Privacy Policy

CarSaver Management, LLC and our affiliates, including CarSaver, Inc. ("Company", "us" or "we") have adopted this Privacy Policy, which applies to all users of our websites and mobile applications, as well as any online or mobile sites specifically identified as belonging to us, including GroupCars.com, AutoAmigo.com, CarSaver.com, and related subdomains ("Sites").

We operate an online and mobile automotive information and communications platform ("Services") that enables consumers to shop for vehicles from dealers and apply for insurance and financing from third party partners who participate in one of our automotive buying programs ("Partners"). Our Partners include car dealerships, auto insurance companies, financial institutions (including credit unions), major car companies that are the original equipment manufacturer, and retail establishments, among others.

We are committed to protecting the privacy and personal information of users of our Sites and Services. This Privacy Policy describes our policies and procedures for the collection, use and disclosure of your information and data on our Site and through our Services. Our Privacy Policy applies only to personally identifiable information we collect on our own behalf and not to information we collect on behalf of our Partners or that they collect and store in one of our applications. You understand that by using the Site or Services you agree to the terms of this Privacy Policy.

Our Sites are not directed toward persons under the age of 18. We do not knowingly collect information from persons under the age of 18. This Policy does not apply to anonymized or aggregated data that does not allow us or third parties to identify or contact you. This Privacy Policy only applies to the Sites and does not apply to information we collected or received by other means.

Information We Collect And How We Collect It

The Personally Identifiable Information, or PII, that we collect comes from various sources throughout your car shopping and purchasing journey.

First, there is information which we collect from you directly, which includes:

  • Your name, email address, phone number and zip code when you create an account with us;
  • Your IP address when you use our sites, even if you do not create an account;
  • Your license plate and/or vehicle identification number (VIN) when requesting a valuation of your trade-in;
  • Your income information and credit score when you apply for credit; and
  • A copy of your driver's license and income information when you finalize your purchase.

Second, there is information we collect from our Partners such as:

  • Credit application status, approval amounts, and financing terms when you apply for financing through our platform with one of our financial institution partners (typically banks and credit unions);
  • Your name, contact information, and prior sales information, including prior vehicles purchased, service history and financing details, which we collect from the dealer's DMS, or Dealer Management Systems; and
  • Your name from our extended warranty and service contract administrator, if you fill out an application for coverage.

As discussed in this Policy and elsewhere on our Sites, you may have the option to see if you either pre-qualify for a loan or are eligible to receive a lending/lease offer for auto-financing by applying through a financial institution (including but not limited to one that is a Partner). That lending institution may require you to provide information in addition to the information above to determine your eligibility or finalize your eligibility such as, your social security number, residential history or employment history. This additional information is not captured or retained by CarSaver. Please refer to that lending institution’s privacy policies to learn more about their data practices.

As part of our Services, we may serve as an intermediary between you and our Partners where PII is transmitted through us. When serving that function, that information would be available to us and we may retain and use such information for only as long as necessary to facilitate the transaction, subject to this Privacy Policy and applicable law.

How We Use Your Information

We use your PII for several reasons including:

  • To provide, support, personalize, and develop our websites, products, and services.
  • To create, maintain, customize, and secure your account with us.
  • To process your requests and prevent transactional fraud.
  • To contact you to provide you with customer support and to respond to your inquiries. This includes contacting you via phone, email, or text.
  • To personalize your website experience and to deliver content and product and service offerings relevant to your interests, and via email or text message (with your consent, and as allowed by law).
  • To help maintain the safety, security, and integrity of our websites, products and services, databases and other technology assets, and business.
  • For testing, research, analysis, and product development, including to develop and improve our websites, products, and services.
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

We may also use your PII to provide you with newsletters, marketing or promotional materials, as well as other information we believe may be relevant to you. We may provide this information in various ways including via phone, text, and electronic mail.

