Effective date: August 14, 2026
Carley AI ("we", "us") operates the Carley AI Chrome extension and the carley.lt website. This policy explains what data we collect and how we handle it, in accordance with the General Data Protection Regulation (GDPR).
The data controller is Kurijus, MB (company code 308037338, Baltupio g. 49-24, LT-08323 Vilnius, Lithuania), operating the Carley AI product. You can reach us via our contact form or at curiousmindhabits@gmail.com.
Email address — collected when you sign in to the Chrome extension.
Sign-in is required to use the product. Your email is used to authenticate your
account and enforce per-account usage limits.
Legal basis: contract performance (Art. 6(1)(b)).
Usage count — we track the number of valuations performed per signed-in
account to enforce usage limits.
Legal basis: contract performance (Art. 6(1)(b)).
Contact form — if you write to us via the website, we collect your name,
email, and message to respond to your inquiry.
Legal basis: consent (Art. 6(1)(a)).
IP address at checkout — when you buy a pass, we record the IP address
from which you gave consent, together with the accepted terms version, to prove your
express consent and withdrawal-right waiver if the purchase is later disputed.
Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
IP address at sign-in — we record the IP address associated with each
sign-in session to secure your account and detect abuse.
Legal basis: legitimate interest (Art. 6(1)(f)).
Car listing text — when you run an evaluation, the text of the
car listing is sent to our servers and processed by our AI provider to generate the
assessment. Seller contact details (phone numbers, email addresses) are removed in your
browser before the text is transmitted. The listing content and its evaluation are cached
for up to 30 days to speed up repeat evaluations, then automatically deleted; your own
evaluation history references that cache and is deleted with it.
Legal basis: contract performance (Art. 6(1)(b)).
Product analytics — we record how the product is used so we can see which
features work and where people get stuck: the pages you visit on this website, the actions
you take in the extension (for example running an evaluation or starting a checkout), your
approximate location derived from your IP address, and your browser and device type. These
records are linked to your account by an account identifier and your email address, so that
activity across the website and the extension is recognised as one account. If you are not
signed in, the records are linked only to a random identifier and not to you by name.
Legal basis: legitimate interest (Art. 6(1)(f)) — you may object at any time (section 6),
and we will stop analytics processing for your account.
We do not collect your browsing history or any data from pages other than the car listing you explicitly evaluate.
We do not sell your personal data or share it for marketing purposes. To run the service we rely on the processors ("subprocessors") listed in section 4 below, which act on our instructions and are bound by data-processing agreements. We may otherwise disclose data only when required by law.
We use the following providers to operate the service. Each processes data only on our instructions under a data-processing agreement, and where data leaves the EU/EEA the transfer is covered by Standard Contractual Clauses or an equivalent safeguard:
Account data is kept while your account is active. Cached evaluation content (car listing text and the generated assessment) is deleted automatically after 30 days. Contact form submissions are deleted after 12 months. Checkout consent records (including the IP address) are kept with the related payment record for as long as accounting and consumer-law obligations require. Product analytics records are kept for up to 12 months. You can request deletion at any time — we will process it within 30 days.
Under GDPR you can request to access, correct, delete, or export your data, or object to its processing. Where processing is based on consent (e.g., contact form), you may withdraw it at any time. Contact us via the contact form and we will respond within 30 days.
If unsatisfied, you may lodge a complaint with the Lithuanian data protection authority:
Valstybinė duomenų apsaugos inspekcija —
vdai.lrv.lt
Carley AI is not intended for users under 16 (the age of digital consent in Lithuania).
We may update this policy and will notify you of significant changes via the website or extension.