Privacy Policy

01Who we are, and what this covers

Caros (“Caros”, “we” or “us” in this policy) is a platform that gives car dealers and rental agencies a branded storefront and a dashboard to run it.

This policy covers your dashboard account and your business data. Visitors to your storefront are your customers, and their data is yours — we store and process it on your behalf and on your instructions, and never for our own purposes.

02What we collect from you

What the platform needs to work, and no more:

• Account data: your email and the sign-in credentials managed by our authentication provider.
• Business data: your name, logo, colours, address, contact numbers and opening hours.
• Your inventory: vehicles, photos, specifications and prices.
• Subscription data: plan, period dates, and a payment reference entered by hand.
• Technical operational logs needed for diagnostics and security.

03Your customers’ data — you are the controller, we are the processor

When a visitor submits an enquiry on your storefront, their details (name, contact method, the vehicle, and dates if it is a booking) are stored in your inbox.

That data is yours. We do not sell it, do not share it with another dealer, and do not use it to market our own products. Isolation between dealers is enforced in the database itself, not in the interface.

You are responsible for using it in line with the laws that apply to you, and for telling your customers so in your own storefront policy.

04Cookies and visitor tracking

We use a session cookie to keep you signed in to the dashboard. It is necessary for the service and cannot be disabled while you remain signed in.

We do not place advertising trackers on your storefront and we do not sell your visitors’ behaviour to anyone. What we count is an aggregate view counter per vehicle, so you can see which of your cars get attention.

05Push notifications

If you enable browser notifications, we store your device’s subscription identifier in order to send them. You can revoke it from your browser settings or the dashboard at any time.

The notification body carries no customer identity — it renders on a lock screen that someone other than you may see.

06Where data lives, and who can reach it

Data is stored with an established cloud infrastructure provider. Administrative access is limited to those who need it to operate the service or support you.

We may use technical sub-processors (hosting, storage, notification delivery) who process data on our behalf and only as far as their function requires.

07Retention

We keep your business data, inventory and leads for as long as your subscription is active.

When it ends you can request a copy of your data or its deletion. Contact us and we will act within a reasonable period, subject to anything we are legally required to retain.

08Your rights

You may access your data, correct it, request its deletion, and obtain a copy. Most of that you can do yourself directly in the dashboard, including exporting your inventory and your leads.

09Changes to this policy

We may update this policy when the service or legal requirements change. The last-updated date is shown at the top of the page, and we will notify you of material changes.