Privacy Policy

Effective October 15, 2026

Car10x provides car washes and auto detailers with an AI receptionist for calls, texts, and website chat, along with online booking and payments, websites, memberships, marketing, and customer management. This policy explains what information Car10x handles, why, who we share it with, and the choices people have.

1. Who this covers, and our role

• Businesses using Car10x and their team members. Car10x is responsible for this information.
• Customers of those businesses: people who call, text, chat with, book with, pay, or join a membership at a business that uses Car10x. Car10x handles this information on behalf of that business, following its instructions and settings. The business decides how it's used and is responsible for its own privacy practices, so questions about it are best directed to the business first.
• Visitors to car10x.com and to business websites built with Car10x.

2. Information we collect

Businesses and team members

• Account details: name, email address, and password (stored only as a secure hash).
• Business details: business name, address, phone numbers, hours, services and prices, and settings.
• Team members and their roles.
• Billing: subscription and invoice records. Card details are collected and stored by Stripe, not by Car10x.
• Usage of the service, such as AI call minutes, AI replies, and messages sent, used for billing and limits.
• If a business connects Google Calendar: access to create, update, and read events on the calendar it chooses, so bookings appear there and busy times are respected.

Customers of businesses

• Name, phone number, email address, and vehicle description and size.
• Bookings: services, add-ons, times, notes, status, and changes.
• Calls: phone numbers, times, and duration; text transcripts of conversations with the AI receptionist; and voicemail recordings. Callers are told the call may be recorded.
• Transferred calls: when a call is put through to someone at the business, which of its numbers answered. If the business turns on call recording, the conversation with its staff is recorded from when they answer and transcribed into text. Callers hear that the call may be recorded before they're put through.
• Text messages and website chat conversations with the business, including replies written by the AI.
• Payments: amounts, status, receipts, and refunds. Card details are entered on Stripe's pages and stored by Stripe, not by Car10x.
• Memberships, check-ins, and gift cards.
• Consent records: whether and when someone agreed to receive booking texts and marketing, and any opt-outs (such as replying STOP).
• For Apple Wallet member cards, technical identifiers from the device so the card can be updated.

Visitors

• Standard server logs from our hosting providers, such as IP address, browser type, and pages requested, used for security and reliability.
• On business websites, the chat conversation is kept in the browser's session storage so it survives a page change, and is cleared when the browser tab closes. Information entered in booking or chat forms is handled as described for customers above.
• If you send an inquiry from car10x.com: your name, work email, company, number of locations, phone number if you give it, and your message. We use it only to reply to you and follow up about Car10x.
• The Car10x app uses cookies to keep team members signed in, and doesn't use advertising cookies.
• On car10x.com, we may use web analytics (such as Google Analytics, through Google Tag Manager) and advertising pixels to understand how visitors find and use the site and to measure our own ads. These tools use cookies and similar technologies and collect information such as pages viewed, the site you came from, device and browser type, and approximate location. Where the law requires consent, we ask for it before using them. You can block or delete cookies in your browser, and use Google'sopt-out add-onfor Google Analytics.
• On business websites built with Car10x, the business may add analytics (such as Google Analytics or Tag Manager) or other tracking code, such as advertising pixels. That business chooses those tools and is responsible for them, including telling visitors and asking for consent where required; its own privacy policy applies. Car10x doesn't receive or use the information those tools collect.

3. How we use information

• To provide the service: answer calls, texts, and chats; book, change, and remind customers about appointments; take payments and send receipts; manage memberships and check-ins; and run the websites and marketing a business sets up.
• To send messages on a business's behalf, such as confirmations, reminders, receipts, and the follow-ups and campaigns it turns on. Marketing messages go only to people who agreed to receive them, and opt-outs are honored.
• To bill businesses for Car10x and to measure usage against plan limits.
• To provide support, keep the service secure, prevent fraud and abuse, and fix problems.
• To comply with the law.

We do not sell personal information, and we do not use the information of businesses' customers for advertising. On car10x.com we may measure visits and the performance of Car10x's own ads, as described above.

4. Artificial intelligence

The AI receptionist uses Anthropic's Claude models. To answer a call, text, or chat, the conversation and the business's details (such as services, prices, hours, and open times) are sent to Anthropic to generate a reply. Calls are converted between speech and text by Twilio and the speech providers it works with. Under its commercial terms, Anthropic does not use this information to train its models. Car10x keeps transcripts so the business can review conversations.

When someone calls or texts a business from a number the business already has, the AI receptionist can see that customer's name and recent bookings and calls with that business, so it can greet them and help faster. Because caller ID can be faked, the AI doesn't share booking details or make changes for a caller unless their phone carrier has verified the number; otherwise it texts a secure link to the number on file.

5. Text messaging

Businesses use Car10x to send and receive text messages with their customers. People can reply STOP to stop receiving texts from a business, and HELP for help. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the providers that deliver the messages on our behalf.

6. Google user data

When a business connects Google Calendar, Car10x uses that access only to add, update, and remove booking events and to read busy times on the calendar the business chooses. Car10x's use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, and don't let people read it except as needed for security, to comply with the law, or with the business's permission. A business can disconnect Google Calendar in Car10x at any time, or remove Car10x's access in its Google Account settings.

7. Who we share information with

We share information only as needed to run the service:

• With the business a customer interacts with, which can see that customer's information in Car10x.
• With the service providers below, who process it on our behalf under contract.
• When required by law, or to protect the rights, safety, and security of people and the service.
• If Car10x is involved in a merger, acquisition, or sale of assets, under commitments that protect it as described here.

8. Where information is stored

Car10x's database and application run in Canada. Some of our providers, listed above, process information in the United States or other countries, where it may be accessible to authorities under local law. We rely on our providers' contractual and security commitments when information is transferred.

9. How long we keep information

We keep information for as long as the business's Car10x account is open, so it can see its history. When a business closes its account, or asks us to delete information, we delete it, except where we need to keep records for legal, tax, accounting, or security reasons. Voicemail recordings are stored with Twilio and are deleted along with the business's other information.

Recordings of transferred calls are kept for the number of days the business chooses (from 1 to 365; 60 unless it changes it), then permanently deleted from Car10x and Twilio. Once deleted they can't be recovered, by the business or by us. Their transcripts are kept with the business's other information.

10. Security

Information is encrypted in transit (HTTPS) and at rest by our hosting providers. Access within Car10x is limited by role, passwords are stored only as secure hashes, and card details never touch Car10x's servers. No system is perfectly secure, and we'll notify affected businesses and people of a breach as required by law.

11. Your choices and rights

• Customers of a business can ask that business to see, correct, or delete their information, and can contact us if they need help. Reply STOP to any text to stop texts from that business, and use the unsubscribe link in marketing emails.
• Businesses and team members can update their information in the app, and can ask us for a copy of their information or to delete it.
• Depending on where you live, including under Canada's privacy laws, you may have rights to access, correct, or delete your information, or to withdraw consent. Contact us atsupport@car10x.com and we'll respond within the time the law requires.

12. Children

Car10x is for businesses and is not directed to children under 16. We don't knowingly collect their information; if we learn we have, we'll delete it.

13. Changes to this policy

We'll post any changes here with a new effective date. If a change is significant, we'll let businesses using Car10x know before it takes effect.

14. Contact us

Questions or requests about privacy:support@car10x.com.