Privacy Policy

Last updated: April 2026

1. Who We Are

Carso is operated from London, United Kingdom. When we refer to "Carso", "we", "us", or "our" in this policy, we mean the Carso service and its operators. For data protection enquiries, contact us at hello@carso.io.

2. What Data We Collect

We collect the following categories of personal data:

  • Dealer accounts: name, email address, dealership name, phone number, website URL.
  • Chat visitors: messages sent through the chat widget, and any personal details voluntarily provided (name, email, phone) during the conversation.
  • Usage data: page visits, feature usage, and session metadata to improve the service.

3. How We Use Your Data

  • To provide and operate the Carso chat service.
  • To capture and deliver leads to the dealership on whose website the chat occurred.
  • To improve our AI assistant's accuracy and response quality.
  • To communicate with dealers about their account, billing, and product updates.

4. Data Storage and Security

All data is stored on servers within the European Union, managed by our infrastructure provider (Supabase). We use encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only.

5. Data Sharing

We do not sell personal data to third parties. Chat conversation data is shared only with the dealership that operates the widget on which the conversation took place. We may share anonymised, aggregated data for analytics purposes.

6. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Request data portability.

To exercise any of these rights, email hello@carso.io. We will respond within 30 days.

7. Data Retention

We retain dealer account data for the duration of the active subscription plus 90 days. Chat conversation data is retained for 12 months, after which it is automatically deleted. You may request earlier deletion at any time.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered dealers by email of any material changes. The "last updated" date at the top of this page indicates the most recent revision.