Last updated: January 26, 2026
Thank you for taking the time to read our privacy policy (the “Privacy Policy”). At Oyster Technologies, Inc., doing business as Cara (“Oyster”, “Cara”, “we”, “our”, or “us”), your privacy is of the utmost importance. We want you to be fully informed about the information we collect, how it is used, shared, and protected, and the choices you have with it and explain the privacy and data practices at Oyster and Cara.
Oyster operates an online service designed to enable insurance agencies (“Customers”) to serve and assist individuals (“Users”) (collectively, the “Services”).
This privacy policy sets out how we collect, use, process, store, and disclose personal information on https://www.getcara.ai/ and https://www.withoyster.com/ (the “Website”) and in providing the Services.
1. WHEN WE COLLECT INFORMATION
2. CATEGORIES OF PERSONAL INFORMATION WE COLLECT
3. HOW WE USE PERSONAL INFORMATION
4. CATEGORIES OF PERSONAL INFORMATION WE DISCLOSE FOR BUSINESS PURPOSES
5. PRIVACY CHOICES
6. COOKIES AND OTHER TRACKING TECHNOLOGIES
7. SECURITY
8. RETENTION
9. U.S. STATE-SPECIFIC NOTICE
10. CHILDREN’S PRIVACY
11. THIRD-PARTY LINKS
12. CHANGES TO THIS PRIVACY POLICY
13. CONTACT US
WHEN WE COLLECT INFORMATION
We may collect personal information that you provide when you:
Directly from you when you interact with our Website and Services.
Using online tracking technologies and other automatic data collection technologies on our Website, such as using pixels, web beacons, software developer kits, and cookies. Learn more about our cookie use below.
From other sources, such as our business partners and publicly available sources. We may also create information based on our analysis of the information we have collected from you.
CATEGORIES OF PERSONAL INFORMATION WE COLLECT
Customer Information:
In order to serve our Customers, we will collect various information on our Customers, including:
Employee information including your name, company email, company name, company website URL.
Correspondence, which may include any personal information provided during an email correspondence or Customer service engagement.
Billing and administrative finance information.
Metadata and analytics for your use of our Website and Services, including IP address, device information, date/time of visits, new or returning visits, products viewed, page response times, URL clickstreams, how long you stay on our pages, what you do on those pages.
We may use cookies, beacons, pixel tags, and other similar technologies to collect additional information automatically as you interact with the Website and Services and to personalize your experience with our Website and Services. Learn more about our cookie use below.
Our Customer’s User Information:
When our Customers use our Website and Services, they may enable us to process various types of personal information on their Users. Below, we provide a list of the commonly processed personal information of Users. Please note, the below list is not exhaustive of all personal information, and is intended to serve as a sample set.
Contact information such as name, email address, phone number, and mailing address.
Personal data such as date of birth, gender, and other demographic information.
Information about members of Users’ family or household, including User’s spouse and dependents.
Employment and education information such as employer names and contact, job titles, historical roles, and education history.
Commercial data such as records of real property, personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories and tendencies.
Audio voice recordings when contacting a Customer through our services, including communications via phone.
Any information shared when contacting a Customer through our Services, including communications via email or phone, which may include information about your vehicle(s), homeowner status and the property where you live, driving history, license status, credit history, and other relevant information.
Inferences that may be drawn from or created based on any of the information identified above.
When necessary, with User consent or as otherwise permitted by applicable law, we may collect the following categories of sensitive personal information:
Government identifiers such as social security numbers, and drivers license, state identification, and passport information.
Race, national origin, and ethnicity.
Certain health information such as medical history, medications, and the existence of a disability.
HOW WE USE PERSONAL INFORMATION
Subject to the terms of our Customer agreements, we may use personal information for the following business purposes:
To provide our Website and Services.
To communicate with you.
To process payments securely.
Customer support, including email and phone.
To improve our Website and Services, for example, we may modify our user interface based on user behavior.
