Cara logoCara

Privacy Policy

Effective June 29, 2026

This Privacy Policy explains how Cara ("Cara", "we", "us") collects, uses, and shares information when you visit our website, create an account, or use the Cara service (the "Service"). By using the Service you agree to this Policy.

1. Who is the controller

For data submitted by you about your business and your end customers ("Customer Data"), you are the controller and Cara is the processor acting on your instructions. For account, billing, and product-usage data about you and your team, Cara is the controller.

2. Information we collect

  • Account info: name, email, organization, role, password hash.
  • Billing info: processed by Stripe; we receive limited data such as subscription status and last-four card digits.
  • Customer Data: contacts, leads, opportunities, messages, calls, transcripts, calendar events, ad performance, and other content you or your integrations submit.
  • Communications content: emails, SMS, and voice recordings/transcripts handled through the Service via Resend, Twilio, and ElevenLabs.
  • Usage data: log data, device and browser info, IP address, referring pages, and interactions with the Service.
  • Cookies & similar tech: for authentication, preferences, and analytics.

3. How we use information

  • Provide, secure, and improve the Service.
  • Generate AI Output (drafts, recommendations, classifications, forecasts).
  • Process payments and manage subscriptions.
  • Send service, security, and (with consent where required) marketing communications.
  • Detect, prevent, and respond to fraud, abuse, or violations of our Terms.
  • Comply with legal obligations.

4. AI processing

We use AI model providers (including OpenAI and Google) to generate AI Output. Your inputs and the relevant Customer Data may be transmitted to these providers solely to return the requested output. We instruct providers not to train their models on your Customer Data where their terms support that option. AI Output may be inaccurate; review it before relying on it.

5. How we share information

  • Service providers / subprocessors that help us run the Service, including hosting, database, email (Resend), telephony and SMS (Twilio), voice AI (ElevenLabs), AI models (OpenAI, Google), payments (Stripe), and analytics.
  • Integrations you connect (e.g., Meta, Google Calendar). Data flows to those services under their own privacy policies and only at your direction.
  • Legal, safety, and compliance where required by law or to protect rights, safety, or property.
  • Business transfers in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Communications you send through Cara

When you send emails, SMS, or place/receive calls through the Service, the content, metadata, and (for calls) recordings and transcripts may be stored to provide features such as inbox views, lead scoring, transcripts, and analytics. You are responsible for obtaining required consents from recipients and for honoring opt-outs.

7. Data retention

We retain Customer Data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. You may delete records within the Service or request deletion of your account.

8. Security

We use technical and organizational measures including encryption in transit, access controls, and row-level security in the database. No system is perfectly secure; we cannot guarantee absolute security.

9. International transfers

Cara and its subprocessors operate in the United States and other countries. By using the Service, you understand your information may be processed in jurisdictions whose data-protection laws may differ from your own.

10. Your rights

Depending on where you live (e.g., the EU/EEA, UK, California), you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, email privacy@cara.ai. For Customer Data, please contact the Cara customer (the controller) that uploaded the data; we will assist them in responding.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

12. Cookies

We use strictly necessary cookies for authentication and session management, and optional analytics cookies to understand usage. You can control cookies through your browser settings; disabling some cookies may degrade the Service.

13. Changes

We may update this Policy from time to time. Material changes will be announced in-app or by email. Continued use after the effective date constitutes acceptance.

14. Contact

Questions or requests: privacy@cara.ai.