Privacy Policy

Last updated: October 14, 2026

Carlyle is operated by Horizons Fleet Management, LLC. The short version: we collect what the product needs to work, we use it to run the product, and we don't sell it - in particular, we never sell or share your contact information with dealers. That business model is the reason Carlyle exists.

What we collect

• Account: your email address (sign-in is by emailed magic link).
• Product activity: your conversations with the consultant, the search criteria they produce, results, pins, alerts, and any past negotiation-service requests - kept so the product can resume your work and improve your results.
• Before you have an account: a conversation you start on the homepage is kept for two weeks, tied to a cookie in your browser so a reload picks it up where you left off. If you leave your email, it moves into your account when you click the link; if you don't, it is deleted after the two weeks.
• Turo email (fleet plans): if you connect it, the notification emails Turo sends you about your trips, payouts and guest messages. Connecting Gmail gives Carlyle read-only access, used only to find and read mail from Turo. Forwarding sends Turo's emails to a private Carlyle address; apart from your email provider's one-time confirmation message, Carlyle ignores anything else that arrives there. We keep a copy of each Turo email we read, so improvements to how we read them can reach your history. The copies are deleted with your account.
• Deal Check (buyer plans): when you upload a dealer quote, Carlyle reads it to pull out the numbers, blanks out your personal details, and does not keep the image. The numbers it read are kept with your account as the record of the check.
• Billing: handled by Stripe. We store your Stripe customer reference and purchase history; your card number never touches our servers.
• Technical: standard logs (IP, browser, timestamps) for security and debugging, retained briefly.

How it's used

• Running the product: searches, ratings, alerts, emails you asked for.
• Turo email is used only to run your fleet tools: the inbox, trips, the ledger and your reports. Carlyle never sends, replies to, or changes anything in your mailbox or your Turo account.
• AI processing: conversation text is processed by our AI provider (Anthropic) to generate responses. It is not used to train their models.
• The negotiation service, which is no longer offered: for requests made while it was, we shared the minimum needed with the dealer - the vehicle of interest and the negotiation itself. Your contact details stayed with us.
• Transactional email (sign-in links, alerts, status updates) via Resend, which also receives the Turo email you forward to Carlyle.

Cookies and analytics

Carlyle sets only first-party cookies. Most are strictly functional - they sign you in (your session), keep a conversation you started before signing in, and protect forms against abuse. The single non-essential cookie is Google Analytics (a _ga cookie), which we use to understand how the site is used in aggregate. It is configured to avoid identifying you: we strip ids, tokens, and query strings before anything reaches Google, and we do not turn on Google's advertising or cross-site features.

You can turn analytics off any time from the cookie notice at the bottom of the page - choosing “Decline analytics” stops Google Analytics from loading and clears its cookie. Declining changes nothing about sign-in or the product itself.

What we never do

• Sell your data, to anyone.
• Pass your contact information to dealerships as a “lead.”
• Run advertising or retargeting pixels (Meta, Google Ads, TikTok, and the like).

Service providers

Vercel (hosting), Neon (database), Stripe (payments), Resend (email), Anthropic (AI), Google (privacy-limited analytics), and our vehicle-listings data provider. Each receives only what its function requires.

Your choices

Email support@carlyle.vin to export or delete your account and data - deletion removes your conversations, searches, alerts, and your Turo email and the trips and payouts read from it, subject to records we must keep for billing or legal reasons. Alert and marketing emails can be stopped anytime; sign-in emails are inherent to how login works.

Changes

If this policy changes materially, we'll update the date above and note it in the product. Questions: support@carlyle.vin.