To authenticate, verify or otherwise ensure compliance with Customer written instructions or to mitigate the risk of fraud.
Aggregated or anonymous information about the various types of information, integrations, metadata and performance metrics to ensure our Website and Services are serving their intended purposes and for product improvements.
For any legal purpose necessary, including IP protection, or if we are required to process information as a result of a court order or other legal or regulatory proceeding.
CATEGORIES OF PERSONAL INFORMATION WE DISCLOSE FOR BUSINESS PURPOSES
We utilize various service providers to operate our Website and Services, which includes sharing Customer and/or User personal information for the following categories of business purposes:
Process payments (we do not process User payments on behalf of our Customers).
Cloud-based accounting software providers.
Customer relationship management (we do not manage User communications on behalf of our Customers).
Manage and optimize our Website and Services (see ‘Cookies and other Tracking Technologies’ below).
Enable use of artificial intelligence services through the Services, where use is subject to the terms of service and privacy policies of the AI service provider.
In addition, we may share personal information in order to;
Protect the legal rights of our Customers, our company, our employees, our agents, and our affiliates.
Protect the safety and security of those who access and use our Website and Services.
Detect and protect against fraud.
In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet law enforcement requirements or a court order, subpoena, or other judicial, administrative, or investigative proceedings.
We may disclose personal information as part of a business transition. For example, we may disclose personal information with prospective purchasers exclusively to evaluate the proposed transaction. You will be notified via email and/or a prominent notice on our Website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
We may disclose de-identified, aggregate, or anonymous information for any purpose. This means that the information we disclose does not identify specific individuals, nor is combined with other data to protect your privacy.
PRIVACY CHOICES
We provide you with the following choices with our use of your personal information:
Access and correct the personal information we maintain about you.
Delete the personal information we maintain about you. Please note we may be required by law to retain certain information in compliance with accounting, tax or other legal obligations.
Opt out of certain uses of your personal information, notably:
Marketing Emails: To opt out of marketing e-mail communications, you may click the ‘unsubscribe’ link in the marketing emails.
You can exercise these rights by contacting us at support@getcara.ai.
If you are a User associated with one of our Customers, and you would like to fulfill your rights to the personal information we maintain about you on behalf of that Customer, please exercise these rights by reviewing the Customer’s privacy policy to determine the correct contact method for that Customer.
COOKIES AND OTHER TRACKING TECHNOLOGIES
Like many companies, we use cookies and similar technologies (such as clear gifs, web beacons, tags, and similar technologies) to collect information about your browsing activities, your interactions with Websites and our Services, and to serve tailored ads and for the purposes described in this Privacy Policy. There are a number of ways to opt out of having your online activity and device data collected through these services, which we summarize below:
Opting out of cookie use in our Cookie Preferences. You can opt out of cookies via our ‘Your Privacy Choices’ page.
Please note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.
SECURITY
We maintain reasonable safeguards to protect against unauthorized access, use, modification, and disclosure of personal information in our custody and control. Despite our efforts, we cannot guarantee that unauthorized access or use will never occur. It is important that you take steps to keep your information safe and secure. Choose an account password that is hard for others to guess and don’t reveal it to third parties. If you use a shared public computer, do not opt to have your login ID or password remembered and be sure to log out of your account when you finish.
RETENTION
We will retain personal information according to the terms of our customer written agreements.
