Privacy Policy
CarGo tells you when your own vehicles arrive at or leave your property, using motion clips from your Ring cameras and, for the parking spaces you mark, snapshots. This policy explains what we collect, why we collect it, who else handles it, how long it is kept, and how you can have it deleted. It covers the CarGo website, the CarGo app, its notifications and emails, and support. CarGo is provided by Granite Peak Engineering LLC, a California limited liability company; in this policy, "CarGo", "we", "us" and "our" mean the provider of CarGo. CarGo is offered in the United States.
CarGo uses AI image models to estimate which vehicle a camera saw and whether it arrived, left or is parked in a space you marked. It can make mistakes, and it is not an emergency service. Ring runs its own cameras, accounts, recordings and billing under its own terms and privacy notice. Deleting data from CarGo does not delete the recordings in your Ring account.
1. What we collect
The words we use. This policy, our Terms of Use, and the app use these words with these meanings:
- Alert: a message CarGo sends you about a sighting, meaning a notification on your phone or computer, or an email. An alert is a message, not a stored record; what CarGo keeps is the sighting.
- Sighting: CarGo's record of one vehicle event. It holds a still image of the vehicle, the details (which vehicle, which camera, the time, and the direction of travel), and the metadata (the match scores and your Mine or Not mine vote). Sightings are kept for 90 days after the event.
- Motion clip: the video your Ring camera records when it detects motion. CarGo downloads each motion clip, analyzes it, and deletes it right after the analysis.
- Snapshot: a still picture that Ring takes on a schedule (Snapshot Capture in the Ring app), not because of motion. CarGo uses snapshots only to check the parking spaces you mark.
- Shared video: a video you give CarGo yourself, by sharing it from the Ring app or by uploading it.
The table below lists every kind of data CarGo keeps, the reason it is kept, and how long it stays.
| Data | Why we keep it | How long |
|---|---|---|
| Your email address | We use it to send sign-in links, service notices, and replies to your support emails. If an alert is not confirmed on a device, we email it to you. Turn off in Alert settings. Backup email is a best effort: CarGo sends at most 30 backup emails a day, and does not email an alert that is more than 6 hours old. An email for every alert goes out only if you turn it on. Every routine email has an Unsubscribe link that turns that kind of email off without signing in (one tap on the page it opens), and mail apps that support it also offer their own one-click Unsubscribe; sign-in links and notices about your account cannot be turned off. If you add a separate address for alerts, we keep it too, after you confirm it. | It stays for as long as your account exists. |
| Your Ring connection, meaning an access token and a refresh token for your Ring account together with the identifiers and names of your cameras, and your Ring subscription and trial status | These let CarGo read your cameras' motion clips and know which cameras it may check. We never receive or store your Ring password or your payment card. Cloudflare stores the tokens for CarGo, and CarGo sends them only to Ring. | The tokens are deleted from your account the moment you remove CarGo in the Ring app (Ring My Apps), ask us to disconnect it, or delete your account; a working copy on the processing server stays until that server restarts. Camera names and identifiers stay with the records that use them, such as sightings, camera status and reports, until those records or your account are deleted. |
| Motion clips from your camera | CarGo downloads a copy of each clip and analyzes it on our servers to find vehicles. A downloaded clip can include sound; CarGo does not analyze the sound. | Clips are deleted after analysis, normally within minutes: CarGo deletes its copy right after the analysis, and a copy left behind by an interrupted check is usually deleted at the start of a later check, once it is more than 30 minutes old. A copy left by an interrupted vehicle setup or report check can stay on the processing server until that server restarts. This does not delete the recording in your Ring account. We do not keep motion clips. |
| Videos you share with CarGo, from the Ring app or by upload | CarGo looks through the video for the vehicle you want it to learn. | Shared videos are deleted within 24 hours. A copy left by an interrupted check can stay on the processing server until that server restarts. |
| Sightings, meaning a small cropped still image of each detected vehicle, with a best-effort blur applied to license plates and faces before it is stored (the blur is automatic and can miss; it is not guaranteed), along with its details (the vehicle CarGo believes it saw, the camera, the time, and the direction of travel) and its metadata (match scores and your vote) | These are what you see on the Sightings screen, and they let you confirm or correct what CarGo saw. An alert points you to its sighting. | Sightings and their stills are kept for 90 days after the event. Stills are deleted automatically 90 days after they are stored, which is normally within minutes of the event; a still stored later, for example after a delayed check, stays 90 days from when it was stored. A sighting's details are deleted the next time CarGo saves a sighting for your account after those 90 days, so they can stay longer on an account with no new sightings. Details copied into a report you make stay with that report. On a very busy account, CarGo keeps only the newest 1,200 sightings and 800 near misses, so older ones leave the list sooner; their stills are still deleted at 90 days. You can delete any sighting sooner. |
