Privacy Policy
This policy explains what information Caeruz collects, why, who it is shared with, how long it is kept and the choices you have. It covers caeruz.com, the Caeruz dealer console and the Caeruz Auctions browser extension (together, Caeruz). Caeruz is operated by Zathur, a Wyoming company (we, us).
In short: we collect what we need to run your dealership's account, we don't sell personal information, we don't show ads and we don't use tracking or analytics cookies. You can ask us for a copy of your data or to delete it at any time on the Your data page.
1. Who Caeruz is for
Caeruz is software for car dealerships. Accounts are for adults (18 or older) acting for a business. Caeruz is not directed to children, and we do not knowingly collect information from anyone under 18.
2. Information we collect
When you create an account
- Your dealership's name and website address.
- Your name, email address and password. Passwords are stored only as a one-way hash; we can't read them.
- Your phone number and address, which also become your dealership's contact details, and your preferred language.
- Your date of birth, to confirm you are 18 or older.
- If you choose Sign in with Google, Google shares your name and email address with us. We never receive your Google password.
- When you type a ZIP code, it is sent to Zippopotam.us, a free public lookup service, to fill in the city and state.
What you and your team put into Caeruz
Vehicles and their photos, videos, costs and prices; leads and your customers' contact details; sales, deals and financing applications; users, roles, payroll, commissions and advances; messages; and anything else you add. Your dealership controls this information (see section 7).
Your dealership's public website
When you sign up, and then on a schedule, Caeruz reads the public pages of the website you give us to import your vehicle listings, photos and business details. It reads only what any visitor can see.
Technical information
Our servers record the IP address, browser type and time of each request, for security, abuse prevention and troubleshooting. Your browser keeps a few items so you stay signed in and your choices are remembered; they are listed in the Cookie Policy. We do not use analytics, advertising or tracking cookies.
3. How we use information
- To provide Caeruz: create and secure your account, run the console, import your website, and show your team what their roles allow.
- To send service messages you need, such as password resets, invitations and receipts for requests. We do not send marketing email without your permission.
- To keep Caeruz secure, prevent fraud and abuse, and fix problems.
- To answer your questions and requests.
- To comply with the law and enforce our Terms of Service.
We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising.
4. AI features
Some features use AI providers to produce a result you asked for, for example describing a vehicle, reading a document you upload, or analysing a sale application. Only the information needed for that result is sent. The providers process it on our behalf under their business API terms, which by default do not use it to train their models. AI output can be wrong; check it before you rely on it.
5. Who we share information with
We share information only with service providers that run parts of Caeruz for us, under contracts that limit their use of it to providing their service:
| Provider | What it does for Caeruz |
|---|---|
| Vercel | Hosts the caeruz.com website. |
| Railway | Runs our application servers. |
| Supabase | Stores the database and uploaded files, such as vehicle photos. |
| Resend | Delivers service email. |
| Firecrawl | Reads your dealership's public website for the import. |
| OpenAI, Anthropic | AI features you use (section 4). |
| Sign in with Google, if you use it, and the web fonts inside the signed-in console. | |
| Zippopotam.us | Turns a ZIP code into a city and state at sign-up. |
| U.S. NHTSA | A public government service that decodes a vehicle's VIN and lists open recalls. |
We may also disclose information when the law requires it, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply to it. When you choose to open another service from Caeruz, such as Facebook Marketplace or WhatsApp, that service's own terms and privacy policy apply to what you do there.
6. The Caeruz Auctions extension
The extension connects your Caeruz console to Manheim and IAAI. It has no window of its own: the Auctions page on caeruz.com asks it to scan, and it runs only in your own browser.
- What it reads. When you visit Manheim signed in, it reads the session token Manheim keeps for you, and uses it to read Manheim's Buy Now listings when you run a scan from Caeruz. For IAAI it reads IAAI's search pages with the sign-in your browser already has; it does not read or store that sign-in itself.
- What it stores. In your browser's extension storage, on your computer: that Manheim session token, and Manheim's list of makes and models. The lots a scan finds are handed to the Caeruz page in your browser and kept in that browser's storage for caeruz.com.
- What it sends. It talks only to Manheim, IAAI and the Caeruz page in your own browser. It does not send your sign-ins or your scan results to our servers or to anyone else. A lot reaches your dealership's records only when someone with access moves it on in Caeruz. It contains no analytics, advertising or tracking.
- Staying signed in. It never sees or stores your Manheim or IAAI password. When a session has run out, it opens the site in a background tab for a few seconds so the site can renew your sign-in, then closes the tab.
- Alerts. If a scan you left running finds lots priced under market, it can show up to five browser notifications naming them.
- Removing it. Uninstalling the extension deletes everything it stored. Clearing caeruz.com's site data removes saved scan results.
Caeruz Auctions' use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
7. Your dealership's customers and staff
When a dealership stores information about its customers, applicants or employees in Caeruz, the dealership decides why and how that information is used, and we process it on the dealership's behalf, as its service provider. The dealership is responsible for giving those people any notices and obtaining any consents the law requires. If you are a customer of a dealership that uses Caeruz, please contact the dealership about your information; we will help it respond.
8. How long we keep information
We keep account and dealership information for as long as the account is open. When an account is closed, or you ask us to delete your data, we delete it from our live systems within 30 days, unless the law requires us to keep something longer. When a free trial ends without a subscription, we keep the data for 30 days in case you subscribe, then delete it the same way. Copies in backups are removed as those backups expire on their normal cycle. Server logs are kept for a limited time for security, then deleted.
9. Security
Caeruz is served only over encrypted connections (HTTPS). Passwords are hashed, each dealership's data is separated from every other's, access inside a dealership follows the roles its administrator sets, and our database and file storage are hosted with providers that encrypt data at rest. No system is perfectly secure; if we learn of a breach that affects your information, we will notify you as the law requires.
10. Where information is processed
Caeruz and its service providers store and process information in the United States. If you use Caeruz from elsewhere, your information is transferred to the United States.
11. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information, or close your dealership's account and delete its data;
- stop processing that relies on our legitimate interests, where the law gives you that right.
Make a request on the Your data page or by emailing support@caeruz.com. We will confirm the request comes from you, usually by replying from support@caeruz.com to the address on the account, and answer within 30 days (45 days where California law allows, with notice). You may use an authorized agent; we will ask for proof of their authority. We will not treat you differently for exercising these rights. If we decline a request, we will explain why, and you can appeal by replying to our answer.
If you are in the EU, the UK or a similar jurisdiction: we process your information to perform our contract with your dealership, for our legitimate interests in running and securing Caeruz, to comply with legal obligations, and with your consent where we ask for it. You may also complain to your data protection authority.
California residents: in the last 12 months we collected the categories described in section 2 (identifiers, contact and commercial information, internet activity limited to server logs, and professional information your dealership adds) for the purposes in section 3, and disclosed them only to the service providers in section 5. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.
12. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in Caeruz before the change takes effect. The date at the top shows when it last changed.
13. Contact
Questions, requests or complaints: support@caeruz.com. Caeruz is operated by Zathur, a Wyoming company.