Privacy Policy | Cardinal AI

Cardinal Tech Group LLC (Cardinal AI)

Effective Date: June 25, 2026

Last Updated: June 25, 2026

1. Introduction

Cardinal Tech Group LLC ("Cardinal AI," "we," "us," or "our") operates the Cardinal AI platform available at cardinaltech.ai and through our iOS and Android mobile applications (collectively, the "Platform"). The Platform is an AI-powered vehicle acquisition and scoring service designed exclusively for automotive dealerships and their authorized employees.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to users of the Platform.

This Platform is intended for business use only. Cardinal AI does not serve consumers and does not collect personal information from consumers. All authorized users must be 18 years of age or older and must be accessing the Platform in their capacity as an employee or authorized representative of a licensed automotive dealership.

If you have any questions about this Privacy Policy, contact us at mrodriguez@cardinaltech.ai.

2. Who This Policy Applies To

This Privacy Policy applies to:

Dealer Users — employees, managers, and other authorized personnel of automotive dealerships who create accounts and access the Platform.
Dealership Administrators — individuals designated by a dealership to manage user accounts and data within the Platform.

This policy does not apply to vehicle buyers, consumers, or any third party who is not an authorized Platform user. Cardinal AI does not knowingly collect, process, or store information about individual consumers or vehicle buyers.

3. Information We Collect

3.1 Account Information

When a dealership registers for the Platform or when an administrator provisions a user account, we collect:

Full name
Work email address
Job title and role
Dealership name and location
Password credentials (managed securely through Auth0)

3.2 Vehicle and Inventory Data

Dealers may upload DMS (Dealer Management System) inventory data to the Platform for processing. This data may include:

Vehicle Identification Numbers (VINs)
Vehicle make, model, year, trim, mileage, and condition
Inventory status and pricing data
Other vehicle-level records included in a DMS export

This data is owned by the dealer and is uploaded at the dealer's direction. Cardinal AI processes this data solely to provide the services described in our Terms of Service. We do not sell, license, or share dealer DMS data with any third party for any purpose other than operating the Platform.

3.3 Market and Auction Data

The Platform retrieves vehicle market data from third-party data providers to generate AI-powered scoring and acquisition recommendations. This includes data from services such as Cox Automotive / Manheim, Black Book, JD Power, and Experian AutoCheck. This data concerns vehicles, not individuals, and is used solely to produce analytical outputs within the Platform.

3.4 Platform Usage Data

We collect information about how users interact with the Platform, including:

Login timestamps and session activity
Features accessed and actions taken within the Platform
Device type, operating system, browser or app version
IP address

This information is used to operate, secure, and improve the Platform.

3.5 Communications

If you contact us by email or through the Platform, we retain records of those communications to respond to your inquiries and improve our support.

4. How We Use Your Information

We use the information we collect to:

Provide the Platform — authenticate users, process uploaded inventory data, generate vehicle scoring and acquisition recommendations, and display results within the dashboard and mobile apps.
Operate and maintain the Platform — monitor performance, troubleshoot issues, and ensure security.
Communicate with users — send account-related notifications, product updates, and support responses.
Improve our services — analyze usage patterns to enhance Platform functionality and accuracy of AI models (using aggregated or de-identified data only).
Comply with legal obligations — fulfill applicable legal requirements and respond to lawful requests.

We do not use personal information to serve advertising, and we do not share any data with advertising networks or data brokers.

5. How We Share Your Information

Cardinal AI does not sell or rent personal information. We share information only as described below:

5.1 Service Providers

We share information with trusted vendors who help us operate the Platform. These service providers are contractually obligated to use data only to perform services on our behalf and are not permitted to use it for their own purposes. Our primary service providers include:

Provider	Purpose
Amazon Web Services (AWS)	Cloud hosting and infrastructure
Auth0	Identity and access management
Cox Automotive / Manheim	Vehicle market and auction data
Black Book	Vehicle valuation data
JD Power	Vehicle data and analytics
Experian AutoCheck	Vehicle history data

5.2 Legal Requirements

We may disclose information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Cardinal AI, our users, or others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, user information may be transferred as part of that transaction. We will notify affected users of any such change.

5.4 With Your Consent

We may share information in other circumstances with explicit prior consent.

6. Vehicle and DMS Data

Dealers retain full ownership of all DMS inventory data they upload to the Platform. Cardinal AI:

Processes DMS data only to deliver the services described in our Terms of Service
Does not sell, license, share, or disclose DMS data to any third party except as required to operate the Platform (e.g., AWS infrastructure)
Does not use DMS data to train AI models for any purpose outside of delivering the dealer's own scoring results
Deletes DMS data upon termination of a dealer's account in accordance with our data retention practices (see Section 8)

7. Data Security

We implement technical and organizational security measures designed to protect information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit (TLS) and at rest
Secure infrastructure hosted on Amazon Web Services
Access controls and role-based permissions
Authentication managed through Auth0
Regular security monitoring and logging

No method of electronic transmission or storage is completely secure. We encourage users to use strong, unique passwords and to contact us immediately at mrodriguez@cardinaltech.ai if they suspect unauthorized access to their account.

8. Data Retention

We retain personal account information for as long as an account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements.

Upon termination or cancellation of a dealer account, we will delete or de-identify associated user and DMS data within 90 days, unless a longer retention period is required by law or for legitimate business purposes such as dispute resolution.

9. Your Rights

Authorized users may request to:

Access the personal information we hold about them
Correct inaccurate account information
Delete their account and associated personal data, subject to any legal retention obligations

To exercise these rights, contact us at mrodriguez@cardinaltech.ai. We will respond within a reasonable timeframe. Deletion of a user account may be subject to the dealership administrator's consent where applicable.

10. Mobile Applications (iOS and Android)

The Cardinal AI Platform includes mobile applications available on the Apple App Store (iOS) and Google Play Store (Android). Our mobile apps:

Collect only the information described in this Privacy Policy
Do not access device contacts, photos, camera, or microphone unless a specific feature requires it and explicit permission is granted
Do not track users across third-party apps or websites
Do not serve advertising or share data with advertising networks
Comply with Apple App Store and Google Play Store developer policies

iOS Users: Our app does not use Apple's advertising identifier (IDFA) or any cross-app tracking framework. Our data practices are described in our App Store privacy nutrition label, which is consistent with this Privacy Policy.

Android Users: Our app complies with Google Play's Data Safety requirements. Our data collection and sharing practices are as disclosed in the Data Safety section of our Play Store listing.

11. Business Users — No Consumer Data

The Platform is designed for use by automotive dealership employees only. Cardinal AI does not:

Market to or collect data from consumers or vehicle buyers
Process personal data of individual consumers
Provide any service directly to consumers

Users who are not authorized dealership employees should not use this Platform. If you believe information about you has been collected in error, contact us at mrodriguez@cardinaltech.ai.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Florida. Any disputes arising under this policy shall be subject to the jurisdiction of the courts of the State of Florida.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where appropriate, notify users by email or through the Platform. Continued use of the Platform after updates constitutes acceptance of the revised policy.

14. Contact Us

For questions, concerns, or requests related to this Privacy Policy, contact:

Cardinal Tech Group LLC
Cardinal AI
mrodriguez@cardinaltech.ai
https://cardinaltech.ai