CarGo is built and run by a United States company, and every company that touches your data on our behalf is a United States company too. This page lists each one, what it sees, where it works, and why it is there. The Privacy Policy explains what we collect and why; this page is the vendor list behind it. We will update this page before anyone is added to it.
| Company | What it handles | Where | Why it is there |
|---|---|---|---|
| Ring, part of Amazon.com, Inc. | Your cameras, their motion clips, and the account you connected. Ring is the source of everything CarGo analyzes, under your own Ring account and Ring's privacy policy. | United States | CarGo reads clips through Ring's official developer program. Ring's rules forbid us from giving anyone direct access to your cameras without your consent each time. |
| Cloudflare, Inc. | Hosts the CarGo website, the app, and the software that analyzes clips. Stores your account, your vehicle stills, your votes, and your notification subscription. | United States company. Your vehicle stills and your account records (email address, votes, Ring connection, notification subscription) are all stored in Cloudflare's United States jurisdiction. Cloudflare's worldwide network may hold short-lived cached copies of a page or a still near wherever it is opened. | Cloudflare is the whole of CarGo's infrastructure. Nothing else runs our code. |
| DeepInfra, Inc. | One blurred vehicle still per detection, for a second opinion on make, model, and whether the picture shows a vehicle at all. It never receives your name, your address, your camera names, or your account. | United States | The second check cuts false alerts. DeepInfra's published policy says it does not store, sell, or train on data sent through its API without explicit consent, and we have given none. |
| Resend, Inc. | Your email address and the text of sign-in links, service notices, and, only if you turned them on, alert emails. | United States | Sending email is a specialist's job. Resend sends the messages we hand it and keeps only delivery records. |
| Anthropic, PBC | Only when you use the "Ask about CarGo" assistant in the app: the question you type and a summary of your account's status in words and numbers, such as whether a device is subscribed to notifications, your vehicles' names, and the times and match strength of recent alerts. Never a still, never video, never your email address or tokens. | United States | The assistant answers "why did I not get an alert" from your own account's status. Under Anthropic's commercial terms, data sent through its API is not used to train its models. |
| Apple, Google, Microsoft, and Mozilla push services | The address your browser assigns for notifications, and the encrypted notification itself. | United States companies with worldwide networks | There is no other way to reach a phone's lock screen from a website. Each alert is encrypted end to end before it leaves CarGo, so the push service carries it without being able to read it. |
No vendor receives video. A clip is fetched from Ring, analyzed on Cloudflare, and deleted within minutes. No vendor receives an unblurred still; plates and faces are blurred before a still is stored or shown to anyone, including us. No vendor receives your Ring credentials; the tokens that let CarGo read your cameras stay inside your CarGo account and are deleted the moment you disconnect.
We say your data is stored in the United States because that is where Cloudflare keeps it durably: your stills in a United States storage bucket, your account records in a United States data store. Cloudflare is a global network, and like every such network it may briefly cache a copy of a page or a still in a data center near the person opening it. Those caches expire on their own within minutes to an hour and hold nothing that is not already yours to see. If your situation requires that no copy ever exist outside the United States, CarGo is not the right fit, and we would rather say so here than in the fine print.
Your phone or computer holds the app, its notification subscription, and whatever stills you have opened. That is under your control, not ours. Removing the app or turning off notifications for cargohold.io ends it.