How we handle data
A plain account of what each product stores, where it lives, and how to delete it. The legal version is in our privacy policy.
The short version
- Cardinal Verified processes your lead file in your browser. We never receive it.
- Cardinal Relay and Cardinal Owe identify a customer by first name, last initial and stock number. No phone numbers, emails, addresses, or credit information.
- Your dealership owns its data. You can export it at any time and ask us to delete it.
- We do not sell data, share it for advertising, or use it to train AI models.
- This website sets no cookies, runs no analytics, and loads nothing from third parties.
Product by product
| Cardinal Verified | Cardinal Relay | Cardinal Owe | |
|---|---|---|---|
| Where it runs | In your browser | Our server, hosted by Render in the United States | Our server, hosted by Render in the United States |
| Customer data | Whatever is in your export, processed only on your computer | First name, last initial, stock number, new or used, deal type | First name, last initial, stock number, vehicle description |
| Staff data | Sign-in email, managed by Netlify Identity | Name, role, optional email, PIN stored as a keyed hash | Name, role, optional email, PIN stored as a keyed hash |
| Stored where | That browser's local storage | A database on the server, with daily backups kept 14 days | A database on the server, with daily backups kept 14 days |
| Contacts customers | No | No | No. It drafts messages for your team to send |
| How to delete | Clear that browser's site data | Ask us. Deleted within 30 days of the end of service | Ask us. Deleted within 30 days of the end of service |
If you are subject to the FTC Safeguards Rule
Dealerships that arrange financing are treated as financial institutions under the FTC Safeguards Rule and have to oversee the service providers that handle customer information. We designed our products to keep that oversight simple: Verified is not a place your customer financial data ever sits, and Relay and Owe hold no customer financial or contact information at all.
Because Verified runs in the browser, the results live on the computer that ran it. Securing that computer, and the export files on it, stays with your dealership. We are happy to complete a vendor security questionnaire. Email cameron@cardinalhall.co.
How we protect what we do hold
- All traffic is encrypted in transit over HTTPS.
- PINs are never stored in readable form, and repeated wrong PINs lock the sign-in for fifteen minutes.
- Access is split by role. Salespeople can act only on their own customers, and only an administrator can change settings.
- Every action is recorded in a history log your managers can review.
- Backups are taken daily and kept for fourteen days.
Reporting a security problem
If you believe you have found a security issue in any Cardinal Hall product, email cameron@cardinalhall.co with "Security" in the subject. We will acknowledge it within two business days.