| Vehicle images and signatures, meaning the blurred pictures of your vehicle that you chose while setting it up, and the appearance signature of each vehicle you confirmed | They teach CarGo what your vehicles look like, and they let you see and remove what it has learned. A signature is a list of numbers describing a vehicle's overall appearance. It is not a license plate and it is not used to identify people. It is used only within your own account. | They are kept until you delete the vehicle or your account. When you delete the vehicle, its setup images, its signatures, and the "not yours" examples made while setting it up are removed; what CarGo learned about a parking space (see Snapshots below) is not, and is removed when you delete your account. The pictures from a search of past video are kept so that a later search on the same camera can reuse them: CarGo reuses them for up to 7 days, they are usually deleted within 7 days of the last search, and deleting the vehicle or your account removes them. |
| Recent vehicle pictures, meaning a limited selection (at most 400 per camera per day) of small pictures of vehicles your cameras recorded, each with its appearance signature | CarGo keeps small pictures of the vehicles your cameras saw in the last 7 days, with faces and license plates blurred, so it can help you with your vehicles faster without downloading your video again. Only you see them. Blurred copies may be checked by the CarGo assistant to name a vehicle. They are deleted after 7 days, or right away if you delete your account, unlink Ring or remove the camera. | They are deleted within 7 days of being taken, and at once when you delete your account, disconnect Ring, or when Ring removes that camera. |
| Your votes ("mine" or "not mine") | They teach CarGo what your vehicles look like. | A vote is kept with its sighting, for 90 days. CarGo also keeps what your votes taught it: up to the newest 500 votes on parked vehicles, in what it learned about your parking spaces, and up to 2,000 Mine and 2,000 Not mine votes, as references, in what it learned about your vehicles. These stay until newer votes replace them or your account is deleted. On staff and test accounts where siren checks are enabled, CarGo also keeps up to the newest 200 voted sound profiles per camera after the sighting expires. A sound profile is a short numeric fingerprint, not audio. On staff and test accounts with emergency-vehicle checks, CarGo also keeps up to the newest 200 voted vehicle crops per camera after sightings expire, as blurred stills to remember false alarms. Changing or clearing the vote updates this memory; deleting the sighting or account removes it. |
| Snapshots from a camera on which you marked parking spaces, and small pictures of each space cut from them | About every 15 minutes, or at the next processing pass after that, CarGo checks whether your vehicle is in its space. It reads the newest picture available: a snapshot, a frame of Ring's recording, or a frame of a motion clip it has just analyzed. When there is nothing newer, that picture can be up to 24 hours old. | A snapshot is not stored: it is analyzed and discarded. For each space, CarGo keeps the newest small picture of the space, replaced at each check, the picture from when each vehicle was last seen in it, replaced the next time that vehicle is seen there, and up to 8 pictures of the space that teach CarGo the space's shape: pictures you confirmed with Mine, and later pictures CarGo saves on its own when it refines that shape. These space pictures are kept until you delete your account; deleting a space or a vehicle does not delete them yet. They are not blurred: only the privacy zones you set in the Ring app are masked. When a vehicle parks or leaves, CarGo makes a sighting with a blurred still of the space, kept for 90 days like every other sighting. |
| Alert delivery records, meaning which of your devices each alert was sent to, and which alerts your devices confirmed receiving | They let CarGo email you an alert that did not arrive, and tell you when a device stops receiving alerts. | An alert itself is not kept, except that the text and link of an alert waiting to go out in a backup email or the daily summary are queued until that email is sent or newer alerts replace them. The note of where it was sent is kept with its sighting, for 90 days. CarGo keeps the last 300 confirmations, and they are deleted with your account. Resend, which sends our email, keeps its own copies, as section 3 explains. |
| Pictures for a report, meaning still frames of the vehicles in the clips recorded around the time of a missed sighting you report | So that the help assistant can work out what happened, as described in section 2. | They are kept with the report for up to 90 days, or until you delete your account. Only blurred pictures are sent to the assistant. |
