Privacy Policy

1. Operator

KAYO GROUP INC, a Texas corporation, operates CloseMyCar CA and is responsible for the product's privacy practices. CloseMyCar CA is the product name, not a separate legal entity.

2. Current product status

The current status is LIVE. The application stores transaction fields, typed acknowledgements and selected photos locally in your browser. KAYO's server stores payment and access records, but the application does not send transaction contents to KAYO or analytics.

3. Information we collect

Technical and analytics information

If you allow optional analytics, the site uses a limited first-party event service and Google Analytics 4 to measure page views and the core product funnel: starting the eligibility check, its eligible or unsupported result, checkout start, a server-verified purchase, workspace access and successful local file downloads. Events can include a random session identifier, page path, product status, offer variant, device-size group, first-touch UTM campaign parameters or Google click identifier when present, and a small set of predefined event details. Analytics events do not include your name, email, VIN, title number, address, signature, transaction contents, documents, photos or free-text entries. Google Signals, User-ID, remarketing and advertising personalization are not enabled.

Payment information

Payment is handled on Stripe-hosted checkout. Stripe receives and processes payment-card and billing information under its own privacy terms. KAYO does not receive or store full card numbers through this site, but may receive transaction identifiers, payer contact details, payment status, receipts, refund information and fraud-prevention signals from Stripe.

Local transaction information

The application may store seller and buyer names, buyer address, sale and handoff dates, vehicle description, license plate, the last five VIN characters, odometer reading, optional sale price, checklist timestamps, typed acknowledgements and selected photos in IndexedDB on the device. Photos are resized and re-encoded before storage. This information is used to continue the workflow and generate local PDF and JSON files. It is not uploaded to KAYO. Clearing browser storage, private-browsing cleanup or using the in-app delete action may remove it.

Access information

KAYO stores customer email, Stripe and payment status identifiers, a random workspace identifier and hashed access-token records so it can verify payment, send a short-lived access link, recover access and support refunds. Raw access tokens are not stored in D1. After a Stripe return, this browser tab may retain the checkout identifier for up to 30 minutes to retry payment verification after a delay or reload. This essential access check works without analytics consent and does not itself record an analytics purchase.

4. Why we use information

• to provide, verify and support a paid workspace;
• to process and reconcile purchases and refunds through Stripe;
• to deliver and recover access through transactional email;
• to understand site and workflow performance without collecting transaction contents;
• to protect the site, prevent abuse and diagnose errors;
• to comply with law and enforce the Terms.

5. Purchase and service communications

KAYO may use the purchase email to send access, recovery, receipt-related and support communications needed to provide the product. These transactional messages are not marketing. If KAYO later offers optional marketing, it will request any consent required by applicable law and provide a practical unsubscribe method.

6. Service providers and disclosures

KAYO uses OpenAI Sites to host the website and Cloudflare to provide the domain, API security and D1 database used for payment/access records and first-party analytics. If you allow optional analytics, Google processes limited analytics events through Google Analytics 4. Stripe independently processes payment data. Resend processes purchase email addresses and message-delivery data to deliver access and recovery messages. Providers may process information for the services they supply and their own legally permitted purposes. KAYO may also disclose information when reasonably necessary to comply with law, protect rights or security, complete a corporate transaction or act on your direction.

7. Cookies and similar technologies

The site does not add advertising cookies. The Google tag, analytics storage and product measurement events remain off until you select “Allow analytics”; selecting “Decline” also prevents first-party analytics requests. Your choice is saved in local storage and can be changed using the button below. If allowed, the site uses browser storage for a random analytics session identifier, first-touch UTM campaign values or Google click identifier, and Google Analytics cookies used for audience measurement. Withdrawing consent removes the saved first-touch campaign values and referral attribution from this browser. Cloudflare and hosting or security services may use essential technologies needed to deliver or protect the site.

Review analytics choices

8. Retention

First-party analytics events are retained for up to 90 days. Google Analytics event data is configured for the shortest practical event-level retention available for the property, while aggregated reports may remain available longer. Hashed network identifiers used for rate limiting are retained for up to 2 days. Access sessions expire after 180 days unless revoked sooner. Payment and order records may be retained as needed for accounting, fraud prevention, refunds, disputes and legal obligations. Local transaction information remains on the user's device until browser storage is cleared or the in-app delete action is used.

Partner referrals

If you allow optional analytics, a valid partner link may save a first-party referral cookie (with browser storage as a fallback) for the partner's attribution window, normally 30 days and no more than 90 days. We record an anonymous reference, first and most recent referral dates, landing path and campaign labels. A later direct visit does not replace a valid referral. Declining analytics prevents this referral storage; withdrawing consent removes it from your browser. Purchases still work without referral tracking.

For attributed purchases, Stripe checkout metadata and our accounting records link the verified payment to a partner and commission. Refunds adjust the commission. Partners do not receive customer names, email, card details, vehicle information, documents or photos from this system. Unconverted referral visits are deleted 90 days after their attribution window expires by a daily cleanup; attributed financial and audit records are retained for accounting, refunds and legal obligations. No third-party referral pixel or cross-site tracking is required.

9. Deletion and other requests

You may request access, correction or deletion of server-side personal information by contacting privacy@closemycar.com. KAYO may need to verify the request and may retain information when required by law, for fraud prevention or to establish legal claims. Local transaction data must be deleted on the device where it is stored.

10. California privacy disclosures

To the extent the California Consumer Privacy Act, as amended, applies to KAYO and a request, California residents may have rights to know, correct or delete personal information and to limit or opt out of certain uses. KAYO does not intentionally sell or share personal information for cross-context behavioral advertising. Contact the privacy address below to submit a request.

11. Security

KAYO uses reasonable administrative and technical safeguards appropriate to the service stage, but no internet service is completely secure. The site does not claim end-to-end encryption. Transaction contents stay in browser storage on the user's device; protect the device, download the final files and delete local data when it is no longer needed. Do not submit vehicle documents through support or marketing forms.

12. Children

CloseMyCar CA is intended for adults involved in vehicle transactions and is not directed to children under 13. KAYO does not knowingly collect personal information from children through the product.

13. External links

The site links to California government pages and Stripe. Their privacy practices are governed by their own policies. KAYO is not responsible for third-party sites.

14. Policy updates

KAYO may update this policy as the product, providers or law changes. A new “Last updated” date will be shown. Material changes will be communicated when required.

15. Contact

KAYO GROUP INC
Development legal address required
Privacy: Development privacy email required
Support: Development support email required