Privacy Policy of Carma Project

Carma Project collects some Personal Data from its Users.

Personal Data collected for the following purposes and using the following services:

    • Access to third-party accounts

      • Facebook account access

        Permissions: About Me; Publish to the Wall

    • Advertising

      • Facebook Lookalike Audience and Google Ad Manager

        Personal Data: Cookies; Usage Data

    • Analytics

      • Google Analytics, Facebook Ads conversion tracking (Facebook pixel) and Google Ads conversion tracking

        Personal Data: Cookies; Usage Data

      • Google Analytics Demographics and Interests reports

        Personal Data: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example)

    • Contacting the User

      • Contact form

        Personal Data: company name; email address; first name; last name; phone number; profession; ZIP/Postal code

      • Mailing list or newsletter

        Personal Data: email address; first name; last name; Usage Data

    • Content commenting

      • Facebook Comments

        Personal Data: Cookies; Usage Data

    • Displaying content from external platforms

      • Google Fonts

        Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service

      • Wistia widget and YouTube video widget

        Personal Data: Cookies; Usage Data

    • Heat mapping and session recording

      • Inspectlet

        Personal Data: Cookies; Usage Data

    • Interaction with data collection platforms and other third parties

      • Vehicle Recall Lookup

    • Interaction with external social networks and platforms

      • Facebook Like button and social widgets, LinkedIn button and social widgets and Twitter Tweet button and social widgets

        Personal Data: Cookies; Usage Data

    • Interaction with live chat platforms

      • Facebook Messenger Customer Chat

        Personal Data: Cookies; Data communicated while using the service; Usage Data

    • Interaction with online survey platforms

      • Promotions or Surveys

    • Managing contacts and sending messages

      • Mailchimp

        Personal Data: email address; first name; last name; various types of Data

    • Managing support and contact requests

      • Salesforce Service Cloud

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Platform services and hosting

      • Webflow

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Registration and authentication

      • Facebook Authentication

        Personal Data: various types of Data as specified in the privacy policy of the service

      • Firebase Authentication

        Personal Data: email address; first name; last name; password; phone number; username

    • Remarketing and behavioral targeting

      • Facebook Remarketing

        Personal Data: Cookies; Usage Data

      • Facebook Custom Audience

        Personal Data: Cookies; email address

    • Social features

      • Inviting and suggesting friends

        Personal Data: various types of Data

      • Public profile

        Personal Data: username

    • Tag Management

      • Google Tag Manager

        Personal Data: Usage Data

    • User database management

      • Intercom

        Personal Data: Cookies; email address; Usage Data; various types of Data as specified in the privacy policy of the service

      • HubSpot Lead Management

        Personal Data: various types of Data as specified in the privacy policy of the service

      • HubSpot CRM

        Personal Data: email address; phone number; various types of Data as specified in the privacy policy of the service

Further information about Personal Data

    • Your California Privacy Rights

      This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA.”

      For more details about the personal information we have collected over the last 12 months, including the categories of sources, please see the Types of Data Collected section above. We collect this information for the business and commercial purposes described in the The purposes of processing section above. We share this information with the categories of third parties described in the individual sections for those third party services listed above.

      Carma does not directly sell personal information such as Name, Address, Phone Number, or Email for monetary consideration; however, we may share certain personal information with third parties under circumstances which might be deemed a “sale” under the California Consumer Privacy Act. This information is solely shared for the purpose of assisting with the identification and remedy of vehicle recalls and may include: VIN, year, make, and model of a vehicle that is identified through Carma's vehicle safety checks.

      Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.

      California consumers may make a request pursuant to their rights under the CCPA by contacting us at We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.

      Please be advised that exercising your rights with Carma Project does not also exercise your rights with any auto dealers, local dealer associations, vehicle manufacturers, or other third parties. If you wish to exercise your rights with the above entities, you will need to do so by contacting them directly.

    • The Personal Information You Give to Us

      We ask for, and collect, certain information when you use our services. This information is necessary for the performance of our services and to allow us to comply with legal obligations. When we collect data that does not identify you as a natural person, we are permitted to use and disclose this information for any purpose, notwithstanding anything contrary in this Privacy Policy, except where prohibited by law.