| Camera country and state from Ring, and your quiet-hours choice | CarGo uses the coarse country and state Ring provides for each camera to choose that camera's time zone and approximate sunrise and sunset. It does not ask for or store your phone's location. If a state spans time zones, CarGo uses the time zone at the state's geographic centre; use Custom hours when exact timing matters. Dusk-to-dawn phone alerts follow whether the camera clip is dark. | The coarse camera location is refreshed from Ring and kept while the camera is connected. Your quiet-hours choice is deleted when you change it or delete your account. |
| Your notification subscription, meaning the push address your browser or the CarGo Android app gives us, with a name for the device and its notification settings | It is how alerts reach your phone. When you sign in with notification permission granted, CarGo registers this address automatically. Camera and vehicle alerts start on until you change them in Alert settings. | It stays until you turn off notifications for that device in CarGo, your browser or phone reports that the subscription is no longer valid, or you delete your account. Turning notifications off only in your phone's or browser's settings does not delete it. The device's notification settings stay until you change them or delete your account. Records of the app's state on a device, used to find problems, are deleted 90 days after they were last updated. |
| Support reports and conversations, meaning reports you make in the app, your conversations with the help assistant, your ratings of its answers, and the replies | So that we can answer you and fix what went wrong. | They are kept while your account exists, up to your newest 100 reports. Deleting your account removes them. |
| Support email you send to support@cargohold.io | Our mail service files it as a report in CarGo and forwards a copy to our support mailbox at Google (Gmail), so a person can read and answer it. | Reports are kept while your account exists, up to your newest 100. Email from an address with no CarGo account is kept among the newest 100 such emails, with no fixed time limit. Deleting your account removes the copies CarGo stores, including email from your address. Forwarded copies in the support mailbox are not deleted automatically; ask us and we will delete them. |
| Help assistant usage records, meaning, for each day, the AI model calls the help assistant and report reviews made for your account, by purpose and model, the amount of text and pictures (tokens) they used, and whether the call came from a customer, a test or a preview site; it is a best-effort count | To see what the help assistant costs and to keep it within its daily limit. | Each day's record expires 100 days after it was last updated (it is shared by all accounts, so a later update can extend it). Your entries are removed at once when you delete your account. |
| Your agreement to the "Before CarGo starts" screen, and your email choices | To show which version of the text you agreed to and when, and which kinds of email you turned off. | CarGo keeps your last 10 agreements and your last 10 unsubscribes, and deletes them with your account. |
| Sign-in records | To keep you signed in safely. | A sign-in lasts up to 30 days. Sign-in links expire after 15 minutes and sign-in codes after 10 minutes. A link to confirm a separate alert address expires after 24 hours. |
| Operational logs, meaning request times, error messages, and the IP addresses handled by our hosting provider | They keep the service running and secure. | Logs of messages from Ring, which name your Ring account and cameras, are deleted after 14 days; your account also keeps a list of the newest 50 other events Ring sent about it, until newer events replace them or your account is deleted. A short log of notification deliveries keeps its newest 100 to 150 entries per account until they are replaced or your account is deleted. Our hosting provider's own request logs follow its retention. Logs are never used to profile you. |
Backups. CarGo does not make backup copies of your data. Cloudflare, which stores CarGo's account records, keeps a history of changes to that store for 30 days so that it can be restored after a failure. A record you delete can stay in that history for up to 30 days, and is used only if the store has to be restored. Pictures kept inside account records, such as vehicle setup pictures, the recent vehicle pictures and the parking-space pictures, are part of that history. Sighting stills and videos are stored as separate files, and those files have no backup copies.
2. What we do not do
We do not sell or rent your data, we do not show advertising, and we do not share your data for advertising. We do not identify, track, or build profiles of other people or their vehicles; small pictures of vehicles your cameras saw help you with your own vehicles, and faces we detect are blurred. CarGo does not analyze the sound in your clips, and it does not look for emergency vehicles or listen for sirens; sound is included when you play or download a clip. We do not read license plates, because CarGo recognizes vehicles by their overall appearance, and we blur the plates we detect in the stills we keep. We do not use your images to train models for other customers.
