CarDana Privacy Policy

LAST UPDATED: 2/17/2025

This Privacy Policy (the “Policy”) describes how CarDana, Inc., and its affiliates (“CarDana,” “we,” and “our”) collect, use, store, and share information, including personal data, about visitors to our website(s) (collectively, the “Site”) and users of our services and products provided through the Site and on our web applications, hosted applications, mobile or other downloadable applications, and successors thereof, including any application programming interfaces and associated software (collectively, the “Services”).

  1. INFORMATION WE COLLECT

We collect information about you in the following ways:

Information You Give Us. This includes:

  • the personal data you provide when you register to use the Services, including your‎ name and email address;
  • the personal data you provide when you submit your vehicle information;
  • the personal data you provide when you report a problem with the Services or when we provide you with customer support;
  • the personal data you provide when you connect any payment provider through the Services or otherwise;
  • the personal data you provide when the Services make a donation on your behalf;
  • the personal data you provide in response to surveys, contests, order forms or other outreach activities; and
  • the personal data you may provide when you correspond and communicate with us by phone, email, social media or otherwise, including your name, contact information, and the contents of the message.

Information We Get from Others. We may also get information about you from other sources, for example, if you have agreed to share information with one of our third party providers they may provide us with that information.

Information Automatically Collected. We automatically collect information about you and your computer or mobile device when you access our Site and use the Services. For example, we may log your computer or mobile device operating system name and version, manufacturer and model, browser type, browser language, screen resolution, the website you visited before browsing to the Site or Services, pages you viewed, how long you spent on a page, access times and information about your use of and actions on the Services. We collect this information about you using cookies. Please refer to the sections on cookies and Pixel Tags below.

Feedback. If you provide feedback to us, we may use and disclose such feedback on our Site and Services, provided we do not associate such feedback with your personal data without your express consent.

  1. COOKIES

What are cookies?

We collect information using “cookies.” Cookies are small data files stored on the hard drive of your computer or mobile device by a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them) to provide you with a more personal and interactive experience on the Site and Services.

We use two broad categories of cookies: (1) first party cookies, served directly by us to your computer or mobile device, which are used only by us to recognize your computer or mobile device when it revisits our Site or Services; and (2) third party cookies, which are served by service providers on our Site and Services, and can be used by such service providers to recognize your computer or mobile device when it visits other websites.

Cookies we use

Our Services uses the following types of cookies for the purposes set out below:

Type of Cookie: Essential Cookies
Purpose: These cookies are essential to provide you with services available through our Services and to enable you to use some of its features. For example, they allow you to log in to secure areas of the Services, identify a referring affiliate and help the content of the pages you request load quickly. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.

Type of Cookie: Functionality Cookies
Purpose: These cookies allow the Services to remember choices you make when you use our Site and Services, such as remembering your language preferences, remembering your login details and remembering open projects. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the Services.

Type of Cookie: Analytics and Performance Cookies
Purpose: These cookies are used to collect information about traffic to our Services and how users use our Site and Services. The information gathered does not identify any individual visitor. The information is aggregated and anonymous. It includes the number of visitors to the Services, the websites that referred them, the pages they visited on the Services, what time of day they used the Services, whether they have visited our Site or used the Services before, and other similar information.  We use this information to help operate the Services more efficiently, to gather broad demographic information and to monitor the level of activity on the Services.

We may use Google Analytics for this purpose. These services use their own cookies, and they are only used to improve how the Services works.

You can find out more information about Google Analytics cookies here:

https://developers.google.com/analytics/resources/concepts/gaConceptsCookies

You can find out more about how Google protects your data here:

www.google.com/analytics/learn/privacy.html.

  1. BROWSER LOCAL STORAGE

We also store data locally on your device to enhance the user experience on our Site and Services. For example, browser local storage allows us to save the state of your current page so that when you return at a later time or refresh the browser, the page will remain the same. We may also use browser local storage to: (i) save a list of items the user last used on the Site or Services (such as events and properties the user selected) so we can display “recently viewed items”; or (ii) marking once a user has seen a tutorial, video, tooltip or onboarding flow so that the user only sees the content one time.

  1. PIXEL TAGS

We may also use pixel tags (which are also known as web beacons and clear GIFs) to track the actions of users on our Site and Services. Unlike cookies, which are stored on the hard drive of your computer or mobile device by a website, pixel tags are embedded invisibly on webpages. Pixel tags measure the success of our marketing campaigns and compile statistics about usage of the Site and Services so that we can manage our business more effectively. The information we collect using pixel tags is not linked to our users’ personal data.

  1. LOCATION TRACKING

We may use location information provided to us by third party services such as Google Analytics.  We do not store your location information on the Services, although we may maintain de-identified location data in order to analyze aggregated trends and metrics.

  1. USING YOUR PERSONAL DATA

We may use your personal data as follows:

  • to provide, operate, maintain, analyze, debug and improve the Services;
  • to personalize the Services, content, and features to match user preferences, interests, or profiles;
  • to manage your User Account (if you have one), including to communicate with you regarding your User Account or your use of the Services and/or Site;
  • to respond to your comments and questions and to provide customer service;
  • to send information including technical notices, updates, security alerts, and support and administrative messages;
  • to send you marketing e-mails about our products and services, upcoming promotions, requests for feedback, contests, surveys, information about our partners and affiliates, and other news.  You may opt out of receiving such information at any time, and such marketing emails tell you how to do so. Please note, even if you opt out of receiving marketing emails, we may still send you non-marketing emails (for example, emails about your user account or our business dealings with you); 
  • to process payments you make via the Services (which are processed using a third party provider) or make donations on your behalf;
  • to monitor and analyze trends, usage, and activities in connection with our Services;
  • as we believe necessary or appropriate (a) to comply with applicable laws; (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities; (c) to enforce our Policy and Terms; and (d) to protect our rights, privacy, safety or property, and/or that of you or others; and
  • as described in the “Sharing of your Personal Data” section below.
  1. SHARING YOUR PERSONAL DATA

We may share your personal data as follows:

  • Third Parties Designated by You. We may share your personal data with third parties where you have provided your consent to do so, including, without limitation, donation platforms.
  • Our Third Party Service Providers. We may share your personal data with our third party service providers who provide services such as payment processing, title searches, vehicle pickup, vehicle sales and actions, customer service, email delivery, cloud storage, database infrastructure, and other similar services. We do not retain any personal data or financial information such as credit card numbers in connection with the processing of payments. Rather, all such information is provided directly to such third party processors, whose use of your data is governed by their privacy policy.
  • Corporate Restructuring. We may share personal data when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
  • To Protect Us or Others. We may access, preserve, and disclose information associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
  1. ANONYMIZED DATA

We may create anonymized and de-identified data from the personal data we receive about you and other individuals whose personal data we collect. Anonymized data might include analytics information and information collected by our use of cookies.  We make personal data into anonymized data by excluding information (such as your name) that makes the data personally identifiable to you.  We use this anonymized data for our general business purposes and may share this anonymized data with third parties.

  1. THIRD-PARTY SITES

Our Service may contain links to third-party websites and features, including through sign-up options.  This Policy does not cover the privacy practices of such third parties. These third parties have their own privacy policies and we do not accept any responsibility or liability for their websites, features or policies.  Please read their privacy policies before you submit any data to them.

  1. YOUR CHOICES

Depending on where you reside and the types of information that we collect from you, you have various rights and choices surrounding the collecting, processing, sharing and selling of your personal data. Within this section is a list of general rights that you have, with additional rights listed in this Policy below for specific locations.

We strive to timely respond to all requests that we receive from individuals who wish to exercise their data privacy and protection rights in accordance with applicable law. You can contact us with your request by sending an email to privacy@cardana.co or as otherwise described in this Policy.

