Last updated: July 8, 2026.

This Privacy Policy explains how 18092516 Canada Inc. o/a CarcoCRM ("CarcoCRM", "we", "us", or "our") collects, uses, discloses, and protects personal information. We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Scope and our role

This policy covers personal information we handle as an organization: visitors to our websites, prospects, and the dealership staff who hold CarcoCRM accounts. When a dealership uses CarcoCRM to manage its own customers and inventory, the dealership is the controller of that customer information and CarcoCRM acts as its service provider (processor). Our handling of that customer information is governed by our Data Processing Agreement and the dealership's own privacy practices.

2. Information we collect

Account and contact information you provide when you request a demo, start a trial, or open an account, such as your name, business name, email address, phone number, province, and role.
Usage information generated when you use our websites and product, such as pages viewed, features used, device and browser type, and approximate location derived from your IP address.
Cookies and similar technologies, as described in our Cookie Policy.
Communications you send us, including support requests and messages.

3. How we use personal information

To provide, maintain, secure, and improve our websites and the CarcoCRM product.
To set up accounts, process trials and subscriptions, and provide support.
To communicate with you about your account, service updates, and, where permitted, news about products and features. You can opt out of marketing messages at any time.
To understand how our websites are used and to measure marketing performance.
To detect, prevent, and respond to fraud, abuse, and security incidents.
To meet legal and regulatory obligations.

4. Consent and legal basis

We collect, use, and disclose personal information with your consent, which may be express or implied depending on the sensitivity of the information and the purpose. By providing information or using our services, you consent to the practices described here. You may withdraw consent at any time, subject to legal and contractual limits, by contacting us. We will explain the consequences of withdrawal where relevant.

5. Cookies and analytics

We use cookies and similar technologies for essential site functions, analytics, and advertising measurement. For details and choices, see our Cookie Policy.

6. Service providers and disclosure

We share personal information with service providers who process it on our behalf to run our business, such as hosting, communications, analytics, and infrastructure providers. These providers are bound by contract to protect the information and use it only for the services they provide to us. Our current infrastructure service providers are listed on our Subprocessors page.

Our artificial intelligence features are provided by Carco Technologies and run on our own private infrastructure. We do not send customer or personal information to any third-party artificial intelligence provider.

We may also disclose personal information where required or permitted by law, to protect our rights and the safety of others, or in connection with a business transaction such as a financing, merger, or sale, subject to appropriate safeguards.

7. Where your information is stored

We host the CarcoCRM product and its primary data in Canada. Some service providers may process limited information (for example, message delivery, content delivery, or analytics) in other countries. Where that happens, the information remains subject to this policy and to contractual protections, and it may be accessible to courts, law enforcement, and regulatory authorities in those jurisdictions.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Retention

We keep personal information only as long as needed for the purposes described here, to meet legal, accounting, or reporting requirements, and to resolve disputes and enforce our agreements. We then delete or de-identify it.

10. Your privacy rights

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, and ask questions about our handling of it. To make a request, contact our Privacy Officer using the details below. We may need to verify your identity before responding.

11. Children

Our websites and product are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the date above and, where appropriate, provide additional notice. Your continued use of our websites and product after an update means you accept the revised policy.

13. Contact us

To reach our Privacy Officer or ask a question about this policy, email hello@carcocrm.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Our registered office is at 3-1124 Stellar Dr, Newmarket, ON L3Y 7B7, Canada.