service Data Sharing

If you opt into Cara's concierge service, you explicitly authorize us to share certain personal information with dealerships and other relevant parties solely for the purpose of facilitating your vehicle purchase. This includes:

• Your name and contact information, shared only with dealers or partners you choose or approve.
• Your vehicle preferences, budget parameters, and desired deal terms, shared to negotiate or inquire on your behalf.
• Any other information you specifically authorize us to share during the concierge engagement.

Concierge data sharing limitations:

• We will not share your information with any dealer, lender, or partner you have not selected or approved.
• Information shared through the concierge service is for informational and transactional purposes only, not for marketing or promotional use by those third parties.
• We will not share your mobile opt-in data or communication consent with any third parties for marketing or promotional purposes.
• You may revoke your concierge data sharing authorization at any time by contacting us at contact@findcara.com.

3.3 With Service Providers

We may share data with trusted service providers, including:

• Cloud infrastructure providers for hosting and data storage.
• Authentication providers (such as Auth0) for secure sign-in.
• Analytics platforms to understand usage patterns and improve our Services.

AI Training Clarification:

• Our internal AI features may use anonymized, aggregated interaction data to improve response quality.
• We do NOT provide your personal data or conversation content to third-party AI platforms for their model training.
• Vehicle data displayed through third-party AI integrations is sourced from licensed third-party data providers and managed by us.

3.4 Legal & Security Purposes

• We may disclose information if required by law, court order, or government request.
• We may share data to investigate fraud, security threats, or protect legal rights.

3.5 Business Transfers

• If Cara Inc undergoes a merger, acquisition, or asset sale, your information may be transferred as part of the transaction.

3.6 AI Platform Integration (Including ChatGPT)

When you access Cara through third-party AI platforms (such as ChatGPT), the following applies:

Data Transmission:

• Your search queries and vehicle preferences are transmitted to our servers to provide relevant results.
• We return only the minimum data necessary to respond to your specific request.
• Vehicle listing data displayed in AI platforms comes from our Services and is subject to this Privacy Policy.

What We Do NOT Do:

• We do NOT provide your personal data to AI platforms for model training purposes.
• We do NOT share your conversation history with third-party AI providers.
• We do NOT allow AI platforms to store or retain your vehicle search data.

Third-Party Platform Policies:

When using Cara through AI platforms, you are also subject to that platform's privacy policy and terms. We encourage you to review the privacy policy of any AI platform through which you access our Services, and how those platforms handle conversation data and user information.

Data Minimization:

We collect and return only the minimum information necessary to fulfill your vehicle search requests. Our AI integrations are designed to request only task-specific information, return only directly relevant vehicle data, and avoid collecting or processing unnecessary user context.

3.7 Third-Party Data Sources

Our Services display vehicle listings and related information obtained from licensed third-party data providers who aggregate publicly available automotive information.

Important:

• Vehicle listing data, pricing, and availability are provided by third-party sources and may not be current, complete, or accurate.
• We are not responsible for inaccuracies in third-party vehicle data.
• You should independently verify all vehicle information before making purchasing decisions.
• Vehicle availability and pricing may change without notice.

Dealer & Business Data Removal:

If you are a dealership, seller, or other business and believe your listing data is being displayed through our Services, please note that this data is obtained from licensed third-party data providers, not collected directly from your website or systems. If you would like your listings removed from our Services, please contact us at contact@findcara.com with the subject line "Data Removal Request." We will process valid removal requests within 5–10 business days. Removal from our Services does not affect the availability of your data through our third-party data providers or other platforms.

3.8 Insurance Claim Documents

Claim documents, and the personal information inside them, get the following specific treatment in addition to every other protection in this policy:

• We do not sell them, and we do not sell the personal information in them. Claim materials are excluded from any sale of data and from any sharing for advertising purposes, without exception and regardless of any consent given elsewhere.
• We do not send them to your insurance company. Cara does not contact your insurer, does not file, adjust, or negotiate your claim, and does not disclose your submission to the carrier. Anything your insurer receives is sent by you or by your own representative.
• We do not share them with dealerships, lenders, other claimants, or marketing partners.
• Attorneys and firms. Where a law firm submits a claim on behalf of its client, we share the resulting analysis and report with that firm, which is responsible to its client for how the material is used. If you are an individual claimant, we share your claim materials with an attorney only at your direction.
• Service providers. We rely on vetted processors — cloud hosting and storage, our payment processor, and AI model providers — to store documents and produce analysis. They act only on our instructions under contract and may not use your claim materials for their own purposes.
• AI processing. Your documents are read and analyzed by AI models. We do not permit third-party AI providers to use your claim documents to train their models.