Your vehicles are recognized only inside your own account. A vehicle's appearance signature is compared only against clips from your own cameras. It is never compared with any other customer's data, never matched against vehicle registries, license-plate databases, or any outside source, and never used to follow another person or another person's vehicle. CarGo can recognize your own vehicles on any of the cameras connected to your account, at one site or several. CarGo does not recognize or identify people: it looks for faces only to blur them, and face blurring runs before a vehicle still is stored (the small pictures of parking spaces are the exception described in section 1). A vehicle's signature is worked out from the picture before the blur, so a face that appears in the picture can affect it, but it is never used to recognize a person. Blurring is a best effort, not a guarantee. It is done automatically with commercially available detection tools, and those tools have practical limits: a plate at a steep angle, a face in profile or under a hat, a distant or dark subject, or an unusual plate design can be missed. The stills come from your own camera and are shown only inside your own account. If a still shows something you would rather not keep, you can delete it at any time from its menu, and deleting it removes the sighting and its still from our storage (a parking-space picture CarGo learned from it stays until your account is deleted, a "not yours" example CarGo learned from a Not mine vote on it stays until newer examples replace it or your account is deleted, and a working copy kept on the processing server after you changed your vote on it stays until that server restarts; CarGo also keeps a short note of each deleted sighting, with its time and vehicle name, so that the copies CarGo learned from are removed too, among your newest 1,000 such notes, until your account is deleted); you can also report it so that we can improve the blurring.
Nobody at CarGo watches your stills. Support works from the metadata, such as times, camera names, and match scores. A still is looked at only when you have allowed it for that one picture: by ticking the box when you report a problem, or by tapping Allow when we ask inside a report, or when the law requires it. When you report a missed sighting and CarGo has no picture of it, CarGo checks the clips recorded around that time and the assistant looks at blurred pictures of the vehicles in them, as part of that report, without a separate Allow question. In practice it is CarGo's help assistant that looks, and it describes the problem in words; a person at CarGo looks at a still only when the assistant's description is not enough. Each look is written into that report, where you can read it under My reports. Reports, replies, and your conversations with the assistant are kept inside CarGo, in the same United States storage as the rest of your account. Email you send to support is the one exception: a copy also goes to our support mailbox at Google (Gmail).
3. Who else handles your data
Only the following companies handle your data, each for the purposes given here. Ring and Amazon are the source of your motion clips, under your own Ring account and Ring's privacy policy. Cloudflare, a United States company, hosts CarGo, runs its analysis, and stores your account data; your vehicle stills and your account records are stored in Cloudflare's United States jurisdiction, and Cloudflare's worldwide network may hold short-lived cached copies near wherever a page is opened. DeepInfra finds the license plate in each blurred vehicle picture so it can be blurred again, and answers the AI check of a detected vehicle's make and model when Anthropic's model cannot; it receives blurred pictures of vehicles and of parking spaces and, for a video you share, a picture of the time stamp printed on it. CarGo does not send it your name, your email or your camera names, although a picture can show its surroundings. Apple, Google, Microsoft, and Mozilla carry notifications to your browser or the installed website app; these are encrypted end to end, so they cannot read them. Notifications to the CarGo Android app travel through Google's Firebase Cloud Messaging and are not encrypted end to end: Google receives the vehicle's name, the camera's name, the time, the match score, and a link to the alert, but never an image. Resend sends our emails: sign-in links, service notices, replies to your support emails, backup emails for alerts a device did not confirm, alert emails if you turned them on, and the confirmation that your account is deleted. It receives your email address and the content of each email; under its published policy it keeps email and log data for 30 days. Google also hosts our support mailbox (Gmail), which receives a copy of email you send to support, including any attachment, such as a video. ntfy, a public notification relay, carries fixed service alerts to CarGo's staff only; it never receives customer data, such as your vehicles' or cameras' names, and it never sends you alerts. CarGo's help assistant, the automatic review of the reports you make, and the tools CarGo's staff use to review reports run by default on Anthropic's AI model. If an Anthropic call fails or cannot be made, CarGo may send it to Cloudflare's own AI service, Cloudflare Workers AI (an open Qwen model), instead, and a setting can make Workers AI the main model. In a conversation, whichever of the two answers receives the messages you type (with anything personal you write in them), a summary of your account's status in words and numbers, including camera and vehicle names, and short summaries of your own earlier reports; Anthropic also receives a pseudonymous account identifier. When the assistant reviews a report, it can also receive the short titles of product problems that CarGo's staff accepted, which the assistant wrote from earlier reports, including other customers' reports, and the titles of problems proposed from your own reports. It looks at a picture only with your permission for that report: the still of the sighting you report (when you tick its box or tap Allow), or your recent stills of the same vehicle when you tap Allow when the assistant asks; and, for a missed sighting you report, still frames of the vehicles in the clips your cameras recorded around that time. Every picture has been through the blurring described above, and each look is written into that report. The assistant never receives video files.
