What we keep, for how long, and how Carwright is built

We never sell your information, and these pages carry no analytics and no advertising pixels.

Dealers never pay us, and we never put your surname, your email or your phone number into a message to them.

Nothing goes to a dealer until you tap.

We collect only what Carwright needs to run your deal, and we say here exactly what that is.

Delete my deal and data, under the deal's settings, works at once and needs no one's approval.

One compact record with no name, no email and no ZIP is kept 180 days to answer a card dispute, and is then deleted.

If you add a mobile number and tick the texting box, Carwright may text you about your deal. Those texts are approval requests and status notices. We send no marketing texts. We do not share or sell your mobile number or your texting consent to third parties or affiliates for marketing or promotional purposes. Twilio, our texting carrier, handles your number only to deliver our texts.

Message frequency varies with your deal. Message and data rates may apply. Reply STOP to any text to stop them, or HELP for help. Your deal continues by email. We never give your mobile number to a dealer.

Social Security numbers, driver's licenses, bank or card details, credit applications or identity documents. Pasted text and the text layer of an uploaded PDF are screened for them and refused when they are found. Images and PDFs without a text layer are refused because they cannot be screened.

Uploads must be redacted first, so the text is gone, not covered. Delete the text, then export the page as a PDF without images, or use the PDF tool's redaction. Screening is a check, not a guarantee of perfect recognition. If something slips through and is found later, the file is deleted and you are asked to upload it again without it.

Carwright opens your deal in its own admin view only to run it or to answer you. Every such read is written to an audit log you can ask about. The audit log covers that admin view, not the hosting and database providers' own administration tools.

Dealers receive the vehicle, the state and ZIP, and your deal's email address. They receive the line that the request is sent for a Florida buyer through Carwright. They receive your first name only with the box ticked. If the law requires us to disclose something, we disclose only what it requires, to whom it requires.

If a breach exposes personal information about you, we will tell you within 30 days of finding it, as Florida law requires.

These companies process data for Carwright. Each sees only what its job needs.

• Supabase: the database, the sign-in link and private storage for paperwork.
• Vercel: hosting and Carwright's scheduled jobs. Our own application logs are scrubbed before they are written; Vercel keeps its request logs on its published schedule.
• Stripe: payment and refunds. Your card details go to Stripe and never pass through our servers.
• Anthropic: the language model that writes your deal plan and the Market Read and reads dealer replies into your price table. It also drafts the paperwork correction letter. It is given dealer text as data, never as instructions; how it is limited is under Security below.
• Email: your deal's email address receives through Amazon Web Services and sends through a Google Workspace mailbox. Carwright also reads dealer replies that reach that mailbox.
• Finding vehicles and dealers: MarketCheck and Ford's public listings see a vehicle and a ZIP. Brave Search sees the vehicle and dealer names. ZeroBounce sees a dealer's published address, to confirm it is live. None of them sees your name.
• Twilio: delivers texts to you if you asked for them.

Everything Carwright holds about a deal is on the deal's own pages: the record, the messages, the replies, the quotes, the checks. What is held outside those pages is listed under Retention below.

To correct the vehicle or the details before your first requests go, delete the deal and start again at no cost inside the 72-hour refund. After they go, the car description is fixed and a different vehicle is a new deal. To delete, use "Delete my deal and data" under the deal's settings; it works at once and needs no one's approval. To ask what is held, or for the audit log of who opened your deal, write to desk@carwright.com.

"Delete my deal and data" removes the deal, the dealer list, every message and reply, the quotes, the uploaded paperwork and your Market Read. It removes them from Carwright's active application storage, at once. It does not erase every copy of the correspondence at that moment: raw dealer mail is removed on a clock instead.

The mail-receiving store deletes incoming messages 30 days after they arrive. Our mailbox moves its copies of dealer mail to the trash 30 days after they are sent or received. Google empties the trash after another 30 days. Dealers keep the messages they received.

The database provider keeps its backups on its published schedule. One compact record stays: the dates of payment, approvals and sends, the dealer domains written to, the quote figures and any refund. It carries no name, no email and no ZIP. It exists only to answer a card dispute, is kept 180 days, and is then deleted.

• It cannot pull your credit. It asks for no Social Security number, date of birth or license number. It screens pasted text and PDF text for them and refuses what it finds. If one slips through and is found later, the file is deleted and you are asked to upload it again without it.
• It cannot see your card number.
• It cannot contact a dealer without your tap, and it cannot change the words after you approved them.
• It does not arrange financing and never asks for a credit application. Payment and trade stay separate from the price, and Carwright knows only that they exist. A dealer's reply may mention a rate or a lender; it stays in that reply as the dealer wrote it.
• It cannot call anyone. The optional phone number for your deal takes voicemail and texts and never dials out.
• It cannot guess a dealer's address. Dealer addresses come only from a dealership's own published pages.

A language model from Anthropic writes your deal plan and the Market Read. It also reads dealer replies into your price table and drafts the paperwork correction letter. A language model is software that reads and writes text. The requests to dealers are fixed templates with your vehicle filled in, and the model never writes them.

It works inside the rules above. It receives dealer text as data. Its answers must fit a strict shape before they touch your deal. Every figure it reports must come from the text or from a cited source or be marked not given. Every reply stays open behind the figures read from it so you can check them yourself. It cannot send anything. The status lines on your deal page come from the database, never from the model's words.

The model also writes the free Market Read and performs the paperwork comparison. For those it is sent the vehicle, the ZIP and the state, the pages it researched, and the text of the paperwork you uploaded. Carwright trains nothing on your data. The provider's published default is not to train on what its commercial customers send (the label above links the page that says so). The provider keeps what it is sent for the period its separate published retention policy states, which is not immediate deletion.

Your ZIP must be a Florida ZIP. The card's billing ZIP must be in Florida (kept only as a yes or no). You must say that you will register the vehicle in Florida. If any of the three fails, the deal never reaches a dealer. For an invited buyer whose fee is waived there is no card, so the billing check does not run. The other two checks still do, and the deal's record says so.

Carwright is run by Carwright LLC, a Florida limited liability company ("Carwright", "we"), at 7901 4th St N, Ste 300, St. Petersburg, FL 33702.

• Supabase holds the database, issues the sign-in link and stores paperwork privately.
• Vercel hosts the pages and runs Carwright's scheduled jobs.
• Stripe takes the payment and issues refunds.
• Anthropic provides the model, limited as described above.
• Your deal's email address receives through Amazon Web Services and sends through a Google Workspace mailbox.
• MarketCheck, Ford's public listings, Brave Search and ZeroBounce find vehicles and published dealer contacts; none sees your name.

Each sees only what its job needs. The privacy part above says what is kept and for how long.

Write to security@carwright.com. A report that lets us fix something before it hurts a buyer is the most useful message we can receive.

What is in scope: carwright.com, desk.carwright.com and the deal pages. The rules: test only with accounts and deals you created. Do not read, change or delete another buyer's data. No denial of service. No messages to dealers. Stop and report the moment you reach data that is not yours. What happens next: you get a reply from us, a fix or an explanation, and credit on this page if you want it. Research that follows these rules is welcome.

We claim no certification, because we hold none. No method of transmission over the Internet, or method of electronic storage, is fully secure. That is why Carwright holds as little as it can and refuses the identity documents it can recognize.