Privacy Policy

Effective Date: August 9, 2026
Last Updated: August 9, 2026

CAVAUT respects the privacy of the individuals and businesses who use our products and services. This Privacy Policy explains how CAVAUT collects, uses, discloses, retains, and otherwise processes personal information in connection with our websites, software, applications, portals, customer-facing pages, communications tools, integrations, and other products and services that reference this Privacy Policy (collectively, the “Services”).

For purposes of this Privacy Policy, “CAVAUT,” “we,” “us,” and “our” refer to CAVAUT and, where applicable, its affiliates, subsidiaries, successors, and related entities.

This Privacy Policy applies when CAVAUT determines how and why personal information is processed.

In some circumstances, CAVAUT processes personal information on behalf of another business, such as a collision repair facility or other CAVAUT customer. In those situations, that business may control the information and CAVAUT may process the information as its service provider or processor. You should contact the applicable business directly regarding its privacy practices or requests concerning information it controls.

This Privacy Policy does not apply to third-party websites, applications, platforms, or services that maintain their own privacy policies, even if they are accessible through or integrated with CAVAUT.

1. INFORMATION WE COLLECT

The personal information CAVAUT collects depends on how you interact with us, which Services you use, and the information provided to us by our business customers and partners.

We may collect the following categories of information.

A. Contact and Identification Information

We may collect information such as:

• Name;

• Email address;

• Telephone or mobile number;

• Mailing or business address;

• Username;

• Account or user identifier;

• Job title;

• Employer or business name;

• Business contact information; and

• Other information used to identify or communicate with you.

B. Account Information

When you create or use a CAVAUT account, we may collect information associated with that account, including:

• Username;

• Account identifier;

• Login activity;

• Authentication information;

• Account preferences;

• User permissions;

• Organization affiliation;

• Subscription information; and

• Account settings.

Passwords may be processed through authentication systems designed to protect account credentials.

C. Vehicle Information

Because CAVAUT may be used in connection with vehicle repair and related services, we may receive information concerning a vehicle, including:

• Vehicle Identification Number (VIN);

• License plate information;

• Vehicle year;

• Make;

• Model;

• Trim;

• Color;

• Mileage;

• Vehicle options;

• Vehicle condition;

• Damage information;

• Repair history;

• Repair status;

• Diagnostic information;

• Calibration information;

• Parts information;

• Estimated or actual repair dates; and

• Other information relating to a vehicle or repair.

D. Repair and Service Information

We may receive information relating to repairs or services performed or proposed for a vehicle, including:

• Repair estimates;

• Repair orders;

• Repair status;

• Repair stages;

• Parts status;

• Supplemental repair information;

• Appointment information;

• Estimated completion dates;

• Actual completion dates;

• Quality-control information;

• Calibration status;

• Diagnostic or scanning information;

• Repair notes;

• Customer approvals;

• Repair facility information; and

• Communications relating to a repair.

E. Insurance and Claim Information

When relevant to the Services, we may receive information concerning an insurance claim, including:

• Insurance company;

• Claim number;

• Claim status;

• Adjuster or representative information;

• Deductible information;

• Estimate information;

• Supplement information;

• Coverage-related information provided by an insurer or repair facility;

• Payment-related status;

• Loss information; and

• Other claim-related information supplied through the Services.

CAVAUT does not independently determine insurance coverage or claim eligibility merely by receiving or displaying this information.

F. Photographs, Videos, and Documents

The Services may permit users or businesses to upload, capture, transmit, or display:

• Vehicle photographs;

• Damage photographs;

• Repair-progress photographs;

• Videos;

• Estimates;

• Repair orders;

• Invoices;

• Receipts;

• Forms;

• Documents;

• Electronic records; and

• Other files.

Depending on the Service and device permissions, photographs or videos may contain metadata associated with the file.

G. Communications

We may collect and maintain communications sent through or relating to CAVAUT, including:

• SMS or text messages;

• Email communications;

• Customer messages;

• Support requests;

• Chat messages;

• Repair updates;

• Notification history;

• Message delivery information;

• Communication preferences;

• Opt-in and opt-out information; and

• Other correspondence.

When you contact CAVAUT directly, we may retain the contents of your communication and information necessary to respond.