Anthropic's model answers the make-and-model question about each detected vehicle from its blurred still; if Anthropic cannot answer, DeepInfra and then Cloudflare Workers AI do. DeepInfra uses the blurred still only to answer that question or to find the plate; under its published privacy policy it does not store, sell, or train on data sent through its API without explicit consent, and we have given none. When the first answer does not confirm your vehicle's model, a larger Anthropic model answers the same question from the same blurred still. When you share or upload a video, Anthropic's model looks at blurred pictures of each vehicle in it to suggest what the vehicle is before you accept it (if Anthropic cannot answer, DeepInfra and then Cloudflare Workers AI do). When you add a vehicle and CarGo searches the small pictures it kept from the last 7 days, Anthropic's model looks at a blurred copy of one picture from each of a few groups of similar vehicles, to name the vehicle in it (make, model and colour); if Anthropic cannot answer, DeepInfra and then Cloudflare Workers AI do. Under its published policy Anthropic does not train on data sent through its API and deletes it within 30 days, except where it must keep it longer, for example to meet a legal obligation or enforce its usage policy. Cloudflare does not promise that the Workers AI back-up model runs in a United States data center; its published terms for Workers AI say it does not use what the assistant receives to train any model or to improve its services. These companies follow their own retention, and deleting your CarGo account does not delete their copies at once. The full list, with what each company sees and why, is on Who handles your data.
We will update this list before we add anyone to it. We do not share your data with anyone else unless the law requires us to. Requests from law enforcement or courts are honored only when they arrive as a valid, binding subpoena, court order, or search warrant, or when there is an imminent threat to someone's life, and we will tell you about such a request unless the law forbids it. Ring's own rules also prohibit us from giving law enforcement direct access to anything from your cameras without your consent in each instance. Law enforcement can contact us at support@cargohold.io.
4. Deleting your data and ending the service
Delete your account in the app. In the app, tap Menu, then Account, then Delete my account, and type DELETE. Deleting your account in CarGo deletes your account and the data CarGo stores right away. This includes your vehicles, sightings, stills, settings, reports and your Ring connection. When the deletion is complete, CarGo sends one confirmation email to your account address; the address itself was already deleted from your account with everything else. The deletion is complete even if that email cannot be delivered.
What remains after you delete your account. CarGo keeps no list of deleted accounts. Apart from the records below, it keeps no record of your email address. These records remain:
- copies in our support mailbox (Gmail), until you ask us to delete them;
- logs of messages from Ring, which name your Ring account and cameras, until they are deleted after 14 days;
- short-lived records that expire on their own: an unused sign-in link or code (at most 15 minutes), a sign-in rate-limit record that names your email address (1 hour), a note that a backup email was sent (2 days), and, if CarGo sent an automatic reply to an email you sent to support, a note of your email address that stops a second automatic reply (up to 30 days);
- staff records that refer to your account by its internal account number: your ratings of the help assistant's answers, entries for any security report you sent, a log of times the help assistant or reports reached a limit on your account (with the reason and any report number), and the product problems the help assistant wrote down from your reports, which can describe what you reported. These have no fixed time limit; they stay until newer entries replace them or staff remove them;
- working files on CarGo's processing servers that the deletion does not reach: a copy of your account's processing state saved there when saving it to storage failed, stills still waiting to be uploaded, copies of stills you voted on that the processing server uses to learn your vehicles, a working copy of your Ring tokens, and pictures and a log of near misses. They are replaced or cleaned up by later processing (near-miss pictures after 14 days) and do not survive a restart of the processing server;
- if your account was suspended, the record of that suspension, which includes the reason and the email address the suspension notice was sent to;
- the history Cloudflare keeps of the record store, for up to 30 days (see Backups);
- copies held by the companies in section 3 under their own retention, such as Resend's copy of emails it sent you, for 30 days.
Ask us by email. If your account is suspended, the app cannot delete it, so email us instead. You can also email support@cargohold.io from your account address. We then delete your account and its data within 30 days and reply to confirm that we have done so.
Remove CarGo in Ring. If you remove CarGo from the Ring app, we stop using your cameras right away and delete your data 30 days later. Linking CarGo again within 30 days keeps your data. When CarGo learns that it was removed, it deletes your Ring tokens, stops checking your cameras, drops the new motion events waiting to be checked, and deletes the recent vehicle pictures at once. References to clips queued for an overnight check can stay in CarGo's processing records until your account is deleted; CarGo does not check them. The rest is deleted 30 days later, in the same way as an account deleted in the app, except that CarGo does not send a confirmation email for this deletion today. You can delete your account in the app sooner.