We will obtain your consent as required by applicable laws before sending any marketing or promotional materials. If at any time you do not wish to receive such communications from us, you may notify us by emailing us at unsubscribe@carsaver.com, or in the case of email communications, by using the built-in "unsubscribe" feature. You may also register your phone number on the National "Do Not Call" registry: https://www.donotcall.gov/

We do not sell PII. However, we may share your PII with our Partners, and with third party vendors. Our Partners and vendors will use your information to help us provide Services to you and assist you in your car-shopping journey. Our Partners and vendors are bound by the commitments made to you under this Privacy Policy. We require these companies to contractually commit to protecting your PII in accordance with both industry standards and applicable law, and to use the PII that we share with them only to provide Services to you.

Likewise, our Sites and Services may permit you to provide your contact information directly to a limited number of insurance providers in order to request a free insurance quote in connection with a potential vehicle lease or purchase. These direct interactions with insurance providers will not be controlled by this Privacy Policy. You should review the applicable notices of these insurance providers to understand how they may use your information.

External Links

Our Site or Services may contain links to other third-party websites, including our Partners. After you leave our Site, we have no control over the information collected from or about you. We are not responsible, and assume no liability, for the privacy policies and/or practices on any third-party websites. This Privacy Policy only governs information collected by us on our Site.

Cookies

We may use cookies to recognize you, and to optimize and tailor your experiences when visiting our Site and using our Services. We may also share cookie data with our Partners, who will use that strictly to help us provide Services to you.

We do not use cookie data from third parties, nor do we sell or share your cookie data with third parties, in order to track your behavior on other websites or to market to you on other websites.

You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. However, if you do not accept cookies you may not be able to use all of the features of our Site or Services.

How We Protect Your Data

We use safeguards that satisfy generally accepted industry standards to preserve the integrity and security of your PII. However, we cannot guarantee the security of the information you provide us with certainty or warrant it will not be accessed, disclosed, altered, or destroyed by unauthorized persons. We will make all legally required disclosures of any breach of the security, confidentiality, or integrity of your PII, in the manner and within the time periods required by applicable law.

We offer and market our services or products strictly within the United States. Therefore, we do not use or transfer your Personal Information in the United Kingdom, the European Union or anywhere else outside the United States. We make no representation that our Privacy Policy complies with the laws of any foreign jurisdictions.

How Long Do We Retain/Store Data And Why?

We retain your PII as long as is necessary to perform a service for you, for archival purposes, to comply with applicable laws or regulations, to resolve disputes, and to enforce our agreements.

When determining the appropriate retention period for PII, we take into account various criteria, such as the amount, nature and sensitivity of the PII; potential risk of harm from unauthorized use or disclosure; purposes for which we process your PII; whether we can achieve those purposes through other means; and business operations and legal requirements.

Because we maintain our applications and websites to protect from accidental or malicious loss and destruction, residual copies of your PII may be retained in our backup and archival systems for a limited period of time, after which the information will be automatically deleted or put beyond use where deletion is not possible.

Compliance With Law Enforcement

We cooperate with government and law enforcement officials, as well as private parties, to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties that we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process, including, but not limited to, subpoenas, to protect our property and rights or that of a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or subject to legal action.

Our Policy Towards Children

Our Site and Services are not targeted to or intended for use by children. We are concerned about the privacy and safety of children when they use the internet. Accordingly, we will not knowingly request PII online from anyone under the age of 13 without prior, verifiable parental consent. Unfortunately, we cannot always determine the age of a visitor to our Site or user of our Services.

Corporate Transfer

In the course of a corporate merger, acquisition, divestiture, asset sale, joint venture, bankruptcy, dissolution, reorganization, or any other similar transaction or proceeding, we may sell, divest, transfer, assign, share or otherwise engage in a transaction that involves some or all of our assets, including your PII.

State Privacy Laws

Many states have enacted laws that protect the privacy of PII. While CarSaver may not be covered by some of these laws, we believe our privacy policy and our practices follow their requirements and comply with their spirit and intent. Please see the provisions below for more information.We will update this section from time to time as more states enact laws.