H. Device and Internet Information

When you access the Services, we may automatically receive technical information such as:

• Internet Protocol (IP) address;

• Browser type;

• Operating system;

• Device type;

• Device identifiers;

• Session identifiers;

• Screen or display characteristics;

• Language settings;

• Approximate geographic location derived from an IP address;

• Referring website;

• Pages visited;

• Date and time of access;

• Login activity;

• Features used;

• Interactions with the Services;

• Error and diagnostic information; and

• Other technical information associated with use of the Services.

I. Usage Information

We may collect information regarding how users interact with CAVAUT.

This may include:

• Pages viewed;

• Features accessed;

• Buttons or links selected;

• Time spent using particular features;

• Navigation patterns;

• Session duration;

• Frequency of use;

• Account activity;

• Application performance;

• Errors;

• Device interactions; and

• Similar usage information.

This information helps us understand how the Services operate and how they can be improved.

J. Location Information

CAVAUT may derive an approximate location from information such as an IP address.

Certain Services may also request access to device location if location functionality is necessary for a feature and the user grants the applicable device permission.

If precise location functionality is introduced, users may generally control device-level permissions through their operating system or device settings.

K. Payment and Transaction Information

If you purchase CAVAUT Services, we may collect information associated with the transaction, including:

• Billing name;

• Billing address;

• Subscription;

• Amount paid;

• Payment status;

• Transaction identifiers;

• Invoice information; and

• Payment method type.

CAVAUT may use third-party payment processors to process payments.

When a third-party payment processor is used, payment-card numbers and other financial credentials may be submitted directly to that provider rather than stored by CAVAUT.

The payment processor's handling of information is also subject to its own privacy and security practices.

L. Business and Professional Information

For business customers, prospective customers, partners, vendors, or other professional contacts, we may collect:

• Business name;

• Business address;

• Job title;

• Professional contact information;

• Industry;

• Business size;

• Products or services used;

• Sales communications;

• Account relationship;

• Subscription information; and

• Other information relevant to our business relationship.

M. Support and Customer-Service Information

If you contact CAVAUT for assistance, we may collect:

• Contact information;

• Account information;

• Description of the issue;

• Screenshots;

• Uploaded files;

• Device or browser information;

• Communications with support personnel; and

• Other information necessary to investigate and resolve the request.

N. Information You Choose to Provide

We may collect other information that you voluntarily provide when you:

• Submit a form;

• Request a demonstration;

• Contact CAVAUT;

• Complete a survey;

• Submit feedback;

• Participate in research;

• Request information;

• Register for an event;

• Communicate with support; or

• Otherwise interact with CAVAUT.

2. HOW WE COLLECT INFORMATION

CAVAUT may collect personal information from several sources.

A. Directly From You

We collect information when you provide it directly to us.

For example, this may occur when you:

• Create an account;

• Enter information into CAVAUT;

• Submit a form;

• Request a demonstration;

• Communicate through the Services;

• Contact customer support;

• Subscribe to communications;

• Upload a photograph or document;

• Make a payment; or

• Otherwise interact with us.

B. From CAVAUT Business Customers

Businesses using CAVAUT may provide information about their customers, employees, vehicles, repairs, insurance claims, appointments, and business operations.

For example, a collision repair facility may provide information to CAVAUT so that CAVAUT can facilitate repair updates or customer communications.

When CAVAUT processes this information on behalf of the business, the business may be responsible for determining how and why the information is used.

C. From Insurance Companies and Other Industry Participants

Where applicable to a Service or integration, information may be received from:

• Insurance companies;

• Repair facilities;

• Estimating systems;

• Vehicle-data providers;

• Parts providers;

• Calibration providers;

• Technology platforms;

• Administrators;

• Vendors; and

• Other businesses involved in a repair or claim.

D. Automatically From Devices

Certain information may be collected automatically when you access or use CAVAUT.

This may occur through technologies such as:

• Cookies;

• Server logs;

• Software development kits;

• Pixels;

• Local storage;

• Analytics technologies;

• Session technologies; and

• Similar tools.

E. From Service Providers

Companies that assist CAVAUT with hosting, analytics, security, communications, payments, customer support, software operations, or other services may provide information to us in connection with those activities.

F. From Public or Commercial Sources

Where permitted by law, CAVAUT may receive business contact or other information from publicly available sources, business directories, professional sources, industry sources, data providers, or commercial partners.

G. By Combining Information

We may combine information collected from different sources.

For example, we may combine account information with Service usage information to improve functionality, provide support, maintain security, or understand how the Services are being used.

