Intelligence built on trust.
CarPapi may process sensitive automotive and financial information. That responsibility shapes the product, not just the policy page.
How we handle customer information.
Customer consent
Information is collected voluntarily, with a clear purpose, and never pre-checked.
Data minimization
We ask for what improves the match — and mark optional fields as optional.
Transparent estimates
Payment ranges and Close Score are always labeled as estimates.
Secure result links
Shopper match results are shared through secure random links that show vehicle information, not shopper identity.
Role-based dealership access
Dealership users only see data scoped to their own dealership and role.
No credit pulls
CarPapi does not pull credit reports, and optional income and credit-range information is self-reported and unverified.
No guaranteed approval claims
CarPapi never represents a financing outcome.
Fair-lending-conscious workflows
Estimates are framed as deal fit, not creditworthiness verdicts.
Auditable customer consent
Consent events are recorded with the wording shown and a timestamp.
No sensitive identifiers
AutoMatch does not collect Social Security numbers, dates of birth or bank-account information.
Security posture
CarPapi is built with tenant isolation at the database level and row-level access policies, so dealership access is scoped to dealership membership. Shopper match results are shared through secure random links that return vehicle information rather than exposing shopper identity. We do not claim certifications such as SOC 2 until they are actually achieved.
Financial information is only ever collected voluntarily and with a clear purpose, and is treated according to applicable privacy, consumer protection, financial data and dealership obligations.
Questions about how your data is handled?
We're happy to walk through the details.