CarHound’s car-shopping experience processes vehicle-search filters, budget assumptions, supported vehicle identifiers, and the vehicle evidence needed to answer your request. It does not request your full ChatGPT conversation, precise location, payment-card details, government identifiers or auction passwords.
Account and saved data
WorkOS handles sign-in. CarHound receives your account identifier, email and display name. If you choose to save cars, preferences or buying briefs, CarHound stores them privately under your account. Other workspace members cannot read this shopping data through the buyer integration.
ChatGPT receives the tool results and selected vehicle context needed for the conversation. OpenAI applies its own data practices to information handled in ChatGPT. CarHound does not retrieve the rest of your chat history.
Service providers and retention
Vercel hosts the interface and integration; Cloudflare hosts the application API and storage; WorkOS provides authentication. Authorized inventory and photo providers supply vehicle evidence. We do not sell your shopping data or use the plugin to serve advertisements.
Your saved cars, preferences and briefs remain until you clear them through the car-search account controls or request removal. Access tokens expire after one hour; refresh tokens expire after 30 days. CarHound stores token hashes rather than the bearer secrets. Expired grant records are removed during subsequent authentication operations after a 30-day retention window. Operational hosting logs may retain request metadata under the providers’ standard retention settings; CarHound collects first-party usage events to measure adoption and improve the service.
First-party service analytics
We measure page visits, ChatGPT install-link clicks, completed account connections, searches, plan previews and saves, shortlist actions, and clicks to start an email enquiry. An email click does not tell us whether an email was sent or delivered. An account connection is not an OpenAI directory install count.
Analytics uses a random first-party browser cookie that lasts 30 days and pseudonymous account identifiers. Events are stored on Cloudflare, without email addresses, IP addresses, chat text, search criteria, or payment details. Owner and test traffic is excluded from customer reports. We keep usage events for up to 90 days, do not sell them, and do not use them for advertising. Anonymous browser counts are not a verified count of people.
Do Not Track and Global Privacy Control are honored for website analytics. You can also turn off browser analytics below. Account activity inside the ChatGPT connection is measured separately; contact support for account analytics removal.
Your controls
In the car-search account controls, disconnect ChatGPT to revoke CarHound’s integration grants, or clear your saved shopping data. Removing a connection in ChatGPT also stops that client’s use. To request account-data removal or ask a privacy question, use CarHound support. Identity-provider account records and provider logs are separate from the saved shopping data.