3. HOW WE USE PERSONAL INFORMATION

CAVAUT may use personal information for the following purposes.

A. Providing the Services

We may use information to:

• Create and maintain accounts;

• Authenticate users;

• Provide requested functionality;

• Display repair information;

• Facilitate customer communications;

• Provide repair-status information;

• Process user instructions;

• Maintain customer-facing portals;

• Facilitate integrations;

• Process transactions;

• Store documents and photographs;

• Provide notifications; and

• Otherwise operate CAVAUT.

B. Communicating With You

We may use information to communicate about:

• Your account;

• Repair updates;

• Service notifications;

• Security matters;

• Customer-support requests;

• Product changes;

• Privacy matters;

• Legal terms;

• Subscription matters;

• Billing;

• Requested information; and

• Other matters relating to our relationship with you.

C. Customer Support

We may use information to investigate and resolve:

• Technical issues;

• Account problems;

• Customer inquiries;

• Service errors;

• Integration problems;

• Billing issues;

• Security concerns; and

• Other support matters.

D. Operating and Maintaining CAVAUT

We may use information to:

• Maintain systems;

• Diagnose errors;

• Troubleshoot problems;

• Monitor availability;

• Administer infrastructure;

• Maintain integrations;

• Manage databases;

• Back up information;

• Test functionality; and

• Maintain the reliability of our Services.

E. Improving and Developing CAVAUT

We may analyze information to:

• Understand how users interact with CAVAUT;

• Identify frequently used features;

• Improve existing functionality;

• Develop new functionality;

• Improve usability;

• Measure performance;

• Identify errors;

• Understand customer needs; and

• Improve our products and services.

F. Security and Fraud Prevention

We may use information to:

• Authenticate users;

• Detect suspicious activity;

• Prevent unauthorized access;

• Investigate fraud;

• Detect abuse;

• Monitor security events;

• Protect accounts;

• Enforce our Terms of Use;

• Protect CAVAUT infrastructure; and

• Protect our users and other persons.

G. Legal and Compliance Purposes

We may process information when reasonably necessary to:

• Comply with applicable law;

• Respond to lawful government requests;

• Respond to subpoenas, warrants, court orders, or other legal process;

• Establish, exercise, or defend legal claims;

• Investigate violations of our agreements;

• Enforce contractual rights;

• Maintain legally required records;

• Respond to regulatory inquiries; or

• Protect the rights, property, safety, and security of CAVAUT or others.

H. Business Administration

We may process information for legitimate business operations, including:

• Accounting;

• Auditing;

• Billing;

• Financial reporting;

• Business planning;

• Internal administration;

• Vendor management;

• Corporate governance;

• Compliance; and

• Business continuity.

I. Marketing

Where permitted by law, CAVAUT may use business contact information to communicate about:

• CAVAUT products;

• New features;

• Product improvements;

• Educational materials;

• Industry information;

• Events;

• Demonstrations; and

• Other CAVAUT offerings.

You may opt out of marketing communications as described below.

Opting out of marketing communications will not prevent CAVAUT from sending transactional, security, account, legal, or service-related communications.

J. Analytics

We may use information to measure and analyze the performance and use of our websites and Services.

Analytics may help us understand matters such as:

• Website traffic;

• Feature adoption;

• User interactions;

• Performance;

• Technical errors;

• Device characteristics; and

• General usage trends.

K. Artificial Intelligence and Automated Functionality

CAVAUT may use artificial intelligence, machine learning, or other automated technologies to support certain features.

Depending on the functionality offered, these technologies may assist with:

• Summarizing information;

• Organizing information;

• Drafting communications;

• Categorizing information;

• Identifying patterns;

• Automating workflows;

• Improving search;

• Supporting customer service; and

• Improving CAVAUT products.

Where third-party technology providers are used, information may be processed by those providers subject to contractual, technical, and legal safeguards appropriate to the service.

CAVAUT will not intentionally use personal information for purposes prohibited by applicable law.

L. De-Identified and Aggregated Information

CAVAUT may create information that has been aggregated or de-identified so that it is not reasonably linked to an identifiable individual.

Subject to applicable law, CAVAUT may use de-identified or aggregated information for purposes such as:

• Analytics;

• Research;

• Product development;

• Performance measurement;

• Industry insights;

• Security;

• Benchmarking; and

• Improving CAVAUT.