California Residents: Your California Privacy Rights:

Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA"), California residents have certain rights around the collection, use, and sharing of their personal information. CarSaver does not sell Personal Information as defined under the CCPA and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. CarSaver also does not share your information with third parties for the purposes of conducting targeted advertising across websites that you visit. Again, should CarSaver begin sharing your information for this purpose, it will provide you with notice and the opportunity to opt-out.

As a California resident you may request that we disclose what Personal Information we collect and use, as well as the right to request that we delete certain Personal Information that we have collected from you. You may also have the right to request correction of inaccurate personal information and to request to limit disclosure or use of your sensitive personal information. Once we receive and confirm your verifiable request, we will respond to you, and, where necessary, notify our affiliates and Partners, within 45 days.

(Note that we may deny your request to delete your Personal Information if retaining the information is necessary for us or our service provider(s) to:

  • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.)

If we are unable to verify your identity or otherwise must deny your request, we will provide you with an explanation of our reason(s) for doing so. Where we are unable to verify you, we will treat your request as an opt-out.

An agent may submit a request on your behalf, but you must verify that your agent is authorized to do so.

Colorado Residents: Your Colorado Privacy Rights.

Under Colorado's Consumer Privacy Act ("CPA"), Colorado residents have certain rights around the collection, use, and sharing of their Personal Information. CarSaver does not sell your Personal Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. CarSaver does not engage in "targeted advertising" as that term is defined in the CPA. CarSaver collects various categories of PII when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information." If you are a resident of Colorado, you may (1) ask what personal data has been collected about you, and access that information; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data, though exceptions under the CPA and other laws may allow CarSaver to retain and use certain personal data notwithstanding your deletion request; and (4) obtain a copy of your personal data.

Connecticut Residents: Your Connecticut Privacy Rights

Under Connecticut's Data Privacy Act ("CTDPA"), Connecticut residents have certain rights around the collection, use, and sharing of their Personal Information. CarSaver does not sell your Personal Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Nor does CarSaver engage in "targeted advertising" as that term is defined in the CTDPA. CarSaver collects various categories of Personal Information when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information." If you are a resident of Connecticut, you may (1) ask what personal data has been collected about you, and access that information; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data, though exceptions under the CTDPA and other laws may allow CarSaver to retain and use certain personal data notwithstanding your deletion request; and (4) obtain a copy of your personal data.

Iowa Residents: Your Iowa Privacy Rights

Under Iowa Consumer Data Protection Act ("ICDPA"), Iowa residents have certain rights around the collection, use, and sharing of their Personal Information. CarSaver does not sell your Personal Information. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Nor does CarSaver engage in "targeted advertising" as that term is defined in the ICDPA. CarSaver collects various categories of Personal Information when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information". If you are a resident of Iowa, you may (1) confirm whether we are processing your personal data; (2) access the personal data we have collected about you; (3) request the deletion of certain personal data; (4) obtain a portable copy of your personal data; and (5) opt out of targeted advertising, the sale of your personal data, and certain types of profiling.

Montana Residents: Your Montana Privacy Rights

Under the Montana Consumer Data Privacy Act ("MTCDPA"), Montana residents may have certain rights around the collection, use and sharing of their Personal Information. CarSaver does not sell your Personal Information. Similarly, CarSaver does not engage in "targeted advertising" as that term is defined in the MTCDPA. CarSaver collects various categories of Personal Information when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information". If you are a resident of Montana, you may (1) access, correct or delete your Personal Information; (2) and obtain a copy of your Personal Information.

Nevada Residents: Your Nevada Privacy Rights

Nevada's law requires website operators to provide a way for Nevada consumers to opt-out of the sale of certain information that the website operator may collect about them. CarSaver does not sell your personal information to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such a sale as required by law. If you have any questions regarding our data privacy practices or our compliance with Nevada data privacy law, please contact us through the legal department: legal@carsaver.com.

