We may collect the following types of information:

• Personal Information: Information that identifies you as an individual, such as your name, email address, phone number, company name, and job title, which you provide when you create an account or contact us.
• Payment Information: We do not collect or store your full credit card details. Payment information is collected and processed directly by our third-party payment processor, Stripe.
• Client Data: Information about your company's website and store that you submit or connect for analysis, such as website URLs, inventory feeds, business profile details, and connected account credentials ("Client Data").
• Usage Data: Information automatically collected when you use the Service, such as your IP address, browser type, device information, operating system, and pages visited.

We use the information we collect to:

• Provide, operate, secure, and maintain the Service.
• Process your registration and manage your account.
• Process your Subscription payments.
• Analyze your Client Data and generate AI visibility monitoring, reports, alerts, and recommendations.
• Communicate with you, including service updates, support messages, and marketing emails (which you can opt out of).
• Improve our Service, including in aggregated or anonymized form.
• Comply with legal obligations.

We never sell your personal information, and we never share it with data brokers. We may share information only in the following limited circumstances:

• Service Providers: With third-party vendors who help us operate the Service, such as Stripe (payments), DigitalOcean (cloud hosting), Cloudflare (CDN and security), and Google Business Profile (for posting features you enable).
• Legal Compliance: If required by law, subpoena, or other legal process, or to protect our rights or the rights of others.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

We retain your information for as long as your account is active. After account deletion, account data is retained for 30 days and then deleted, except where a longer period is required by law (for example, payment and tax records). Usage analytics are aggregated and anonymized after 12 months.

We implement reasonable technical and organizational measures to protect your information. Data is encrypted in transit (TLS 1.3) and at rest (AES-256). In the event of a data breach affecting your personal information, we will notify you within 72 hours via email. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, you may have certain rights regarding your personal information:

• California (CCPA/CPRA): The right to know what personal information is collected, the right to delete it, the right to correct it, and the right to opt out of its "sale" or "sharing" (which we do not do).
• Virginia, Colorado, and Connecticut: Substantially similar rights to access, correct, delete, and obtain a copy of your personal information.
• EEA / United Kingdom (GDPR): The rights to access, rectify, erase, restrict processing of, and port your personal data, and to object to certain processing.

We will not discriminate against you for exercising any of these rights. To exercise your rights, please contact us at [email protected].

cargrid is a business-to-business service intended for businesses and their authorized representatives. We do not knowingly collect personal information from anyone under the age of 18.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date."

If you have any questions about this Privacy Policy, please contact us at [email protected].