Privacy Policy

Last updated: March 13, 2026

1. Information We Collect

We collect information across three categories when you use Carvoza:

Account Data

Information you provide when creating an account, including your name, email address, organization name, and authentication credentials (such as OAuth tokens from Google sign-in).

Rental Data

When you use our car rental services, our system processes the data in your bookings to generate enriched results. This includes information you enter into booking records (such as names, emails, and company names) as well as AI-generated rental records produced by our booking details.

Usage Data

We collect data about how you use the Platform, including booking configurations, booking history, and general platform interactions. We also collect technical data such as browser type, IP address, and device information.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Platform and its data rental services
  • Process your booking data using AI models
  • Communicate with you about your account, rental records, and product updates
  • Improve our AI models, booking accuracy, and Platform performance using anonymized and aggregated data
  • Ensure the security and integrity of our Platform and prevent abuse
  • Comply with legal obligations

3. AI and Third-Party Services

Carvoza uses AI models, including Anthropic's Claude, to power booking details in your bookings. Data from your booking records is sent to these AI providers to generate rental records. We select AI providers that maintain appropriate data handling and privacy practices.

You should be aware that your booking data is processed by these third-party AI services in order for the rental features to function. We recommend reviewing our providers' privacy policies for additional information about their data practices.

4. Data Processing and Storage

Booking data you enter is stored securely on our servers for the duration of your account. Rental results are stored alongside your booking data. You can delete individual rows, bookings, or your entire account data at any time.

5. Data Retention

  • Account data is retained for as long as your account is active or as needed to provide services.
  • Booking and rental data is retained for as long as your account is active. You can delete bookings and their data at any time.
  • AI processing logs are retained for a limited period for debugging and service improvement purposes, then deleted.
  • API keys and OAuth tokens are encrypted in transit and at rest.

You may request deletion of your account and associated data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS) and at rest
  • Access controls and organization-based permissions
  • Secure handling of API keys and OAuth tokens — encrypted and never exposed in logs
  • Regular security assessments of our infrastructure

While we take reasonable measures to protect your data, no system is completely secure. You are responsible for maintaining the security of your account credentials.

7. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including the United States and other regions where our infrastructure providers and data provider partners operate. By using the Platform, you consent to the transfer and processing of your data in these jurisdictions. We take steps to ensure that data transfers comply with applicable data protection laws.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request deletion of your personal data, subject to legal retention requirements
  • Portability — request a machine-readable copy of your data
  • Restriction — request that we restrict processing of your data in certain circumstances
  • Objection — object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@carvoza.com. We will respond to your request within 30 days.

9. Children's Privacy

Carvoza is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at claudio@goated.ventures.