U.S. STATE-SPECIFIC NOTICE
Some U.S. states have enacted comprehensive privacy laws. The California Consumer Privacy Act, as amended by the California Privacy Rights Act or “CPRA” (collectively, the “CCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Oregon Consumer Privacy Act (“OCPA”), the Texas Data Privacy and Security Act (“TDPSA”), the Florida Digital Bill of Rights (“FDBR”), the Montana Consumer Data Privacy Act (“MTCDPA”), the Iowa Consumer Data Protection Act (“IADPA”), the Delaware Personal Data Privacy Act (“DEPDPA”), the Nebraska Data Privacy Act (“NEDPA”), the New Hampshire Privacy Act (“NHPA”), the New Jersey Data Privacy Act (“NJDPA”), the Tennessee Information Protection Act (“TNIPA”), the Minnesota Consumer Data Privacy Act (“MNCDPA”), the Maryland Online Data Privacy Act (“MDODPA”), the Indiana Consumer Data Protection Act (“INCDPA”), the Kentucky Consumer Data Protection Act (“KYCDPA”), and the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) create additional privacy obligations for businesses and provide their residents with additional privacy rights.
Additional Privacy Rights:
In addition to the rights granted in ‘Your Privacy Choices’ above, if you are a resident of the above states, you may have the right to:
Information. For details about the personal information we have collected over the last twelve months, including the categories of sources, please see the ‘Personal Information We Collect’ section above. We collect this information for the business and commercial purposes described in the ‘How We Use Your Personal Information’ section above. We share this information with the categories of third parties described in the ‘How We Disclose Your Personal Information’ section above.
Opt out of the ‘sale’ or ‘share’ of your personal information for targeted advertising. We do not ‘sell’ or ‘share’ your personal information for monetary benefit. However, some third party cookies placed on our Website may be considered a ‘sale’ or ‘share’ under these privacy laws. You may opt out of such cookies as detailed in ‘Use Of Cookies and Tracking Technologies’ section (above).
Sensitive personal information. Residents of Californian, Utah, and Iowa have the right to opt out of the use of their sensitive personal information, while residents of Virginia, Colorado, Connecticut, Oregon, Texas, Montana, Delaware, New Hampshire, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island have the right to opt in to the use of their sensitive personal information.
As we are a processor on behalf of our customers, we do not accept User requests to manage consent with their sensitive personal information. You may exercise these rights by reviewing the Customer’s privacy policy to determine the correct contact method for that Customer.
Appeal:
If we deny your privacy request, you may appeal that decision by emailing us at support@getcara.ai. We will respond to your appeal within a reasonable period of time and as required by law. If, after we have processed your appeal, you are still unsatisfied with our response, you have the right to file a complaint with your state attorney general.
Authorized Agent:
If you are an authorized agent submitting a request on behalf of another person, you must provide a copy of a lawful power of attorney or written authorization from the consumer (along with proof of your identity). If you make a request as an authorized agent, you will receive additional instructions. Depending on the type of request, we may contact you or the consumer on whose behalf you claim to act to verify your authorization.
Right to Non-Discrimination:
We do not discriminate against customers who exercise any of their rights described in our privacy policy.
Controller/Business and Processor/Service Provider Designation:
We operate as a Controller (and a ‘Business’ under CCPA) with respect to all Customer information that is collected via our Website. We operate as a ‘Processor’ (and a ‘Service Provider’ under the CCPA) with respect to all Customer and User information that is provided to us via our Services.
CHILDREN’S PRIVACY
We do not intentionally collect any personal information from children under the age of 13 (or 16 in California). If you believe we have obtained personal information associated with children under the age of 13 (or 16 in California), please contact us at support@getcara.ai and we will delete it.
THIRD-PARTY LINKS
The Services may contain links to other websites or services. We do not exercise control over the information you provide, or is collected by these third party websites. We encourage you to read the privacy policies or statements of the other websites you visit.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time as we update or expand our Website and Services. If we make material changes, we will post the updated Privacy Policy on this page with a ‘Last Updated’ effective date of the revisions. We encourage you to look for updates and changes to this Privacy Policy by checking this page when you access our Website and Services.
CONTACT US
If you have any questions about our privacy or security practices, or if you are a Customer and would like to request access to or correction of your personal information, you can contact us by email at support@getcara.ai or at:
Oyster Technologies, Inc.
276 Fifth Ave Ste 704 PMB 146
New York, NY 10001 US
