Privacy Policy

This Privacy Policy explains how Cardan Corp (to be incorporated), doing business as Cardan.live(“Cardan,” “we,” “us”), handles information in connection with the Cardan platform.

1. Scope & Roles — please read this section first

Cardan is used in two different ways, and our role is different in each:

• Cardan’s own accounts and business dealings— the staff accounts Cardan’s operations team creates for a dealership’s employees, and anyone who contacts Cardan directly (a sales inquiry, a support request). For this information, Cardan is the business making the decisions about how it’s used, described below.
• A dealership’s own branded website and deal tools, powered by Cardan— when a car buyer submits their information on a dealer’s own site or through a deal link a dealership’s staff sent them, that information is being given to the dealership, not to Cardan directly. The dealership is the business that customer is dealing with and decides how to use that information (subject to its own privacy notice, if it has one); Cardan acts as a service provider that stores and processes that data on the dealership’s behalf, under the dealership’s instructions. If you submitted information through a dealer’s Cardan-powered site and have a question about how that dealer uses it, we encourage you to contact that dealership directly as well.

This policy describes both roles honestly rather than treating Cardan as the sole decision -maker everywhere data flows through the platform.

2. Information We Collect

Dealership staff accounts: name, work email, phone number, and role.

Consumers interacting with a dealership through Cardan (a lead form, a deal-link session, a trade-in submission): name, phone number and/or email, vehicle of interest, and messages sent through the platform. Photos submitted for a trade-in appraisal are stored as provided.

Credit application information(only when a dealership staff member initiates a credit-application intake for a customer, in person): legal name, date of birth, Social Security number, address, employer, and income. The Social Security number is encrypted at rest (AES-256-GCM) and is never displayed again in the interface once saved — it is used only to support that dealership’s own financing process and is not shared with Cardan for any other purpose.

3. How Information Is Used

• To provide, maintain, and improve the Service;
• To allow dealership staff to follow up with their own customers about a vehicle or deal, subject to the communications-consent rules described below;
• To generate draft message suggestions for staff review (see §4) — never to automatically contact a consumer without a human or an already-consented automated step in between;
• To detect and prevent fraud, abuse, and security incidents; and
• To comply with legal obligations.

4. AI-Assisted Drafting

Certain features use a third-party AI provider (Anthropic) to draft suggested replies or summaries for a dealership’s staff to review. These drafts are generated on demand and are not automatically sent to a consumer, and are not used by the AI provider to train its own models under Cardan’s agreement with that provider.

5. Communications Consent

Before a dealership can text or email a consumer through the Service, that consumer’s opt-in preference for each channel is recorded and honored, and any “do not contact” request is honored across every dealership location in the same network, not just the one it was made at. This governs whether a message may be sent — it is separate from, and does not substitute for, acceptance of this Privacy Policy.

6. Data Sharing & Subprocessors

We share information with service providers who process it on our behalf to operate the platform, currently including: cloud hosting and file storage providers, a database provider, and an AI provider for the drafting feature described in §4. Where a dealership connects an optional integration (for example, syncing to their own CRM), information flows to that integration under the dealership’s own configuration and account with that provider. We do not sell personal information.

7. Data Security

Access to consumer and financial information is role-gated to the staff who need it for their job. Social Security numbers are encrypted at rest and never displayed in plain text after initial entry. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

Information is retained for as long as needed to provide the Service to the dealership that collected it, and afterward as needed to comply with legal, accounting, or dispute -resolution obligations.

9. Your Rights & Choices

You may ask a dealership, or contact us directly, to access, correct, or request deletion of information associated with you. We will route the request to the relevant dealership where they are the party who collected it. This is currently handled by request rather than through a self-service tool — if that changes, this policy will be updated to reflect it.

10. Cookies

The Service uses a single, essential, first-party cookie to keep a staff member signed in. We do not use advertising or cross-site tracking cookies.

11. Children’s Privacy

The Service is intended for use by dealership staff and adult consumers in the ordinary course of a vehicle purchase or lease. It is not directed to children, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time; the effective date above will reflect the latest revision. Material changes will be reflected here and, where appropriate, communicated to dealership administrators.

13. Contact

Questions about this Privacy Policy can be sent to support@cardan.live.