Oregon Residents: Your Oregon Privacy Rights

Under Oregon's Data Privacy Act ("ODPA"), Oregon residents have certain rights around the collection, use, and sharing of their Personal Information. CarSaver does not sell your Personal Information. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Nor does CarSaver engage in "targeted advertising" as that term is defined in the ODPA. CarSaver collects various categories of Personal Information when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information". If you are a resident of Oregon, you may: (1) know how and why we process your personal data; (2) access, correct, or delete your personal data; (3) opt out of data processing for targeted advertising, data sales, or profiling; (4) obtain a portable copy of your data; and (5) provide opt-in consent for the processing of sensitive personal data. You may send your request by email to privacy@carsaver.com.

Texas Residents: Your Texas Privacy Rights

While CarSaver does not sell Personal Information and is therefore not covered by Texas's Data Privacy and Security Act ("TDPSA"), the Company's privacy policy and practices still comply with the spirit and intent of the law. Therefore, if you are a Texas resident you can be assured that CarSaver protects your Personal Information and will use your information only as set forth in this policy. Furthermore, you have the right to (1) request to know what personal data has been collected about you, and to access that information; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data; and (4) obtain a copy of your personal data. You may send your request to privacy@carsaver.com.

Utah Residents: Your Utah Privacy Rights

Under Utah's Data Privacy Act ("UCPA"), Utah residents have certain rights around the collection, use, and sharing of their Personal Information. CarSaver does not sell your Personal Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Nor does CarSaver engage in "targeted advertising" as that term is defined in the UCPA. CarSaver collects various categories of Personal Information when you use the Service, including name, email address, and identifiers such as internet or other electronic network or device activity information. A more detailed description of the Personal Information CarSaver collects, how we use it, and with whom we share it is provided above in the sections titled "Information We Collect and How We Collect It" and "How We Use Your Information". If you are a resident of Utah, you may (1) request to know what personal data has been collected about you, and to access that information; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data, though exceptions under the UCPA and other laws may allow CarSaver to retain and use certain personal data notwithstanding your deletion request; and (4) obtain a copy of your personal data. You may send your request by email to privacy@carsaver.com.

Virginia Residents: Your Virginia Privacy Rights

Under Virginia's Consumer Data Protection Act ("CDPA"), Virginia residents have certain rights around the collection, use, and sharing of their personal data. CarSaver does not sell your personal data and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, CarSaver does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Nor does CarSaver engage in "targeted advertising" as that term is defined in the CDPA. As a Virginia resident you have the right to (1) request to know what personal data has been collected about you, and to access that information; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data, though exceptions under the CDPA and other laws may allow CarSaver to retain and use certain personal data notwithstanding your deletion request; and (4) obtain a copy of your personal data. You can submit a data rights request, or appeal denial of a request, by email to privacy@carsaver.com. We will respond to your request within 45 days.

Requests regarding your PII

As shown above, many privacy laws give consumers the right to make requests regarding their PII.

If you wish to submit a request described above, or if you have any questions about our Privacy Policy please contact us as follows:

Via email: privacy@carsaver.com

Via mail: CarSaver Management, LLC
1131 4th Avenue South, Suite 210
Nashville, TN 37210

While the privacy law of the state in which you reside may not cover CarSaver, we will gladly respond to your requests as soon as promptly and as thoroughly as possible.

Changes

We may modify our Privacy Policy, at any time and for any reason, by posting the revised Privacy Policy on our Site. Your use of our Site or Services after any such posting indicates your acceptance of our modified Privacy Policy.

Contact Us

If you have any questions or concerns regarding your privacy when using our Site or Services, please contact us at legal@carsaver.com. We will make every effort to respond promptly and address your concerns.

This site is being monitored by one or more third-party monitoring software(s), and may capture information about your visit that will help us improve the quality of our service.

AICPA SOC