Privacy Policy.

CAROSAi LLC (“CAROS,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website getcaros.com (our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to information we collect:

• On the Website.
• In email, text, and other electronic messages between you and the Website.
• Through the CAROS Revenue Operating System and related services (the “Services”).

It does not apply to information collected by us offline or through any other means, including on any other website operated by CAROS or any third party. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using the Website, you agree to this Privacy Policy.

2.1 Personal Information You Provide to Us

We collect information that you provide directly to us, including:

• Contact Information: Name, email address, postal address, phone number, and other similar contact data.
• Business Information: Company name, industry, service area, website URL, approximate annual revenue, number of employees, approximate monthly leads, and other business details.
• Account Information: Username, password, and other credentials used to access the Services.
• Communication Information: Information you provide when you contact us, request a Revenue Audit, fill out forms, or otherwise communicate with us.
• Diagnostic Tool Information: Information entered into the Revenue Leak Diagnostic tool, including average job value, missed calls per month, close rate, and other business metrics.
• Service Order Information: Information provided during the onboarding process, including integration details, third-party account access, and configuration preferences.

2.2 Information We Collect Automatically

When you access or use the Website, we automatically collect:

• Usage Details: Details of your visits to the Website, including traffic data, location data, logs, and other communication data and the resources that you access and use.
• Device Information: Information about your computer, mobile device, and internet connection, including your IP address, operating system, browser type, and device identifiers.
• Cookies and Similar Technologies: We use cookies, web beacons, and other tracking technologies to collect information about your browsing activities. See Section 9 for more information.

2.3 Information from Third Parties

We may receive information about you from third parties, including business partners, service providers, social media platforms, and publicly available sources.

We use the information we collect about you or that you provide to us for the following purposes:

• To provide, maintain, and improve the Website and Services.
• To process and complete transactions, including billing and payment processing.
• To provide customer support and respond to your inquiries.
• To send you technical notices, updates, security alerts, and support messages.
• To communicate with you about products, services, offers, promotions, and events.
• To conduct research and analysis to improve our Website and Services.
• To monitor and analyze trends, usage, and activities.
• To detect, investigate, and prevent fraudulent transactions and other illegal activities.
• To personalize and improve the Website and deliver content matching user profiles or interests.
• To carry out any other purpose described to you at the time the information was collected.

We may disclose aggregated information about our users without restriction.

We may disclose personal information that we collect or you provide as described in this Privacy Policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business, who are bound by contractual obligations to keep personal information confidential.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CAROS's assets.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Use and other agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CAROS, our customers, or others.

5.1 Data Processing

CAROS processes personal information only to provide, secure, support, improve, and administer the Services; comply with documented instructions; prevent fraud and abuse; and comply with law. We characterize our role as a service provider / processor with respect to Client Data, and as a business / controller with respect to Website visitor data.

5.2 Categories of Data

Data we process may include customer/prospect names, contact details, communications, call recordings and transcripts if enabled, service inquiries, appointment and estimate information, marketing-source and attribution information, transaction/revenue metadata, customer history, photos/videos submitted through supported channels, and other data configured by our clients.

5.3 Sensitive / Regulated Data Restrictions

We do not intentionally collect protected health information, full payment-card data, government identification numbers, highly sensitive authentication secrets, or other specially regulated data through the Website unless expressly agreed in writing.

5.4 Subprocessors

CAROS may use subprocessors and third-party services to provide hosting, CRM, telephony, messaging, AI, payments, analytics, support, and related functions. We require material subprocessors that process personal information on our behalf to maintain confidentiality and security obligations appropriate to their role.

5.5 Security Measures

We maintain commercially reasonable administrative, technical, and organizational safeguards appropriate to the nature of the data and the Services, including:

• Access controls and least-privilege practices.
• Multi-factor authentication for material administrative systems where available.
• Reasonable credential-management and offboarding procedures.
• Encryption in transit using generally accepted protocols where supported.
• Vendor and subprocessor review proportionate to risk.
• Logging and monitoring appropriate to the Services.
• Reasonable backup and business-continuity practices.
• Incident-response procedures.
• Workforce and contractor confidentiality and security obligations.

5.6 Security Incident

We will investigate confirmed security incidents involving unauthorized access to or acquisition of personal information for which notification is legally or contractually required. We will notify affected users without undue delay after confirming such an incident and will provide information reasonably available to support your response.

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

If you are a CAROS client, we will retain your information for the duration of our business relationship and for a period thereafter as required by law or for legitimate business purposes. If you are a website visitor who has not become a client, we will retain your information for 24 months, or until you request deletion, whichever comes first.

7.1 Access and Update

You may access, update, or correct your personal information by contacting us at inquiries@getcarosai.com.

7.2 Opt-Out of Marketing

You may opt out of receiving marketing communications from us by following the unsubscribe instructions included in each email or by contacting us at inquiries@getcarosai.com.

7.3 Data Subject / Consumer Requests

Taking into account the nature of processing, we will provide reasonable assistance using available functionality when you submit a legally valid access, deletion, correction, portability, or opt-out request.

7.4 California Residents (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, disclose, and sell; the right to request deletion; the right to opt out of the sale of personal information; and the right to non-discrimination. We do not sell personal information. To exercise these rights, contact us at inquiries@getcarosai.com.

7.5 European Residents (GDPR)

If you are located in the European Union, you have certain rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, contact us at inquiries@getcarosai.com.

8.1 Platform Providers

The CAROS Revenue Operating System operates on underlying third-party platforms. Your use of the Services is subject to the terms of service and privacy policies of these third-party providers.

8.2 Advertising and Analytics

We use third-party service providers to serve advertisements and analyze usage of the Website. These providers may use cookies, web beacons, and other technologies to collect information about your use of the Website and other websites.

8.3 Social Media Features

The Website may include social media features that may collect your IP address, which page you are visiting, and may set a cookie to enable the feature to function properly.

9.1 What Are Cookies

Cookies are small data files stored on your device that help us improve your experience on the Website.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Website.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

9.3 Your Choices

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies. However, if you disable cookies, some features of the Website may not function properly.

9.4 Do Not Track

We do not currently respond to “Do Not Track” signals from web browsers.

The Website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information.

We may update our Privacy Policy from time to time. If we make material changes, we will notify you by email or by means of a notice on the Website prior to the change becoming effective. Your continued use of the Website after any changes constitutes your acceptance of the revised Privacy Policy.

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

If you are a California resident and would like to submit a request under the CCPA, you may also contact us at the email address above.