Legal
Cardinal AI LLC ("Cardinal AI," "we," "us," or "our") operates the Cardinal AI platform available at cardinaltech.ai and through our iOS and Android mobile applications (collectively, the "Platform"). The Platform is an AI-powered vehicle acquisition and scoring service designed exclusively for automotive dealerships and their authorized employees.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to users of the Platform.
If you have any questions about this Privacy Policy, contact us at privacy@cardinaltech.ai.
This Privacy Policy applies to:
This policy does not apply to vehicle buyers, consumers, or any third party who is not an authorized Platform user. Cardinal AI does not knowingly collect, process, or store information about individual consumers or vehicle buyers.
When a dealership registers for the Platform or when an administrator provisions a user account, we collect:
Dealers may upload DMS (Dealer Management System) inventory data to the Platform for processing. This data includes vehicle inventory records such as VINs, vehicle specifications, acquisition costs, and inventory status.
This data is owned by the dealer and is uploaded at the dealer's direction. Cardinal AI processes this data solely to provide the services described in our Terms of Service. We do not sell, license, or share dealer DMS data with any third party for any purpose other than operating the Platform.
The Platform integrates data from multiple third-party providers. Each provider is used for a specific, contract-permitted purpose as described below:
Vehicle data obtained from these providers concerns vehicles, not individuals, and is used solely to produce analytical outputs within the Platform, subject to each provider's contractual restrictions.
We collect information about how users interact with the Platform, including:
If you contact us by email or through the Platform, we retain records of those communications to respond to your inquiries and improve our support.
Cardinal AI is a Fortellis-certified application. Fortellis is an automotive commerce exchange operated by CDK Global that connects dealership software systems to third-party applications.
When a dealership uses Cardinal AI with a CDK Drive Dealer Management System, dealership operational data from the CDK Drive Store DNA APIs flows through Fortellis subscription infrastructure to Cardinal AI. This connection is established only through the following consent chain:
Cardinal AI accesses CDK Drive data only for dealerships that have completed this subscription and authorization process. A dealer can revoke this access at any time by cancelling the subscription through the Fortellis Marketplace. Manheim (Cox Automotive) wholesale market values are accessed separately under Cardinal AI's direct Data Services Agreement with Cox Automotive and are displayed to authorized dealership users only on contract-permitted surfaces.
We use the information we collect to:
We do not use personal information to serve advertising, and we do not share any data with advertising networks or data brokers.
Cardinal AI does not sell or rent personal information. We share information only with the service and data providers listed below, and only as necessary to operate the Platform:
| Provider | Purpose |
|---|---|
| Amazon Web Services (AWS) | Cloud hosting and infrastructure |
| Auth0 | Identity and access management |
| J.D. Power | Vehicle valuation data (Cardinal AI scoring input) |
| Black Book | Vehicle valuation data (Cardinal AI scoring input) |
| MarketCheck | Vehicle market and inventory data (Cardinal AI scoring input) |
| CARFAX | Vehicle history data (Cardinal AI scoring input) |
| Manheim (Cox Automotive) | Wholesale market values (display-only on contract-permitted surfaces; not a scoring input) |
| CDK Drive Store DNA APIs (via Fortellis) | Dealership operational data |
| HomeNet Conveyor | Vehicle inventory feeds |
We disclose information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Cardinal AI, our users, or others.
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify affected users of any such change.
Dealers retain full ownership of all DMS inventory data they upload to the Platform. Cardinal AI does not sell, license, share, or use DMS data to train AI models for any purpose outside of delivering the dealer's own scoring results. Dealer data is deleted within 90 days of account termination.
We implement technical and organizational security measures including:
Contact privacy@cardinaltech.ai immediately if you suspect unauthorized access to your account.
We retain personal account information for as long as an account is active. Upon account termination, we delete or de-identify associated user and DMS data within 90 days, unless a longer retention period is required by law.
Authorized users may request to access, correct, or delete their personal information by contacting privacy@cardinaltech.ai. We respond to verified requests from account holders and their dealership administrators.
Our iOS and Android apps collect only the information described in this policy. They do not track users across third-party apps or websites, do not serve advertising, and comply with Apple App Store and Google Play developer policies.
This Privacy Policy is governed by the laws of the State of Florida. Disputes shall be subject to the jurisdiction of the courts of the State of Florida.
We may update this Privacy Policy from time to time. When we do, we revise the "Last Updated" date at the top of this page. Continued use of the Platform after updates constitutes acceptance of the revised policy.
Cardinal AI LLC
Miami, Florida
privacy@cardinaltech.ai
cardinaltech.ai