      When you utilize certain services or features of our Website, you will need to provide us with certain information:

      Vehicle Information: Product recalls affect products, such as cars, rather than people. When we check to see if your vehicle is subject to a recall, we will ask you for and collect information about your vehicle, including, but not limited to, your license plate number, vehicle identification number (VIN), and the state in which the car is registered (“Vehicle Information”). Depending on the information you submit, we may provide it to one of our service providers to identify additional information about the vehicle. In doing this, we combine the information you submitted with additional information about your vehicle which may include, but is not limited to, the VIN, the year, make and model of your car, its license plate number (if not already provided), Auto Care Association ACES details, the last known recall information update, the number of recalls, and the types of recalls, for your vehicle.

      The Vehicle Information may then be combined with other personal information that you provide, including your name, phone number, and email address. The Vehicle Information and personal information you provide may then be sent to a call-center that is responsible for facilitating the recall repair process. This information may also be sent to a third-party associated with the manufacturer for facilitating the recall repair. Please note that the recall verification process is not always 100% accurate, and may not include very recent activity. Further investigation may be necessary to determine if your vehicle is subject to recall. For the manufacturer’s current information on recall activity for any Toyota, Lexus, or Scion vehicle, please visit :, For recall info for all other manufacturers, visit:

      Uploaded Photos: When you upload a photo, we will collect the photo itself along with any information, including metadata, contained therein. Metadata may include, but is not limited to, the date, time, and geolocation data associated with the photo, the make and model of the device used to take the photo, and any other data contained in the photo. This information is used for the purposes of facilitating the recall repair process.

      Contact Information: You may provide personal information to us when you fill out the “Contact Us” section of our Website or by filling out a form to have a representative contact you about your recall. This may include information such as your first and last name, email address, phone number, physical address, and any other information you choose to include in the forms (“Contact Information”). If you provide this information you agree that we, our service providers, our customers, or third-party affiliates may contact you using this information, including, by phone, post, email, and/or text message (SMS or otherwise).

      Account Information: When you create an account with us, we collect information about you including, but not limited to, your name, telephone number, and email address. For security purposes, we also require that you create a secure password. We process this information to give you secure access to your account. If you participate in our Ambassador Program, we may associate your Account Information with other information including a Referral Link identifier, CarmaCoin amounts, and other information necessary to facilitate the Ambassador Program.

      Communications: If you correspond with us by email, the postal service, or other form of communication, we may retain such correspondence and the information contained in it and use it to respond to your inquiry; to notify you of events, publications, or other services; or to keep a record of your complaint, accommodation request, and the like. Note: if you ask not to contact you by email at a certain email address, we will retain a copy of that email address on our “master do not send” list in order to comply with your no-contact request. We may still send you non-marketing emails related to your relationship with us. For example, we may need to email you if you want to reset your password. If you provide us with a phone number, you agree we may contact you via telephone, text, or messaging service. Standard messaging and data rates apply.

      Survey Information: If you participate in any survey, you may provide certain personal data as part of your response.

      Filling Out a Form Online: When you fill out a form or submit information to us via our Website, we collect any personal information you provide and we may use that information for business purposes or to provide you with services.

    • How Do We Use Your Personal Data?

      Deliver our Services:

      Process and fulfill requests to check vehicle information subject to safety recalls.
      Provide you with information and content to share with third-parties.
      Process and facilitate delivery of incentives and rewards.
      Send you information, service updates, notifications, and respond to comments or inquiries.
      Identify and validate who you are for fraud prevention and security purposes.

      Provide, Maintain, Protect, and Improve our Website and Applications:

      Prevent and detect fraud and harmful or suspicious activity.
      Maintain the security and integrity of our Website and applications.
      Ensure the safety and security of your and our information.
      Conduct security and privacy investigations and assessments.
      Fulfill our legal obligations and comply with our Terms of Use and applicable policies.
      Provide you with customer and technical support.

      Personalize Content, Advertising, Promotions:

      Improve your experience by providing content and features based on your information.
      Measure performance and efficacy of services.
      Administer promotions, sweepstakes, contests, and other promotional activities presented by us or our partners.
      Deliver targeted marketing for our services on and off our Website and applications, and measure the success of those campaigns.
      Place advertisement that is based on your interests, experiences, and behavior so that they are more relevant to you.

      There may be other reasons we use your data and will disclose those purposes to you on this Privacy Policy.

Contact information

    • Owner and Data Controller

      Carma Project, LLC. 2900 Bristol Street, Suite D-201, Costa Mesa, CA 92626 (USA)

      Owner contact email: