Privacy Policy

Last updated: May 7, 2026

Cars Rootz is operated by Rootz Corp. This policy explains what data we collect, why, and how we handle it. We keep it simple because our model is simple: we help buyers find cars and connect with dealers.

What We Collect

Vehicle data — Make, model, year, price, mileage, photos, VIN, dealer information. All sourced from publicly available data: dealer website sitemaps (published for Google), the NHTSA vPIC API (free US government data), and dealer listing pages.

Shopping sessions (Bridge Pages) — When you or your AI creates a shopping session, we store:

• Session preferences (budget, makes, location)
• Vehicles you save and notes about them
• Messages between you, your AI, and dealers
• Trade-in vehicle info and photos (if you provide them)
• Visit codes for dealer check-ins

Email address — Only if you choose to provide it for dealer reply notifications. You control the mode: BCC (dealer never sees your email), CC (dealer can see it), or none.

Server logs — IP address, browser/agent type, pages visited, and response times. We use this to understand how the service is used and to fix problems. We do not use third-party analytics (no Google Analytics, no tracking pixels, no cookies).

AI agent identity — When an AI agent uses our tools, we record which agent (Claude, Grok, GPT, etc.) and what actions it took. This helps us improve the service for AI agents and their users.

Feedback — If you or your AI submits feedback via the cars_feedback tool, we store the message, category, rating, and agent identity.

What We Do NOT Collect

• We do not use cookies
• We do not track you across other websites
• We do not use third-party analytics or advertising trackers
• We do not sell or share your personal data with third parties
• We do not require account creation or passwords (sessions are accessed by URL)

How We Use Your Data

• To show you vehicles that match your search criteria
• To maintain your shopping session across visits
• To send interest emails to dealers on your behalf
• To forward dealer replies to your Bridge Page (and optionally to your email)
• To generate visit codes for dealer check-ins
• To improve the service based on usage patterns and feedback
• To send you a daily status report (team emails only, not users)

Dealer Communication

When you signal interest in a vehicle, we email the dealer on your behalf from an address like interest-{code}@cars.rootz.global. The dealer sees your vehicle preferences and any message you include, but NOT your personal email address (unless you choose CC mode). Dealer replies are routed back to your Bridge Page.

Data Retention

• Active shopping sessions are kept as long as they have activity
• Vehicle data is refreshed daily from public sources
• Server logs are retained for operational purposes
• You can request deletion of your session data by emailing cars@rootz.global

Data Security

All data is transmitted over HTTPS (TLS). Emails are signed with DKIM and verified with SPF. Session URLs use random hashes that are not guessable. We do not store passwords because we do not use passwords — sessions are accessed by their unique URL.

Children

This service is not directed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy as the service evolves. Material changes will be noted on this page with an updated date.

Contact

Questions about privacy? Email cars@rootz.global

Rootz Corp — rootz.global