Privacy Policy

Introduction

This Privacy Policy (“Policy”) explains how KarKar Ops LLC (“KarKar,” “we,” “us,” or “our”) collects, uses, and safeguards personal information of users of the KarKar platform (“Platform”). KarKar IP LLC owns all related intellectual property and, as an affiliate of KarKar Ops LLC under their common parent company KarKar Holding Inc, helps deliver certain platform notifications (see the “SMS and Text Messaging” section below). KarKar Ops LLC acts as the operator and primary data controller.

1. Information We Collect

• Identification and contact details

• Professional credentials (for Mechanics)

• Payment and financial data (processed via Stripe, Inc.)

• Vehicle and service information

• Location data for service matching

• Technical and usage analytics (via PostHog, Inc.)

• Communications and customer support records

• Advertising, cookie, and device identifiers (via Google Ads)

• Advertising attribution — how you arrived at the Platform: the Google Ads click identifier (gclid, gbraid or wbraid), campaign parameters (utm_*), the referring site and the first page you landed on. We keep this in a first-party cookie (kk_attr) for up to 90 days and record it against your account and any booking you make.

• Google account information (your name, email address, and profile photo) if you choose to sign in with Google

2. How We Use Information

• To manage accounts, verify credentials, and process payments

• To enable bookings, payment protection, and dispute resolution

• To send updates, promotions, or notifications (with consent)

• To analyze Platform use and improve performance

• To comply with laws and enforce agreements

3. Disclosure of Information

• To Stripe, PostHog, AWS, and other service providers

• To Mechanics or Clients as needed to complete transactions

• To regulators or authorities as required by law

• To affiliates, advisors, or in case of merger or acquisition

• To Google (Google Ads) for advertising measurement, including remarketing

• To Google Ads, server-side, to measure which advertising led to a booking: a SHA-256 hash of the email address and telephone number associated with the booking, the Google click identifier, and the booking event and its value. A hash is one-way — Google cannot read your email address or phone number from it, but can match it against its own hashed records. We never send Google your email address or phone number in readable form.

4. Data Security, Cookies & Third-Party Services

KarKar uses secure cloud infrastructure hosted by Amazon Web Services (AWS) in the United States with encryption in transit and at rest. KarKar may also integrate other reputable third-party software and infrastructure. While we select trusted partners, KarKar is not responsible for their security practices or service availability. Users should review their privacy policies individually.

Cookies, Analytics & Advertising

We use cookies and similar technologies to operate the Platform, understand usage, and measure our advertising:

• Essential cookies — required for the Platform to function (authentication, security); always active.

• Analytics — PostHog, to understand usage and improve the Platform.

• Advertising — Google Ads, to measure ad effectiveness (conversion tracking) and show relevant ads, including remarketing to prior visitors.

Signing in with Google

If you choose to sign in with Google, Google shares a limited set of information with us: your email address, whether Google has verified it, your name, and your profile photo. We never receive your Google password, and we do not gain access to your Gmail, Drive, contacts, or any other Google service.

We use this information only to create your KarKar account or to sign you in to an existing one. If the email address Google provides already belongs to a KarKar account, we sign you in to that account rather than creating a duplicate.

If your KarKar account has no profile photo, we make a one-time copy of your Google profile photo and store it as your KarKar photo. It is a copy, not a link: changing your photo in Google will not change it on KarKar, and we never replace a photo you have already set yourself. You can change or remove it at any time in your profile.

Google’s own handling of your data is governed by Google’s Privacy Policy. You can review and revoke KarKar’s access at any time in your Google Account settings.

The Google Ads tag runs in a restricted, consent-denied mode (Google Consent Mode) until you accept cookies via our consent banner; advertising cookies are set only after you accept. You can decline or withdraw consent at any time in cookie settings, and opt out via Google directly: Ads personalization (adssettings.google.com). The attribution cookie described in section 1 and the server-side hashed-identifier upload described in section 3 do not depend on the banner; to opt out of them, contact info@kar-kar.com. Google processes this data as an independent controller under its own Privacy Policy.

5. Retention and Deletion

We retain data as long as necessary for operational, legal, and compliance purposes. Users may request deletion by contacting info@kar-kar.com, subject to retention requirements.

6. Children’s Privacy

The Platform is intended only for individuals aged 18 or older. We do not knowingly collect information from minors.

7. User Content

Content uploaded by users (e.g., photos, vehicle images, reviews) may include personal data and is processed according to this Policy. Such content is licensed to KarKar Ops LLC and KarKar IP LLC as described in the Terms of Service.

8. Dispute Resolution

Disputes regarding data handling follow the procedure outlined in the Terms of Service, including good-faith informal resolution and binding arbitration under Delaware law.

9. Your Rights

Users may request access, correction, or deletion of their personal data by contacting info@kar-kar.com. Requests are processed in accordance with applicable U.S. and California privacy laws (including CCPA).

California residents (CCPA/CPRA): You have the right to know, access, correct, and delete your personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. KarKar does not sell personal information for money. Our use of Google Ads advertising cookies, and the hashed-identifier upload described in section 3, may constitute “sharing” under the CPRA — you can opt out by declining cookies in our consent banner (or withdrawing consent in cookie settings), via Google’s Ads Settings, and by contacting info@kar-kar.com. We will not discriminate against you for exercising these rights.

10. SMS and Text Messaging

KarKar operates two separate SMS programs — transactional (service) messages and marketing/promotional messages — and each requires its own separate, independently given consent. By providing your mobile phone number and opting in to a program, you consent to receive only that program’s messages from KarKar; opting in to one program does not enroll you in the other. Transactional messages relate to your account and services — including service status updates (offer sent, payment received, technician en route, arrived, or service completed), appointment confirmations and reminders, account notifications, and one-time verification passcodes (OTP). Marketing and promotional messages may include offers, discounts, and news about KarKar services.

Message frequency varies based on your activity. Message and data rates may apply. Reply STOP to any message to unsubscribe, or HELP for assistance. Consent to either program is separate and independent, and consent to either is not a condition of purchasing any goods or services.

No mobile information or phone numbers will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never sold or shared with third parties for their own marketing. Mobile information may only be shared with subprocessors that directly support our messaging program — for example, our telecommunications provider Twilio, Inc. — and solely to deliver the messages you have requested. You may withdraw consent at any time by replying STOP.

Some notifications — including SMS/text messages — are sent on behalf of the KarKar platform by KarKar IP LLC, a Delaware affiliate of KarKar Ops LLC under their common parent, KarKar Holding Inc. When acting in this role KarKar IP LLC processes mobile information solely to deliver the messages described above and is bound by this Policy; KarKar Ops LLC remains the operator and primary data controller.

11. AI and Automated Processing

KarKar uses automated software to screen Platform chat and service-offer text for contact details and off-platform payment requests (this runs on our own servers and only flags content for human review), to translate messages between languages (Google Cloud Translation), and to compute ratings and statistics from your activity on the Platform. There is no AI chatbot on the Platform, and no decision about your account, booking or payment is made by software alone — a member of KarKar staff decides. Our staff use AI assistants (provided by Anthropic) to look up and analyze Platform records when operating the Platform, for example when answering a support request or reviewing a dispute; that information is processed on our instructions and is not used to train AI models. If we begin to use AI in a way not described here, we will update this Policy first.

12. Policy Updates

KarKar may update this Policy periodically. Material updates will be communicated through the Platform or by email. Continued use constitutes acceptance.

KarKar Ops LLC
8 The Green STE B, Dover, Kent County, DE 19901, USA
Email: info@kar-kar.com