Privacy Policy

Who We Are

Cardinal Hall ("Cardinal Hall," "we," "us") is a business operated by Cameron Helt in North Carolina. This policy covers cardinalhall.co, cardinalverified.com, cardinalrelay.com, cardinalowe.com, our dealer assessment, and the products Cardinal Verified, Cardinal Relay and Cardinal Owe. It explains what information we collect, why, and what you can do about it.

Our products are built for businesses, mainly car dealerships. When a dealership uses a product, the dealership decides what information goes into it and is responsible for its customers' information. We handle that information on the dealership's behalf and only to provide the service.

This Website

cardinalhall.co sets no cookies, runs no analytics, and loads no fonts, scripts or images from other companies. Our hosting provider, Netlify, keeps standard server logs, such as IP address, browser type and the page requested, to deliver the site and protect it from abuse. We do not use those logs to identify you.

If you email us, we keep your message and address to reply to you.

The Dealer Assessment

If you complete our dealer assessment, we collect what you enter: your dealership's name and city, your name and title, how to contact you, and your answers. Your answers are also saved in your own browser as you type so you do not lose them, and stay there until you clear them.

When you press Send, your submission is stored by Netlify and a copy is emailed to us. We use it to prepare our findings for your store and to follow up with you. We keep submissions for up to 12 months unless you ask us to delete them sooner.

Our Products

Cardinal Verified

Verified processes your lead export inside your web browser. The file and its contents are never sent to us. Scores, settings, notes and history are stored in that browser's local storage on the computer that ran them. That record can include customer names, phone numbers, email addresses, VINs and the payment, rate and equity figures from your export. It is encrypted (AES-256), and only the signed-in Verified account that saved it can unlock it: the key comes from our sign-in service when that account signs in and is never stored on your computer. Notes, history and saved runs are deleted 90 days after they were saved, the next time Verified opens on that computer. Markers such as Sold or Do Not Contact stay until cleared. The record stays, encrypted, when you sign out and comes back when you sign in; a different Verified account signing in on that computer deletes it first, and Clear All Saved Leads in Scoring Settings deletes it at any time. Signing in to Verified uses Netlify Identity, which stores your email address and manages your password on our behalf.

Cardinal Relay and Cardinal Owe

These products run on servers hosted by Render in the United States. They store:

• Staff information: name, role, an optional email address, and a PIN stored as a keyed hash, not in readable form.
• Customer information: first name and last initial, stock number, and basic deal details such as new or used and deal type. They do not store customer phone numbers, email addresses or street addresses.
• Financial details: Relay stores the deal type only, with no dollar amounts. Owe stores what was promised on a deal, including an optional dollar amount and due date (for example, a down payment still owed or a lender stipulation), and any notes staff type.
• Do not enter: neither product asks for or is designed to hold Social Security numbers, full account numbers, driver’s license numbers, or credit reports and scores. Owe’s notes are free text, and staff are told not to enter these there.
• Activity: stage times, checklist and promise status, notes, and a history of who did what and when.
• Devices: a sign-in cookie to keep staff signed in, and, if a staff member turns on phone alerts, the notification address their browser provides.

The dealership owns this information. We use it only to operate the product for that dealership and to prepare reports the dealership asks for. A dealership can export its data at any time. When service ends, we delete it within 30 days unless the dealership asks us in writing to keep it. Daily backups are kept for 14 days.

Cardinal Hall Owner View

The owner view is a private page for the owners of a dealership group. It runs on a server hosted by Render in the United States and stores:

• Owner accounts: each owner's email address, a password stored as a hash, not in readable form, and the key behind the six-digit sign-in code from their authenticator app.
• Store figures: summary counts each store's Relay and Owe report, such as average customer wait and past-due promises, and, if a store turns on Share Store Summary in Verified, whole-number tier counts. It holds no customer or staff names.
• Activity: a history of owner sign-ins and changes, with the owner's email and the store involved, never passwords or codes.

When an owner opens a store from the owner view, that store's history shows them as an owner, with their email address.

Who We Share Information With

We do not sell personal information, share it for targeted advertising, or use it to train artificial intelligence models. We share information only with the service providers that run our products, and only as needed to do so:

• Netlify hosts our websites, Verified's sign-in, and assessment submissions.
• Render hosts Cardinal Relay, Cardinal Owe and the owner view.
• Google delivers assessment notifications to us and sends the alert emails Cardinal Relay can send to staff.
• Zoho hosts email for our domain, including cameron@cardinalhall.co, and sends the alert emails Cardinal Owe can send to staff.
• Apple, Google or Mozilla, depending on the phone, deliver Relay and Owe alerts to staff who turn them on. Alert contents are encrypted in transit.
• Typefaces on cardinalhall.co and cardinalverified.com are hosted by us, so no font provider receives a visitor's IP address when those pages load.

We may also disclose information if the law requires it, or to protect the safety and security of our users and services.

Security

We encrypt traffic in transit for every product. In the products that run on our servers, we also store PINs as hashes, limit sign-in attempts, separate access by role, and keep a history of changes. Verified runs in your browser instead: we hold none of its customer data, and what it keeps on your computer is encrypted, as described above. No system is perfectly secure, and we will tell affected customers promptly if we learn of a breach involving their information. Our data page has more detail.

Children

Our websites and products are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.

Your Choices

You can ask us to show you, correct, or delete information we hold about you by emailing cameron@cardinalhall.co. If you are a customer of a dealership that uses our products, contact the dealership first, since it controls that information; we will help them respond. If you live in a state that gives you additional privacy rights, contact us and we will honor them as the law requires.

Changes to This Policy

If we change this policy, we will update the effective date above. If a change materially affects how we use information we already hold, we will tell our customers directly before it takes effect.

Contact

Cardinal Hall, North Carolina. cameron@cardinalhall.co