Where required by law, CAVAUT will maintain de-identified information in de-identified form and will not attempt to re-identify it except as permitted by law.

4. HOW WE DISCLOSE PERSONAL INFORMATION

CAVAUT does not disclose personal information indiscriminately.

We may disclose information in the circumstances described below.

A. Service Providers

We may disclose information to vendors and service providers that perform functions for CAVAUT.

These may include providers of:

• Cloud hosting;

• Data storage;

• Software infrastructure;

• Cybersecurity;

• Authentication;

• Email delivery;

• SMS delivery;

• Customer support;

• Analytics;

• Payment processing;

• Database services;

• Monitoring;

• Error reporting;

• Professional services; and

• Other technology or operational services.

These providers may process information only as appropriate to perform services for CAVAUT or as otherwise permitted by applicable law and their agreements with us.

B. Repair Facilities and Other CAVAUT Customers

When CAVAUT provides Services on behalf of a repair facility or other business, information may be made available to that business and its authorized personnel.

C. Insurers and Repair-Related Parties

Where necessary to provide requested functionality or where directed by an authorized user or business, information may be disclosed to or received from parties involved in a repair or claim.

These parties may include:

• Insurance companies;

• Repair facilities;

• Administrators;

• Parts providers;

• Calibration providers;

• Rental providers;

• Technology providers; and

• Other authorized participants.

D. At Your Direction

We may disclose information when you request, authorize, or direct us to do so.

For example, using a feature that sends information to another party may constitute a direction to disclose the information necessary to complete that request.

E. Legal Requirements

We may disclose personal information if we reasonably believe disclosure is necessary to:

• Comply with applicable law;

• Respond to valid legal process;

• Respond to a subpoena, warrant, or court order;

• Cooperate with law enforcement;

• Respond to a government or regulatory request;

• Protect against fraud;

• Investigate unlawful conduct;

• Enforce our agreements;

• Protect CAVAUT's legal rights; or

• Protect the rights, property, safety, or security of another person.

F. Business Transactions

Personal information may be disclosed or transferred in connection with an actual or proposed:

• Merger;

• Acquisition;

• Investment;

• Financing;

• Reorganization;

• Joint venture;

• Bankruptcy;

• Sale of assets;

• Sale of CAVAUT;

• Corporate restructuring; or

• Similar transaction.

Information may be disclosed to prospective purchasers, investors, advisors, lenders, or other participants subject to appropriate confidentiality restrictions where applicable.

G. Affiliates and Related Entities

CAVAUT may disclose information among its affiliates, subsidiaries, parent companies, successors, or other entities under common ownership or control where reasonably necessary for the purposes described in this Privacy Policy.

H. Professional Advisors

We may disclose information to professional advisors such as:

• Attorneys;

• Accountants;

• Auditors;

• Insurers;

• Consultants; and

• Other professional advisors.

Such disclosures may occur where reasonably necessary for legal, financial, compliance, risk-management, or business purposes.

I. With Consent

We may disclose information for other purposes with your consent or as otherwise disclosed when information is collected.

5. SALE, SHARING, AND TARGETED ADVERTISING

Privacy laws in certain states define terms such as “sale,” “share,” and “targeted advertising” broadly.

CAVAUT does not intend to sell personal information for money.

If CAVAUT engages in advertising, analytics, or other activities that applicable privacy law defines as the sale or sharing of personal information or the processing of personal information for targeted advertising, CAVAUT will provide any notices, choices, or opt-out mechanisms required by applicable law.

CAVAUT may also recognize legally required browser-based opt-out preference signals where required by applicable law.

6. COOKIES AND SIMILAR TECHNOLOGIES

CAVAUT websites and Services may use cookies and similar technologies.

These technologies may be used to:

• Maintain sessions;

• Authenticate users;

• Remember preferences;

• Improve security;

• Understand website usage;

• Measure performance;

• Diagnose errors;

• Improve functionality; and

• Support analytics.

Some cookies may be necessary for the Services to operate.

Other cookies may be optional where required by applicable law.

Browser settings may permit you to delete or block cookies.

Blocking certain cookies may cause portions of the Services to function incorrectly or become unavailable.

Where required, CAVAUT may provide additional cookie-management controls.

7. ANALYTICS TECHNOLOGIES

CAVAUT may use third-party analytics providers to understand how websites and Services are used.

Analytics providers may receive technical and usage information, such as device information, IP address, pages visited, session information, and interactions with the Services.