4. Data Retention & Security

4.1 Retention Period

• We retain your data only as long as necessary for the purposes outlined in this policy.
• AI assistant conversations are stored for up to 2 years for data gathering, analysis, and improvements.
• Claim documents submitted without an account. Documents uploaded through our claims intake pages, and the packets generated from them, are automatically deleted 30 days after upload. They are deleted sooner on request.
• Claim documents and reports held in an account. Where you have a Cara account, the documents and reports associated with your claim stay available in your account for as long as that account is active, so you can retrieve what you paid for. You may delete an individual document, or ask us to delete your claim materials, at any time.
• De-identified valuation data. Market comparables and statistical outputs that no longer identify you or your vehicle may be retained indefinitely to improve our valuation methods.
• You may request data deletion (see Section 8).

4.2 Security Measures

We implement industry-standard security to protect your data, including:

• Encryption of stored and transmitted data.
• Access controls to prevent unauthorized access.
• Regular security audits and monitoring for potential vulnerabilities.

While we take strong security measures, no system is 100% secure, and users should take precautions when sharing personal information.

5. Cookies & Tracking Technologies

We use cookies, tracking pixels, and analytics tools to enhance user experience.

• Essential Cookies: Required for core website functionality.
• Analytics Cookies: Help us analyze AI assistant interactions and improve responses.
• Marketing Cookies: Used for advertising and retargeting (if applicable).

Specific services we currently use include, but are not limited to, Google Analytics 4 and Google Tag Manager (for usage analytics and tag management) and the Reddit advertising pixel (for advertising measurement and retargeting). We may add, replace, or remove similar tools from other providers — including, but not limited to, Meta (Facebook / Instagram), TikTok, X (Twitter), LinkedIn, Microsoft (Bing / Clarity), Pinterest, Snap, and other analytics or advertising platforms — as our marketing and product needs evolve. When any of these tools' tags fire on our Services, certain technical information (such as your IP address, browser and device characteristics, pages visited, referring URL, and interaction events) is automatically transmitted to the relevant third-party service and is then governed by that provider's own privacy policy.

We do not sell your personal information without your consent. Separately, some privacy laws (such as the California Consumer Privacy Rights Act) treat the automatic transmission of data to the analytics and advertising services described above as a form of "sharing" — even where no money changes hands and no list of users is exchanged. We make this disclosure for transparency.

You can manage or disable cookies in your browser settings. You can also further limit the type of automatic data transmission described above by blocking third-party cookies, using private/incognito browsing, installing a content or ad blocker, or contacting us at contact@findcara.com with any specific opt-out request.

6. SMS & Mobile Communications

If you use our concierge service or opt into SMS communications, the following applies:

• We may send you text messages related to your concierge engagement, including deal updates, dealer responses, and next steps. These messages are transactional and informational only.
• Message frequency varies based on your active engagements. Standard message and data rates from your carrier may apply.
• You may opt out of SMS communications at any time by replying STOP to any message, or by contacting us at contact@findcara.com.
• For help, reply HELP to any message.
• We will not share your mobile phone number or SMS opt-in consent with third parties for marketing or promotional purposes.

7. Third-Party Links & Integrations

Our Services may contain links to third-party websites, including but not limited to car dealerships, financing partners, and review sites.

• We do not control third-party privacy practices and encourage users to review their policies.
• Clicking on external links may result in third-party tracking.

8. Your Rights & Choices

You have the following rights regarding your personal data:

8.1 Access & Correction

• Request access to personal data we have about you.
• Request corrections to inaccurate information.

8.2 Opt-Out & Data Deletion

• You can opt out of non-essential marketing emails by clicking "unsubscribe." Operational and service-related emails (such as security alerts, account notifications, and critical updates) cannot be opted out of while you maintain an active account.
• Request data deletion via contact@findcara.com (subject to legal and contractual obligations).

8.3 California & GDPR Rights (if applicable)

If you reside in California (CCPA/CPRA) or the EU (GDPR), you may have additional rights.

California Residents (CCPA/CPRA):

• Right to know what personal information is collected and how it's used.
• Right to delete personal information (subject to exceptions).
• Right to opt-out of sale/sharing of personal information.
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising privacy rights.

We do not sell your personal information — as that term is defined by California law — without your consent.

Virginia, Colorado, Connecticut, and Utah Residents:

Similar rights apply under your state's privacy laws. Contact us at contact@findcara.com to exercise these rights.

EU/EEA Residents (GDPR):

• The right to know what personal data is collected.
• The right to request data deletion.
• The right to opt-out of data sharing with third parties.
• The right to data portability.
• The right to object to processing.

9. Children's Privacy

Our Services are not intended for children under 13. If you are between 13 and 18 years of age, you may use our Services only with parental or guardian consent. We do not knowingly collect personal data from children under 13. If we discover that a child under 13 has provided personal data, we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify users of material changes via email or website updates.

Last updated: 2026-09-02

11. Contact Information

For privacy-related inquiries, please contact:

📧 Email: contact@findcara.com
📍 Address: Cara Inc, 67 Weatherby Street, Atlanta, GA 30316