Opting Out of Providing Personal Data or Deleting Account.

Please note that while you can always opt not to disclose personal data to us, some personal data may be needed to set up an account with us or to take advantage of some features on our Site. You may be able to add, update, or delete information within an account you create. When you update information, however, we may maintain a copy of the unrevised information in our records. You may also request deletion of your account by emailing privacy@cardana.co. However, some information may remain in our records after your deletion of such information from your account to meet our legal, business or contractual obligations. We may use any aggregated data derived from or incorporating your personal data after you update or delete it, but not in a manner that could reasonably be used to identify you personally, and we may also retain and continue to use your non-personally identifiable information.

Disabling cookies

You can typically remove or reject cookies via your browser settings. In order to do this, follow the instructions provided by your browser (usually located within the “settings,” “help” “tools” or “edit” facility).  Many browsers are set to accept cookies until you change your settings.

Further information about cookies, including how to see what cookies have been set on your computer or mobile device and how to manage and delete them, visit www.allaboutcookies.org.

If you do not accept our cookies, you may experience some inconvenience or be unable to use the Services. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit the Services.

Do Not Track.

Some web browsers incorporate a “Do Not Track” (“DNT“) or similar feature that signals to websites that a user does not want to have the user’s online activity and behavior tracked. If a website that responds to a particular DNT signal receives the DNT signal, the browser can block that website from collecting certain information about that browser’s user. Not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason, the Site may not respond to DNT signals.

  1. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have the rights outlined in this section, and in accordance with the CCPA, as amended. Please see the “Exercising Your Rights” sub-section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Policy and you are a California resident, the portion that is more protective of your personal data shall control. If you have any questions about this section or whether any of the following applies to you, please contact us at privacy@cardana.co.

Right to Access

You have the right to request certain information about our collection and use of your personal data over the past 12 months. Assuming verification of your identity, we will provide you with the following information:

  1. The categories of personal data that we have collected about you.
  2. The categories of sources from which that personal data was collected.
  3. The business or commercial purpose for collecting, selling, or sharing your personal data.
  4. The categories of third-parties with whom we have shared your personal data.
  5. The specific pieces of personal data that we have collected about you.
  6. If we have disclosed your personal data for a business purpose over the past 12 months, we will identify the categories of personal data shared with each category of third party recipient.

If we have sold your personal data over the past 12 months, we will identify the categories of personal data purchased by each category of third party recipient.

Right to Deletion

You have the right to request that we delete the personal data that we have collected from you (or your household). Note that this deletion right does not include personal data we have collected from third-party sources. Furthermore, under the CCPA, this deletion right is subject to certain exceptions: for example, we may need to retain your personal data to provide you with services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

Exercising Right To Access and/or Right to Deletion

If you are a California resident, and to exercise the rights described above, you (or someone acting under your express authorization) must send us a request that (a) provides sufficient information to allow us to verify that you are the person about whom we have collected personal data, and (b) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. If someone is submitting a request on your behalf, they must further (c) provide proof that they are authorized to act for you in this regard. In some cases, we may request additional information (such as your phone number or email address) in order to verify your request. If we cannot verify your identity, we will be unable to process your request to know/access, correct or delete.

Each request that meets both of these criteria will be considered a “Valid Request“. We may not respond to requests that do not meet these criteria. We will only use personal data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request within 45 days of receipt. If we are not able to respond to your request within 45 days, we will let you know that we may need additional time to respond, up to 90 total days. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

Emailing us at: privacy@cardana.co

Right to Opt-Out of “Sale” or “Sharing” of Personal Data

The CCPA defines “sale” to include sharing or disclosing of personal data with a third-party for monetary or other valuable consideration. This may include when we share information about you that is associated with device identifiers with third-parties for targeted advertising purposes, and as generally described above. The CPRA further defines “sharing” as disclosing, making available, transferring, or communicating a consumer’s personal data to a third party for “cross-context behavioral advertising”, whether or not for monetary or other valuable consideration.

