CarGo tells you when your own vehicles arrive at or leave your property, using motion clips from your Ring camera. This policy explains what we collect, why we collect it, who else handles it, and how you can have it deleted. We have written it to be read, not skimmed past.
The table below lists every kind of data CarGo keeps, the reason it is kept, and how long it stays.
| Data | Why we keep it | How long |
|---|---|---|
| Your email address | We use it to send sign-in links and, if you turn them on, alert emails. | It stays for as long as your account exists. |
| Your Ring connection, meaning an access token and a refresh token for your Ring account together with the identifiers and names of your cameras | These let CarGo read your cameras' motion clips. We never receive or store your Ring password. | They stay until you disconnect CarGo, either in Ring's settings or by asking us, or until you delete your account. |
| Motion clips from your camera | Each clip is analyzed on our servers to find vehicles. | A clip is deleted within minutes, as soon as it has been analyzed. We do not keep video. |
| Vehicle stills, meaning a small cropped image of each detected vehicle with license plates and faces blurred before it is stored, along with the time, the direction of travel, a match score, and the vehicle CarGo believes it saw | These are what you see in an alert, and they let you confirm or correct it. | They are purged automatically 90 days after the event, or sooner if you delete the alert. We keep no separate backup copies of stills. |
| Your votes ("mine" or "not mine") and the appearance signature of each vehicle you confirmed | They teach CarGo what your vehicles look like. The signature is a list of numbers describing a vehicle's overall appearance; it is not an image, it cannot be turned back into one, and it is used only within your own account. | They stay for as long as your account exists, or until you remove that vehicle. |
| Your notification subscription, meaning the push address your browser gives us | It is how alerts reach your phone. | It stays until you turn notifications off or the subscription expires. |
| Operational logs, meaning request times, error messages, and the IP addresses handled by our hosting provider | They keep the service running and secure. | They are short-lived, and they are never used to profile you. |
We do not sell or rent your data, and we do not show advertising. We do not identify, track, or build profiles of other people or their vehicles; other cars that appear in your clips are used only as "not yours" examples inside your own account, and any faces are blurred. We do not read license plates, because CarGo recognizes vehicles by their overall appearance, and plates are blurred in every still we keep. We do not use your images to train models for other customers.
Everything stays inside your own account. A vehicle's appearance signature is compared only against clips from your own cameras. It is never compared with any other customer's data, never matched against vehicle registries, license-plate databases, or any outside source, and never used to follow a vehicle or a person from one place to another. CarGo creates no biometric identifiers of any kind: faces are blurred before a still is stored, and nothing in the service measures or recognizes people.
Nobody at CarGo watches your stills. Support works from the metadata, such as times, camera names, and match scores. A person at CarGo looks at a still only when you report a problem with that specific alert, or when the law requires it, and each report is recorded.
Only the following companies handle your data, and each one does so for a single purpose. Ring and Amazon are the source of your motion clips, under your own Ring account and Ring's privacy policy. Cloudflare hosts CarGo and stores your account data in the United States. DeepInfra runs a second AI check of a detected vehicle's make and model; it receives only the blurred still, never your identity or your location. Google's and Apple's push services carry notifications to your phone; the contents are encrypted end to end, so they cannot read them. Resend sends sign-in links and, if you have enabled them, alert emails.
DeepInfra processes the blurred still in the United States to answer one question about the vehicle; under its published privacy policy it does not store, sell, or train on data sent through its API without explicit consent, and we have given none. All of CarGo's own processing and storage takes place in the United States.
We will update this list before we add anyone to it. We do not share your data with anyone else unless the law requires us to. Requests from law enforcement or courts are honored only when they arrive as a valid, binding subpoena, court order, or search warrant, or when there is an imminent threat to someone's life, and we will tell you about such a request unless the law forbids it. Ring's own rules also prohibit us from giving law enforcement direct access to anything from your cameras without your consent in each instance.
You can stop alerts at any time by turning off notifications on your phone or in the app. You can disconnect Ring by removing CarGo's access in your Ring account or by asking us; the moment the connection ends, CarGo stops reading your cameras, and we delete your Ring tokens. You can delete any still or alert whenever you like, in the app or by asking us. To delete everything, email [email protected] from your account address; we delete your account and its data within 30 days and confirm that we have done so. If you would like to see what we hold about you, ask, and we will send you a copy within 30 days.
If you live in California or in another US state with a privacy law, the rights above cover what that law gives you, and we do not sell or share personal information for advertising. If you live in the EU or the UK, the same rights apply under the GDPR, and our legal basis for processing is performing the service you asked for.
Everything travels over HTTPS. Access is granted by a signed-in session or by a private key that you control. Credentials and Ring tokens are stored with our hosting provider, encrypted at rest, and we keep as little data as the service needs. No system is perfectly secure; if we learn of a breach that affects you, we will assess it within 24 hours and tell you within 72 hours, along with any regulator the law requires us to notify.
CarGo is intended for adults managing their own household or business cameras, and it is not directed to children. We do not knowingly collect data from anyone under 18. If a child happens to be in a clip, that clip is handled exactly like every other one: it is deleted within minutes, and any face in a still is blurred.
If we change this policy in a way that matters, we will note the change here with a new date, and for significant changes we will email you first. If CarGo ever gains a new kind of detection, we will tell you before it is turned on for your account.
Granite Peak Engineering LLC · San Marcos, California · [email protected]