CAVAUT will configure and use analytics technologies in accordance with applicable privacy requirements.

8. EMAIL COMMUNICATIONS

You may opt out of promotional CAVAUT emails by following the unsubscribe instructions contained in the applicable communication.

Even after opting out of promotional emails, CAVAUT may continue to send non-promotional communications.

These may include:

• Account notices;

• Security notifications;

• Service announcements;

• Billing communications;

• Legal notices;

• Responses to requests; and

• Other transactional communications.

9. TEXT MESSAGES AND MOBILE COMMUNICATIONS

Certain CAVAUT Services may provide SMS or other mobile-message functionality.

Depending on the Service, messages may include:

• Repair-status updates;

• Appointment reminders;

• Customer-service communications;

• Pickup notifications;

• Verification messages;

• Requests for information;

• Administrative communications; and

• Other messages relating to the Services.

Message frequency varies.

Message and data rates may apply.

Where applicable, recipients may opt out of SMS communications using instructions provided with the applicable messaging program, including by replying “STOP” where supported.

CAVAUT may maintain information concerning SMS consent and messaging activity, including:

• Mobile telephone number;

• Consent status;

• Consent date or time;

• Opt-out status;

• Message delivery status; and

• Communications associated with the messaging program.

Consent to receive promotional text messages will not be required as a condition of purchasing CAVAUT Services where prohibited by law.

10. DATA SECURITY

CAVAUT takes the protection of information seriously.

We may use administrative, technical, physical, and organizational measures designed to protect personal information against unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure.

Security measures may include, as appropriate:

• Access controls;

• Authentication;

• Encryption;

• Logging;

• Monitoring;

• Network security;

• Secure development practices;

• Vendor-management procedures;

• Backup procedures; and

• Other safeguards appropriate to the nature of the information and Services.

No method of electronic transmission, storage, network security, or computer system is completely secure.

Accordingly, CAVAUT cannot guarantee absolute security.

Users are also responsible for protecting their credentials, devices, accounts, and access to the Services.

If you believe your account or information may have been compromised, contact CAVAUT promptly through the security or support contact made available by CAVAUT.

11. DATA RETENTION

CAVAUT retains personal information for as long as reasonably necessary for the purposes for which it was collected and as necessary to operate the Services.

Retention periods may depend on factors including:

• The nature of the information;

• The Services involved;

• Customer instructions;

• Contractual requirements;

• Legal requirements;

• Regulatory requirements;

• Security needs;

• Fraud-prevention requirements;

• Backup processes;

• Dispute resolution;

• Establishing or defending legal claims; and

• Legitimate business needs.

Information may remain in backups or archived systems for a limited period after deletion from active systems.

CAVAUT may retain de-identified or aggregated information where permitted by law.

12. INFORMATION PROCESSED ON BEHALF OF CAVAUT CUSTOMERS

An important distinction applies when CAVAUT processes information on behalf of another business.

For example, a repair facility may use CAVAUT to communicate with its customer regarding a repair.

In that situation, the repair facility may determine:

• What customer information is collected;

• Why the information is collected;

• What repair information is entered;

• Which communications are sent;

• Who may access the information; and

• How long certain business records must be maintained.

CAVAUT may process that information as a service provider or processor acting on behalf of the business.

If you are seeking to exercise privacy rights concerning information controlled by a repair facility, insurer, employer, or other CAVAUT customer, you may need to direct your request to that organization.

Where appropriate, CAVAUT may assist its business customers in responding to privacy requests.

13. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable law, you may have rights concerning your personal information.

These rights may include the right to:

• Confirm whether CAVAUT processes your personal information;

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion of personal information;

• Obtain a portable copy of certain information;

• Opt out of certain sales of personal information;

• Opt out of certain sharing of personal information;

• Opt out of targeted advertising;

• Withdraw consent where processing is based on consent;

• Restrict certain uses of sensitive personal information where applicable;

• Appeal certain decisions concerning a privacy request; and

• Exercise other rights provided by applicable law.

These rights are not absolute.

CAVAUT may deny or limit a request where permitted or required by law.

For example, CAVAUT may retain information necessary to:

• Complete a transaction;

• Provide requested Services;

• Protect security;

• Prevent fraud;

• Comply with law;

• Exercise legal rights;

• Maintain required records; or

• Satisfy another legally recognized exception.

