Privacy Policy

Last updated: September 21, 2026

Version 2026-09-21 • Effective 2026-09-21

This Privacy Policy governs the manner in which CarsXE collects, uses, maintains and discloses information collected from users (each, a "User") of the carsxe.com website ("Site"). This privacy policy applies to the Site and all products and services offered by CarsXE.

Personal identification information

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, place an order, fill out a form, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number, credit card information. Users may, however, visit our Site anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities, including but not limited to ordering a report, registering for an account, and contacting support. Users may request that associated personally identification information in our system is removed by contacting us at https://carsxe.com/contact.

Non-personal identification information

We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.

Web browser cookies

Our Site may use "cookies" to enhance User experience. User's web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

How we use collected information

CarsXE collects and uses Users personal information for the following purposes:

  • To personalize user experience. We may use information in the aggregate to understand how our Users as a group use the services and resources provided on our Site.
  • To improve our Site. We continually strive to improve our website offerings based on the information and feedback we receive from you.
  • To improve customer service. Your information helps us to more effectively respond to your customer service requests and support needs.
  • To process transactions. We may use the information Users provide about themselves when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.
  • To track referrals. Your information will helps us attribute the referring source of purchases to enable better and more efficient marketing.
  • To send periodic emails. The email address Users provide for order processing will be used to send them ordered reports, updates pertaining to their order, and promotions related to used car buying. It may also be used to respond to their inquiries, and/or other requests or questions.

How we protect your information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site.

Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures.

Sharing your personal information

Access to your personal information will, with the exceptions specified below, be restricted to employees of CarsXE and handled with the upmost care for the purposes outlined above. We may share your business name and payment history to trusted affiliates for the purpose of referral tracking as specified above. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above. For legal reasons, we reserve the right to access, use, preserve, transfer or disclose, at any time without notice to you, any information (including personal information) as reasonably necessary to comply with any applicable law, regulation, subpoena or legal process, or respond to any governmental requests and cooperate with law enforcement.

Third party websites

Users may find advertising or other content on our Site that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that websites own terms and policies.

ChatGPT app, MCP server, and API tool use

This section describes how CarsXE processes information when you use our vehicle-data tools through the CarsXE API (https://api.carsxe.com), our hosted MCP server (https://mcp.carsxe.com/mcp), or a ChatGPT app or other MCP client that calls those tools. It covers the categories of information that move in and out of a tool or API call, why we process it, who receives it, how long we keep it, and the controls available to you.

Categories of information

CategoryExamplesWhy we process it
Account and authenticationAPI keys, OAuth tokens, and account identifiers used to authorize a requestTo authenticate the caller and apply the correct plan and usage limits
Vehicle identifiersVIN, license plate, issuing state or country, year, make, model, and OBD diagnostic codesTo look up the vehicle data you requested
Images and image URLsImage URLs you or a ChatGPT or MCP client send for VIN OCR or license-plate recognitionTo extract a VIN or plate and complete that lookup
Tool and API request and response dataTool names, request parameters, and the vehicle-data results we return (specifications, history, recalls, market value, images, ownership or lien and theft records, as applicable)To fulfill the request and return the result to the calling client
Usage and technical logsTimestamps, request identifiers, endpoint or tool name, and similar operational metadataTo operate, secure, bill, and debug the service
Account and billing recordsAccount profile and payment records associated with a CarsXE subscriptionTo provide the account, bill usage, and meet legal and tax requirements

Purposes

We process this information to provide the requested vehicle-data lookup; to authenticate and authorize the request; to bill usage and enforce plan limits; to operate, secure, and debug the API and MCP service; and to comply with applicable law.

Recipients

CarsXE processes each request. The calling client — for example ChatGPT, another MCP host, or your own application — receives the tool or API output because it made the request. We may use infrastructure providers that host, log, or secure our systems, and vehicle-data sources needed to fulfill a lookup. Payment processors handle billing as described in this policy. We do not use ChatGPT or MCP tool payloads to advertise to end users. Legal disclosures remain as described under Sharing your personal information.

How long we keep this information

Unless a longer period is required by law or needed to resolve a dispute, we apply these defaults:

  • API and MCP logs and tool payloads: about 90 days, then we delete them or keep only aggregated records.
  • Images fetched from customer URLs: 24 to 72 hours, then we delete them.
  • Batch job artifacts: until the job expires or the account is closed.
  • Account and billing records: for the life of the account, and for a limited time after the account is closed.

Your choices

You can stop using the ChatGPT app or disconnect the MCP connector in that client. Account holders can rotate or revoke API keys in the CarsXE dashboard. You may request that associated personal identification information be removed by contacting us. You can also avoid sending identifiers you do not need for a lookup.

Data minimization

We process the information sent in a tool or API request to fulfill that request. Send only the identifiers needed for the lookup. Do not include extra personal information in tool arguments. Images from URLs are processed to complete the requested lookup and then deleted as described above.

Questions about this section can be sent through the same contact page as the rest of this policy.

Changes to this privacy policy

CarsXE has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Your acceptance of these terms

By using this Site, you signify your acceptance of this policy andterms of service. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

Contacting us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us.