This privacy policy is effective as of July 5, 2025. Please note that this privacy policy will be updated to reflect any important changes in the way we handle your personal data or any changes in applicable laws.

This privacy policy describes how Consumer AI Protection Advocates (“CAIPA” or “we” or “our” or “us”) collect, use, and disclose information about you as well as your rights and choices about such collection, use, and disclosure. This privacy policy applies to your use of any of our websites, apps, or other services that reference this privacy policy or that are otherwise described in this privacy policy as a CAIPA offering or method of information collection (collectively, the “Service”), including offline collection of information. It does not apply to information collected by third parties processing information on their own behalf or to information collected in the context of your employment with us.

While this privacy policy is intended to describe the broadest range of our personal information processing activities globally, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws. For example, the laws of a country may limit the types of personal information we can collect or the way we process that personal information. In those instances, we adjust our internal policies and/or practices to reflect the requirements of local law.

If you have any questions about our privacy practices, please contact us as set forth in the “Contact Us” section.

This privacy policy covers the following:

• How do we collect information?
• What types of information do we collect?
• Information automatically collected through your browser or device
• Information we infer
• Sensitive Information
• Information on behalf of our clients
• How do we use your information?
• How do we disclose information?
• Tracking technologies
• Other services
• Analytics and advertising
• Your rights and choices
• How is information protected and retained?
• International transfers
• Special note about children
• Changes to this privacy policy
• Contact us

How do we collect information?

We collect information about you in the following ways:

• Through your survey responses in connection with market research conducted by Consumer AI Protection Advocates or commissioned by one of our enterprise customers.
• Through your use of our website.
• Through your use of our mobile apps, and CAIPA Events.
• Through phone calls, emails, and/or other forms of communications with you.
• Through our business relationships with you. Such information is not subject to this privacy policy except as required by applicable law.
• From other sources. The categories of other sources from which we collect information include:
  • clients who ask us to process personal information on their behalf;
  • service providers acting on our behalf;
  • social media platforms where you choose to interact with us or through tools provided by these platforms;
  • automobile dealers with whom we have contractual relationships, as noted above;
  • data brokers from which we purchase demographic, location, and other data to supplement the data we collect;
  • partners with which we offer co-branded services, sell, or distribute our products, or engage in joint marketing activities; and
  • demographic or aggregate information from publicly available sources such as open government databases or other data in the public domain.

What types of information do we collect?

The information we collect sometimes includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. The categories of information we collect about you include: Information you provide to us:

• Contact identifiers, including your first and last name, email address, postal address, and phone number.
• Characteristics or demographics, including date of birth, gender, ethnicity and country.
• Credentials and authentication information, including your username, password, password hints, and other information for authentication and account access.
• Payment information, including payment instrument number (such as a credit card number), and the security code associated with your payment instrument.
• Vehicle transaction and service information, including your vehicle identification number, make and model of vehicle purchased, leased, or serviced, and details of your purchase transaction, such as lease and finance information collected as part of our PIN operations, or servicing.
• Profile information, including your interests and favorites.
• Content that you create, load, or share on the Service, such as survey responses, recordings, photos, videos and product reviews.

Please do not provide any information that we do not request.

Information automatically collected through your browser or device:

• Device identifiers, including your device’s IP address, MAC address, and device advertising ID (e.g., IDFA or AAID).
• Device information, including your device’s operating software, regional and language settings, carrier, time zone, network status, and internet service provider.
• Internet activity, including information about your browsing history and interactions, the features you use, the pages you visit, the emails, content and ads you view, the products you purchase and consider, the time of day you browse, and your referring and exiting pages.
• Non-precise location data, such as location derived from an IP address or data that indicates a city or postal code level.

Information we infer:

We infer new information from other information we collect, including using automated means to generate information about your likely preferences or other characteristics.

