This Privacy Policy explains how CarGurus, Inc. ("CarGurus," "we," "us," or "our") collects, uses, shares, and protects information in connection with the DealerHQ browser extension, the dealerhq.ai website, the DealerHQ daily briefing email, and related services (together, the "Service").
DealerHQ is a business tool for automotive dealership personnel. The Service provides an AI advisor and operational intelligence platform that helps dealership staff analyze inventory, market conditions, pricing, and appraisals, and surfaces daily briefings and recommendations. This policy applies to the people who use the Service on behalf of a dealership ("you") and to the data processed through it.
Account, identity, and authentication information. When you access the Service, we collect information that identifies and authenticates you, such as your name, business email address, role or job title, the dealership or dealer group you are associated with, and session tokens from your existing DealerHQ login. The extension does not collect or store separate passwords.
Dealership operational data. To provide analysis, briefings, and appraisals, the Service processes business data associated with your dealership. This may include vehicle inventory data, VINs, pricing and valuation inputs, appraisal inputs, market and competitive data, and related operational information that you enter or that is retrieved on your dealership's behalf.
Content you provide and website content. We collect the questions, prompts, and other content you submit through the chat interface and other features. When you use on-page features, the extension reads page content to detect vehicles (such as VINs, mileage, and asking prices) and, only when you choose to share a page, sends that page's vehicle details to the Service to give the assistant context.
Usage and log data. We collect information about how you interact with the Service, including features used, pages and screens viewed, actions taken, timestamps, and diagnostic and error logs.
Technical data. We collect technical information such as browser type and version, extension version, operating system, device identifiers, and IP address.
Integration data. Where your dealership has authorized it, the Service may access data from third-party systems used by the dealership (for example, dealer management systems and data providers) in order to perform its functions. We access this data only as authorized and only to provide the Service.
We do not intentionally collect sensitive personal information, and we do not design the Service to collect consumer financial account credentials, government identifiers, health information, or similar sensitive categories.
We collect information in three ways: directly from you when you use the Service or communicate with us; automatically as you interact with the Service, through log files and similar technologies; and from authorized third-party integrations that your dealership has connected to the Service.
We use the information we collect to:
The Service uses artificial intelligence models to analyze data and generate synthesis, recommendations, briefings, and appraisals. To do this, content and data described in this policy are processed by AI models operated by us or by our AI model providers acting as our service providers. We contractually require these providers to process the data only to provide the service to us and not to use it for their own independent purposes.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share information only in the following circumstances:
Service providers and sub-processors. We share information with vendors that perform services for us, such as cloud hosting and data storage, AI model processing, and analytics. These providers are permitted to use the information only to provide services to us.
Within your dealer organization. Where the Service is provided to a dealer group, information may be made available to authorized personnel within that organization consistent with the access your organization has configured.
Legal and safety. We may disclose information where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of DealerHQ, our users, or others.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
Our collection, use, and transfer of information received through the Service adhere to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data only to provide and improve the Service's user-facing features, we do not sell it, and we do not use or transfer it for purposes unrelated to the Service.
We retain information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. Retention periods vary based on the type of data and the purpose for which it is processed.
We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, and alteration, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. Because DealerHQ typically processes data on behalf of a dealership, some requests may be directed to your dealership as the party that controls the data. To exercise a right or ask a question, contact us using the details in Section 14.
You can stop the extension's data collection at any time by disabling or removing the extension from your browser.
The DealerHQ extension requests only the permissions necessary to provide its features. It accesses page content and connects to DealerHQ services in order to deliver chat, daily briefing, VIN analysis, and appraisal functionality. The extension does not access browsing activity unrelated to the Service, and it does not collect data for advertising.
We operate in the United States, and information we process may be stored and processed in the United States or other countries where we or our service providers operate. Those locations may have data protection laws different from those in your jurisdiction.
The Service is a business tool intended for dealership personnel and is not directed to children. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.
If you have questions or requests regarding this policy or your information, contact us at:
CarGurus, Inc.
1001 Boylston St, Ste 1600
Boston, MA 02115-1830
[email protected]