When a subscription or a trial ends. When Ring reports that a camera no longer has an active CarGo subscription or Ring trial, CarGo stops checking that camera and drops its new motion events waiting to be checked; references to clips queued for an overnight check can stay in its processing records. During early access, an account's own CarGo trial, outside the Ring Appstore, can keep checking after it ends; CarGo does not charge for it. Your account is not deleted and your Ring connection stays, so the data CarGo keeps stays for the periods in section 1 until you delete it or your account. Other cameras with an active subscription keep working.
Smaller deletions. You can delete any sighting in the app or by asking us. Hiding a sighting only removes it from your list; it does not delete it. Deleting a vehicle removes its setup pictures, signatures and setup examples, but not your past sightings of it or your parking-space pictures. Pictures from an earlier setup with a shared video can also remain until a later shared-video setup replaces them or you delete your account. Removing the app from a phone or turning off notifications does not delete anything, does not stop CarGo checking your cameras, and does not cancel a subscription; cancel in the Ring app under My Apps.
5. Your choices and rights
When you first use CarGo, the app shows a short summary of how it uses your data and asks you to agree. Until you agree, CarGo checks no video. We record when you agreed and to which version of the text, and if the text changes in a way that matters, the app asks again. Turning off notifications on a device, or removing the app from it, stops notifications on that device only: CarGo keeps checking your cameras and emailing you as set in Alert settings. To stop CarGo checking your cameras, disconnect it in Ring or delete your account. You can disconnect Ring by removing CarGo's access in your Ring account or by asking us; the moment the connection ends, CarGo stops reading your cameras, and we delete your Ring tokens.
For questions, use Help in the CarGo app. Depending on where you live, the law may give you rights to know what personal information we hold, to get a copy of it, to correct it, to delete it, to limit some uses of it, and to use those rights without being treated differently. To make a privacy request, email support@cargohold.io with the subject "Privacy request", from your account address if you have one; an authorized agent can also make a request for you. If you do not have an account but think a CarGo customer's camera recorded you, tell us the approximate time and place so we can look. We may need to confirm that a request comes from you, and we protect other people's information when we answer. If you would like to see what we hold about you, ask, and we will send you a copy within 30 days. If we turn down a request, we will explain why, and you can ask us to look at it again by replying with the subject "Privacy appeal". You can also contact your state's attorney general.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising, so there is nothing to opt out of. The CarGo website and app use no advertising cookies or advertising trackers, and our fonts are served by CarGo itself. Because of this, CarGo does not respond differently to a browser's Do Not Track or Global Privacy Control signal.
6. Cookies and messages
CarGo uses one cookie to keep you signed in, for up to 30 days. The app also stores its settings in your browser, where they stay until you clear them, and your browser may keep copies of pages and pictures for a short time. You choose alerts, alert emails and quiet hours in the app. Unsubscribing from an email does not delete your data or stop CarGo checking your cameras.
7. Security
Everything travels over HTTPS. Access is granted by a signed-in session or by a private key that you control. Credentials and Ring tokens are stored with our hosting provider, encrypted at rest, and we keep as little data as the service needs. No system is perfectly secure. If we learn of a security breach that affects your data, we will tell you, and any regulator, as the law requires. To report a security problem, see our security page.
8. Children
CarGo accounts are for adults aged 18 or older managing their own household or business cameras, and CarGo is not directed to children. We do not knowingly let anyone under 18 open an account. If you think a child has opened an account, use Help in the CarGo app or email support@cargohold.io, and we will delete it. A camera can record children who happen to pass by; their images are handled exactly like everyone else's: motion clips are deleted within minutes, best-effort face blurring is applied to sighting stills, and parking-space pictures are not blurred, as section 1 explains.
9. Changes
If we change this policy in a way that matters, we will note the change here with a new date, tell you in the app or by email, and the app will ask you to agree again; once CarGo reads that a new agreement is needed, normally at its next check, it checks no more video until you agree. If CarGo ever gains a new kind of detection, or a new company that receives your data, we will tell you before it is turned on for your account.
10. Contact
For help, use Help in the CarGo app. For privacy requests and law enforcement requests, email support@cargohold.io.