Privacy Policy
CarGPT ("we", "us") is an advertising and lead management platform for car dealerships. This policy explains what information we collect, how we use it, and the choices you have. It covers the CarGPT website (cargpt.pro), the CarGPT vehicle listing pages, the CarGPT dealer dashboard, and the integrations connected to dealer accounts.
Information we collect
- Account information. When a dealership creates a CarGPT account we collect the dealership name, contact name, email address, mobile phone number, and a password (stored as a salted cryptographic hash, never in plain text).
- Connected platform data. When a dealer connects their Facebook Page and ad account through Meta's authorization flow, we receive an access token and basic information about their Pages and ad accounts (names and IDs). We use this to create and manage ad campaigns, respond to messages on the dealer's behalf, and report results back to the dealer. We only request the permissions needed for these functions.
- Inventory data. Dealers provide an inventory feed (vehicles, photos, prices) that we use to build and update their advertising.
- Lead information. When a shopper responds to a dealer's ad (for example through a lead form or a message), we process that shopper's name, contact details, and message content on the dealer's behalf so the dealer can follow up.
- Usage data. Standard technical logs such as IP address and browser type, used for security and to operate the service.
How we use information
- To create and manage advertising campaigns for the dealer on platforms the dealer connects (such as Meta and OpenAI ad placements).
- To respond to shopper inquiries on the dealer's behalf, including AI-assisted replies.
- To report performance (spend, leads, cost per lead, appointments) to the dealer in their dashboard.
- To operate, secure, and improve the service.
We do not sell personal information. We do not use shopper data for any purpose other than serving the dealership the shopper contacted.
How we share information
None of the sharing below includes mobile phone numbers or text messaging opt-in data and consent. See Text messages.
- With the advertising platforms the dealer connects (for example Meta), as needed to run their campaigns.
- With service providers that host our infrastructure (such as our hosting and database providers), bound by their own confidentiality obligations.
- With the dealership itself: leads and conversations belong to the dealer the shopper contacted.
- If required by law or to protect the rights and safety of our users.
Text messages
If you tick "Text me about CarGPT" when you sign up, or text our number first, we collect your mobile phone number, the consent wording you agreed to, and the date and time. We use them only to text you about your CarGPT account (setup, account and billing notices) and occasional CarGPT product updates, and to honor your STOP and HELP requests. Message frequency varies. Message and data rates may apply. Reply STOP to stop receiving texts or HELP for help.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all of the categories above and will not be shared with any third parties.
Data retention and deletion
We keep account and campaign data for as long as the dealer's account is active. Dealers can disconnect their Facebook Page or ad account at any time, which invalidates the stored access token. To request deletion of your account and associated data, email support@cargpt.pro and we will complete the deletion within 30 days.
Shoppers who want their information removed from a dealership's CarGPT records can contact the dealership directly or email us at the address above.
Security
Passwords are hashed with scrypt. Sessions use signed, httpOnly, secure cookies. Access tokens for connected platforms are stored server-side and are never exposed to the browser. All traffic to CarGPT is encrypted with HTTPS.
Children
CarGPT is a business tool for car dealerships and is not directed to children under 16. We do not knowingly collect information from children.
Changes to this policy
If we make material changes we will update this page and revise the date above. Continued use of the service after changes take effect constitutes acceptance.
Contact
CarGPT is operated by CarGPT Inc, Austin, TX.
CarGPT · support@cargpt.pro