14. HOW TO SUBMIT A PRIVACY REQUEST

CAVAUT will provide a method for submitting privacy requests through its website or designated privacy contact at Support@cavaut.com.

A request should provide enough information for CAVAUT to reasonably understand and respond to it.

CAVAUT may need to verify your identity before completing certain requests.

Verification methods will depend on the nature and sensitivity of the information requested.

CAVAUT may request additional information where reasonably necessary to verify identity or authority.

CAVAUT will respond to verified requests within the period required by applicable law.

15. AUTHORIZED AGENTS

Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.

CAVAUT may require evidence that the agent has authority to act for you.

CAVAUT may also contact you directly to verify your identity or confirm that you authorized the request unless applicable law provides otherwise.

16. PRIVACY REQUEST APPEALS

Where required by applicable law, individuals whose privacy requests are denied may have the right to appeal CAVAUT's decision.

Instructions for submitting an appeal will be provided with the applicable response or through CAVAUT's designated privacy contact.

17. NON-DISCRIMINATION

CAVAUT will not unlawfully discriminate against an individual for exercising privacy rights provided by applicable law.

This means that exercising a privacy right will not, solely because of that exercise, result in unlawful denial of Services, unlawful differences in pricing, or other treatment prohibited by applicable privacy law.

18. SENSITIVE PERSONAL INFORMATION

Certain jurisdictions recognize special categories of personal information as “sensitive.”

Depending on how the Services are used, sensitive information may include account credentials, precise location, government-issued identification, or other information classified as sensitive under applicable law.

CAVAUT will process sensitive personal information only as reasonably necessary for authorized purposes, as directed by its customers, with appropriate consent where required, or as otherwise permitted by law.

CAVAUT does not intend for customers to submit sensitive information unrelated to the legitimate purpose of the Services.

19. CHILDREN'S PRIVACY

CAVAUT Services are not directed to children under thirteen (13), and CAVAUT does not knowingly collect personal information directly from children under thirteen through Services intended for the general public.

CAVAUT's business Services are generally intended for adults and businesses.

If CAVAUT learns that personal information from a child has been collected in circumstances prohibited by applicable law, CAVAUT will take reasonable steps to delete or otherwise appropriately address the information.

Parents or guardians who believe a child has provided information to CAVAUT improperly should contact CAVAUT.

20. STATE PRIVACY LAWS

Residents of certain U.S. states may receive additional rights under comprehensive state privacy laws.

CAVAUT will process applicable privacy requests and provide rights to the extent required by the law applicable to the individual and the information involved.

These rights and CAVAUT's obligations may change as privacy laws develop.

Where state-specific disclosures or notices are legally required, CAVAUT may provide those disclosures through supplemental privacy notices incorporated into or linked from this Privacy Policy.

21. CALIFORNIA PRIVACY NOTICE

This section supplements the remainder of this Privacy Policy for California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to CAVAUT's processing.

Depending on how an individual interacts with CAVAUT, categories of personal information CAVAUT may collect can include:

• Identifiers;

• Customer-record information;

• Commercial information;

• Internet or electronic-network activity;

• Geolocation information;

• Audio, electronic, visual, or similar information;

• Professional or employment-related information;

• Vehicle and repair information associated with an identifiable individual;

• Inferences; and

• Sensitive personal information where applicable.

The specific information collected depends on the Services used and the relationship between the individual, CAVAUT, and CAVAUT's business customers.

CAVAUT may collect these categories from the sources described in this Privacy Policy and may use them for the business and commercial purposes described in this Privacy Policy.

CAVAUT may disclose these categories to the types of recipients identified in this Privacy Policy.

California residents may have rights to:

• Know what personal information is collected;

• Access personal information;

• Request correction;

• Request deletion;

• Receive information regarding applicable disclosures;

• Opt out of sale or sharing where applicable;

• Limit certain uses of sensitive personal information where applicable; and

• Receive equal treatment when exercising CCPA rights.

CAVAUT does not intend to sell personal information in exchange for monetary compensation.

If CAVAUT engages in activities considered “selling” or “sharing” under California law, CAVAUT will provide the legally required opt-out mechanisms.

CAVAUT will not knowingly sell or share the personal information of consumers under sixteen (16) years of age where prohibited without the affirmative authorization required by law.

22. TEXAS PRIVACY NOTICE

Texas residents may have rights under the Texas Data Privacy and Security Act (“TDPSA”) where the law applies to CAVAUT's processing.