Sensitive information:

Some of the information we collect may be considered sensitive under applicable law. For example, in our research studies we may collect personal information that identifies your ethnic origin. To the extent any of the categories of information we collect are sensitive categories of information under applicable law, we process such information only for the limited purposes permitted by applicable law. We do not sell or use sensitive categories of information for purposes of targeted advertising or to make inferences.

Information on behalf of our clients

In connection with providing services to our clients, we collect and process information about individuals (including through Tracking Technologies, defined below) at our clients’ direction and on their behalf (“Client Data”). Client Data has historically included contact identifiers, characteristics or demographics, content, device identifiers, device information, internet activity, and non-precise location data, among other information. Our processing of Client Data is governed by the terms of our service agreements with our clients, and not this privacy policy. We are not responsible for how our clients treat the information we collect on their behalf, and we recommend you review their own privacy policies. In the event we are permitted to process Client Data for our own purposes, we will process the Client Data in accordance with the practices described in this privacy policy.

How do we use your information?

We collect and use information in accordance with the practices described in this privacy policy. In addition to the “Additional details about how we use survey research” section below, our purposes for collecting and using information include to:

• manage the Service.
• perform services requested by you and provide customer service.
• conduct market research into consumer preferences and attitudes around a variety of products and services, including surveys.
• verify consumer responses if needed to ensure the accuracy of our research.
• share your product reviews on the Service and on other services.
• communicate with you, including to respond to inquiries.
• process payment information for your purchases.
• manage our contractual relationship with you.
• send you technical notices, updates, security alerts, information regarding changes to our policies, and support and administrative messages.
• link or combine your information with other information we get from other sources.
• create data for analytics, segmentation for personalized advertising, or statistical market models.
• develop and send you direct marketing for products and services including ads and communications about our and other entity products, offers, promotions, rewards, events, and services.
• serve advertising tailored to your interests on our Service and other services.
• enhance security, monitor and verify identity or service access, combat spam, or other malware or security risks.
• comply with law or a legal process (including a court or government order or subpoena), enforce this privacy policy or our legal rights, prevent and address fraud, and protect the rights, property or safety of CAIPA, our clients, our users and/or the public.
• conduct audits, collect and assess feedback, identify usage trends, measure ad effectiveness and evaluate and improve our products, services, marketing, and client relationships.
• as otherwise permitted under this privacy policy or as otherwise authorized by you.

Notwithstanding the above, we may use information that does not identify you (including information that has been de-identified) without obligation to you except as prohibited by applicable law.

Additional details about how we use survey research

Your participation in research surveys helps our clients measure customer satisfaction and produce better quality products and services. As a survey participant, your information will be used in accordance with this privacy policy, except that you will never be contacted for sales or marketing based on your survey responses without your express consent. While participating in a survey, you may be given the option to submit a photo, video, or audio recording for facial expression and/or voice analysis. Submission is always optional, and we will only conduct this type of analysis with your express consent. You can withdraw your consent at any time.

How do we disclose information?

We disclose information in accordance with the practices described in this privacy policy. In addition to the “Additional details about how we disclose survey research” section below, we disclose information about you to the following categories of persons:

• To our service providers as necessary to enable them to provide services to us. Examples include service providers who help with marketing, billing, accounting, processing credit card payments, data analysis, data matching, technical support and customer service. Service providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes except as prohibited by applicable law.
• To our partners that are engaged in joint sales or product promotions. We also allow certain partners to integrate components of our services into their own websites and apps. Please be aware that we do not control our business partners’ use of such information. Our partners are responsible for managing their own use of the information collected in these circumstances.
• To third party vendors and other entities, such as ad networks and analytics providers, in connection with tailoring ads, measuring and improving our Service and advertising effectiveness. These entities may act as our service providers or, in certain contexts, independently decide how to process your information. For more information on advertising and analytics, see the “Analytics and Advertising ” section below.
• To our clients in connection with our processing of your information on their behalf or to provide them with our products or services. For example, we disclose your information with our clients to conduct market research services, respond to your questions and comments, comply with your requests, market and advertise to you, and otherwise comply with applicable law.
• To the public. We disclose information you make public. Please think carefully before making information public as you are solely responsible for any information you make public. Once you have posted information, you may not be able to edit or delete such information, subject to any rights you have under applicable law.
• For legal purposes, as reasonably necessary to comply with law or a legal process (including a court or government order or subpoena), to detect, prevent, or otherwise address fraud, security or technical issues, to enforce this privacy policy, and to protect the rights, property or safety of Consumer AI Protection Advocates, our users, and/or the public.
• During a corporate transaction, such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, we reserve the right to sell, transfer or otherwise disclose some or all of our business or assets, including your information. We will make reasonable efforts to require the recipient to honor this privacy policy.
• Facilitating Requests. We disclose information at your direction, such as when you request that we disclose your interest in a vehicle with a dealership or when you request that our clients disclose your interest in a service with a third party, such as an after-market warranty service provider.
• Consent. We may disclose your information with notice to you and with your express consent.

Without limiting the foregoing, in our sole discretion, we may disclose aggregated information which does not identify you (or de-identified information about you) with third parties or affiliates for any purpose except as prohibited by applicable law. Sometimes we anonymize or de-identify information so it is no longer considered personal information under applicable law. Where we de-identify information, we commit to maintain and use the de-identified information in de-identified form and not attempt to re-identify it. We may use non-personal information for any purpose to the extent permitted by applicable law.

Tracking technologies

We use various technologies to automatically collect the information identified under the “Information automatically collected through your browser or device” subsection above (“Tracking Technologies”), including the following:

Cookies and pixels.

Cookies are small data files that contain a string of characters, such as a unique browser identifier. Cookies are stored on your computer or other device and act as tags that identify your device. Our servers and those of other entities we work with send your browser or device a cookie when you visit our websites, and we, along with our clients and partners, do likewise on their websites or through their multi-site platforms. A pixel tag (also known as a web beacon) is an invisible 1 x 1 pixel that is placed on certain web pages. When you access a webpage, pixel tags generate a notice of the visit and permit us to set or read our cookies. Pixel tags are used to track activity on a site by a particular device. Even if you turn off cookies, pixel tags may be able to detect a unique website visit. We (and the entities we work with) use cookies and pixels to, among other things, “remember” you when you visit a website, track user trends, measure ad effectiveness, and collect information about how you use our websites, use our clients’ websites or interact with our or our partners’ advertising. We also use cookies and pixels to provide relevant content to you and deliver ads that better match your interests.

Mobile technologies.

We also use, or work with clients or partners that use, mobile SDKs to collect information, such as device identifiers, connected to mobile device usage. An SDK (Software Development Kit) is computer code that app developers can include in their apps to enable ads to be shown, data to be collected, and related services to be implemented. We use this technology for purposes similar to cookies and pixels.

Other services

Our Service contains content from and hyperlinks to websites, locations, platforms, and services operated and owned by separate unaffiliated entities. We also may allow you to connect our Service to another service or may offer our Service through another service (such as a brand page on a social media platform). Except where these entities act as our service providers, they, and not us, control the purposes of means of processing any information they collect about you, and you should contact them directly to address any concerns about their processing. The information collected and stored by those entities, whether through our Service or another service, remains subject to their own policies and practices, including what information they disclose to us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere.

Analytics and advertising

Our Service contains Tracking Technologies used by us to understand trends, usage, and activities. For example, we incorporate Tracking Technologies from analytics providers, such as Google Analytics, to help us analyze your use of the Service, compile statistical reports on the Service’s activity, and provide us with other services relating to Service activity and internet usage.

We also work with ad serving services, advertisers, and other entities to place ads about our products and services on other websites. For example, we place ads through Google that you may view on its platform as well as on other websites and services. As part of this process, we incorporate Tracking Technologies into our own Service as well as into our ads displayed on other websites and services, which are often owned and operated by third parties. Some of these Tracking Technologies may track your activities over time and across non-affiliated services and obtain or infer information about you for purposes of showing you relevant advertising based on your preferences and interests (“targeted advertising”).