There are circumstances where disclosure of personal data with third-parties is not considered to be a sale. For example, we may disclose personal data with service providers who work on our behalf if the service provider agrees not to use that personal data for other purposes. In addition, you may intentionally direct us to disclose information to a third-party, which is also not a sale.

The CCPA gives California residents the right to direct a business that sells or shares personal data about that consumer to third-parties not to sell or share such information. To this end, if you desire to opt out, please send an email to: privacy@cardana.co with the subject line “California Do Not Sell Request” as well as the name and email associated with the account.

Once you have submitted an opt-out request, we will not ask you to reauthorize the sale or sharing of your personal data for at least twelve (12) months. However, you may change your mind and opt back in to personal data sales at any time by emailing us at: privacy@cardana.co.

Right to Correct Inaccurate Personal Data

The CCPA provides California residents with the right to request the correction of inaccurate personal data kept by businesses. Upon submission of a valid request by a California resident, and verification by us of the same, we shall use commercially reasonable efforts to correct inaccurate personal data identified by you.

No Discrimination For Exercising Your Rights

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of persona data that we receive from you.

No Discrimination For Exercising Your Rights

Authorized agents may also submit requests to us in the same way that individuals can submit requests. We may request that any authorized agents verify their identity, including by providing information about themselves, such as their name, email, phone number, and address. We may also contact consumers directly to confirm the authority of the authorized agent.

California Invasion of Privacy Act

By using the Services, you consent to our collection, use, and disclosure of your information consistent with this Policy, to the extent such information falls under any provision of the California Invasion of Privacy Act.

California Shine The Light Law

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to obtain from us once a year, free of charge, a list of third-parties to whom we have disclosed personal data (if any) for direct marketing purposes in the preceding calendar year. If you are a California resident and you wish to make such a request, please send an e-mail with “California Privacy Rights” in the subject line to privacy@cardana.co.

  1. ADDITIONAL INFORMATION FOR NEVADA RESIDENTS

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal data to third-parties who intend to license or sell that personal data. You can exercise this right by contacting us at privacy@cardana.co with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.

Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.

We will respond to verified requests within 60 days after we receive the request and may need to extend our response by up to 30 days.

  1. ADDITIONAL INFORMATION FOR RESIDENTS OF ALL OTHER STATES

If you are a resident of a state in the United States not otherwise mentioned in this Policy, we shall use our best efforts to honor your request to either delete, restrict the use of your personal data and opt-out of the sharing of your personal data with third parties. If there are any conflicts between this section and any other provision of this Policy and you are a California resident, the portion that is more protective of your personal shall control. If you have any questions about this section or whether any of the following applies to you, please contact us at privacy@cardana.co.

  1. SECURITY

We use reasonable organizational, technical and administrative measures to protect personal data within our organization. Unfortunately, transmission of information via the internet is not completely secure, nor can we guarantee the security of any transmission or storage system. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us as set forth below.

  1. RETENTION

We retain personal data for as long as necessary to provide the products and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes.

  1. OUR POLICY ON CHILDREN

Our website and platform are not designed for or targeted to children under the age of 13. No one under 13 is authorized to use our Services. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us using the details above. We will delete such information from our files as soon as reasonably practicable.

  1. CHANGES TO THIS POLICY

We will post any modifications or changes to the Policy on this page.  We reserve the right to modify the Policy at any time, so we encourage you to review it frequently.  The “Last Updated” legend above indicates when this Policy was last changed. If we make any material change(s) to the Policy, we will notify you via email and/or post a notice on the Services prior to such change(s) taking effect.

  1. CONTACT INFORMATION

If you have any questions, comments or concerns regarding our Policy and/or practices, please send an e-mail to privacy@cardana.co All other inquiries should be directed to CarDana’s support page.  Mail may be directed to:

CarDana, Inc.
Attn: Privacy
PO Box 4904

Laguna Beach, CA  92652

Or: privacy@cardana.co