Subject to applicable exceptions, these rights may include the ability to:

• Confirm whether personal data is being processed;

• Access personal data;

• Correct inaccuracies;

• Delete personal data;

• Obtain a portable copy of personal data;

• Opt out of targeted advertising;

• Opt out of the sale of personal data;

• Opt out of certain profiling; and

• Appeal certain decisions relating to privacy requests.

CAVAUT will honor these rights to the extent required by applicable Texas law.

23. OTHER U.S. STATE PRIVACY RIGHTS

Other U.S. states have enacted or may enact comprehensive privacy laws.

Where such laws apply to CAVAUT, residents may receive rights similar to those described above.

CAVAUT may update this Privacy Policy or publish supplemental notices as necessary to address additional state requirements.

24. OPT-OUT PREFERENCE SIGNALS

Where required by applicable law, CAVAUT may recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

Because these signals may be device- or browser-specific, a preference expressed on one device may not automatically apply to another device.

25. DO NOT TRACK

Some browsers provide “Do Not Track” functionality.

There is not a universally accepted standard governing every response to these signals.

CAVAUT will respond to legally recognized opt-out preference signals where required by applicable law but may not respond to traditional “Do Not Track” signals unless legally required.

26. THIRD-PARTY LINKS AND SERVICES

CAVAUT may contain links to or integrations with websites, applications, or services operated by third parties.

CAVAUT does not control the privacy practices of independent third parties.

Information you provide directly to a third party is governed by that third party's privacy policy and practices.

We encourage users to review applicable third-party privacy notices before providing personal information.

27. INTERNATIONAL USERS

CAVAUT is based in the United States.

If you access the Services from outside the United States, your information may be transferred to, processed in, or stored in the United States or other jurisdictions where CAVAUT or its service providers operate.

Privacy and data-protection laws in those jurisdictions may differ from those in your country.

If CAVAUT becomes subject to specific international data-transfer requirements, CAVAUT may implement additional contractual or legal safeguards as required.

28. BUSINESS TRANSFERS

CAVAUT may undergo changes in ownership or corporate structure.

If CAVAUT participates in a merger, acquisition, financing, investment, restructuring, bankruptcy, asset sale, or similar transaction, information maintained by CAVAUT may be disclosed or transferred as part of that transaction.

Any successor receiving personal information will be subject to applicable privacy obligations concerning that information.

29. CHANGES TO THIS PRIVACY POLICY

CAVAUT may update this Privacy Policy periodically to reflect changes in:

• Our Services;

• Technology;

• Business practices;

• Privacy practices;

• Legal requirements; or

• Regulatory requirements.

When the Privacy Policy is updated, CAVAUT will revise the “Last Updated” date.

Where required by applicable law, CAVAUT may provide additional notice before material changes take effect.

Continued use of the Services following an update does not eliminate any consent requirement that applicable law independently requires.

30. CONTACT CAVAUT

Questions, concerns, or requests concerning this Privacy Policy or CAVAUT's privacy practices may be directed to:

CAVAUT
Privacy Department

Support@cavaut.com

Privacy requests should be submitted through CAVAUT's designated privacy-request method at Support@cavaut.com

31. RELATIONSHIP TO CAVAUT'S TERMS OF USE

Use of CAVAUT is also subject to CAVAUT's Terms of Use and any additional agreement applicable to the particular Service.

This Privacy Policy describes CAVAUT's privacy practices and does not modify contractual obligations contained in a separately executed agreement except where expressly stated.

32. CONTACTING ANOTHER BUSINESS ABOUT YOUR INFORMATION

If you received access to CAVAUT because you are a customer of a collision repair facility, insurer, employer, or other organization, that organization may control some or all of the personal information displayed or processed through the Service.

For example, if a repair facility entered your vehicle and repair information into CAVAUT, the repair facility may be the appropriate organization to contact regarding correction or deletion of that repair record.

CAVAUT may refer requests to the applicable organization where appropriate.

33. OUR COMMITMENT

CAVAUT's purpose is to help businesses and their customers communicate with greater clarity and transparency.

Personal information is an important part of providing those Services, and we recognize the responsibility that comes with handling it.

Our goal is to collect and use information for legitimate purposes connected with operating, securing, supporting, and improving CAVAUT while providing individuals with the notices, choices, and rights required by applicable law.

END OF PRIVACY POLICY

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to Support@cavaut.com.