We also use audience matching services (which are a form of targeted advertising) to reach people (or people similar to people) who have visited our Service or are identified in one or more of our databases (“Matched ads”). This is done by us providing a list of hashed email addresses to a third party or incorporating a pixel from a third party into our own Service, and the third party matching common factors between our data and their data. For instance, we incorporate the Facebook pixel on our Service and may disclose your hashed email address to Facebook as part of our use of Facebook Custom Audiences.

As indicated above, these entities may act as our service providers, or in certain contexts, independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

For further information on the types of Tracking Technologies we use on the Service and your rights and choices regarding analytics, targeted advertising, and Matched ads, please see the “Information automatically collected through your browser or device” subsection above, and the “Tracking technologies” and “Your rights and choices” sections.

Your rights and choices

We provide a variety of ways for you to control the information we process about you. Please see below for details.

To exercise any of the rights, including your right to delete the information we process about you, please submit an email to info@thecaipagroup.com. If you have an account with us, we may require you to use the account to submit the request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of and respond to your request consistent with applicable law. We may require specific information from you to help us confirm your identity and process your request. If we are unable to verify your identity, we may deny your requests in accordance with applicable law.

Accounts. If you hold an account with us, you can delete your account through your account settings. We will address your request in accordance with our data retention practices.

Browser and device controls.

• Cookies and pixels. Most browsers accept cookies by default. You may be able to instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.
• Mobile technologies. You can reset your device advertising Id at any time through your device settings, which is designed to allow you to limit the use of information collected about you. You can stop all collection of information via an app by uninstalling the app.

Please be aware that if you disable or remove Tracking Technologies some parts of the Service may not function correctly.

Matched ads. To opt-out of us disclosing your hashed email address for Matched ads purposes, please contact us as set forth in the “Contact Us” section below and specify that you wish to opt out of matched ads. We will remove your email address from any subsequent lists disclosed to third parties for Matched ads purposes.

Communications.

You can opt-out of receiving promotional emails or surveys from us at any time by following the instructions as provided in emails or surveys, clicking on the unsubscribe link, or emailing us at the email address set forth in the “Contact Us” section with the word UNSUBSCRIBE in the subject field of the e-mail. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or CAIPA’s ongoing business relations.

How is information protected and retained?

We take appropriate steps including physical, technical, human, and organizational measures designed to help protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration, or destruction. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us.

We retain information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

International transfers

CAIPA is headquartered in the United States, and your information may be transferred to other locations outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your jurisdiction. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service, including personal data, may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Your use of the Service or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, disclosure, and storage of your information in the U.S. and other jurisdictions as set forth in this privacy policy.

Special note about children

Our Service is not intended for children. We do not knowingly collect information from children as defined by the Children’s Online Privacy Protection Act “(COPPA”) or other applicable law. If we learn that we have inadvertently collected information from a child, we will delete that information as quickly as possible. If you believe that we might have any information from a child, please contact us as set forth in the “Contact Us” section.

Changes to this privacy policy

This privacy policy is current as of the date which appears at the top of this privacy policy. We reserve the right to update this privacy policy at any time. Any such update will be effective immediately upon posting on the website. Accordingly, we encourage you to refer to this privacy policy on an ongoing basis. If the changes are material, we may provide additional notice to you as required by applicable law, such as through email or prominent notice on the website. By using our Service following any privacy policy update, you freely and specifically give us your consent to collect, use, transfer, and disclose your information in the manner specified in the updated privacy policy. In the event of any inconsistencies between the English version or a translated version of this privacy policy or a country or region supplement, the English version shall prevail.

Contact us

If you have any questions about, or trouble accessing, this privacy policy, contact us via email or postal mail at the addresses below. Additional methods of contacting us are listed in the country and region supplements and policies linked on this page.

Email:

info@thecaipagroup.com