This Privacy Policy applies to CAS Automotive Group, LLC and its affiliated companies. Collectively, these entities are referred to as "CAS Automotive," and we refer to them throughout this Policy as "We," "Us," or "Our."
This Policy applies to all of Our services, products and websites through the below listed websites and their services described by them (the “Services”).
Our websites covered by this Policy include casauto.com, gm.casauto.com, diplomatic.casauto.com, carbrain.com, casmiami.com, damagedcars.com, junkcarmasters.com, carjunkyardsnearme.com, Webuytotaledcars.com, Webuyjunkcarsfast.com, and damageequipment.com.
This Policy does not apply to unaffiliated third parties with whom We have no relationship.
If you (the individual using our sites, products, and/or Services) have any questions about this Policy, please feel free to contact Us through methods described in the Contact Us section below.
-
Information We Collect
Information You Provide Directly
- Personal Identifiers: Name, email, phone number, physical address
- Vehicle Information: Make, model, year, VIN, odometer reading
- Business Information (for commercial customers): Company name, business type, tax ID, business registration documents
- Transaction Documents: [See site-specific sections below]
Automatically Collected Information
- Device & Browser Data: IP address, browser type, device type, operating system
- Usage Data: Pages visited, timestamps, referral sources, click patterns
- Location Data: Approximate location (if permitted by your device)
Cookies & Tracking Technologies
We use cookies and similar technologies for:
- Essential Functions: Session management, security, form completion
- Analytics: Google Analytics, conversion tracking
- Advertising: Retargeting pixels, Google Enhanced Conversions
- Preferences: Language, display settings (carbrain.com/cookie-policy)
-
How We Use Your Information
We use your information for:
Service Delivery:
- Processing vehicle quotes and transactions
- Coordinating vehicle pickup/delivery
- Customer support and communication
Legal & Compliance:
- Identity verification and fraud prevention
- Regulatory compliance (DMV, tax authorities)
- Dispute resolution and legal claims
Business Operations:
- Analytics and service improvement
- Quality assurance and training
- Internal record-keeping
Marketing (with consent):
- Email newsletters and promotions
- Personalized offers
- You may opt out at any time
Safety & Security:
- Detecting fraudulent activity
- Protecting against unauthorized access
- Enforcing our Terms of Service
Additional Uses With Your Consent
When you submit a request for information or quotation, We may ask you to provide personal information. If We plan to use this information in a manner different than the purpose for which it was collected, then We will ask for your consent prior to such use.
If We propose to use personal information for any purposes other than those described in this Policy and/or in the specific service notices, We will offer you an effective way to opt out of the use of personal information for those other purposes. We will not collect or use sensitive information for purposes other than those described in this Policy and/or in the specific service notices, unless We have obtained your prior consent.
-
When and How We Share and Disclose Your Information
When We Share Your Information:
Service Providers: We share information with trusted third parties who perform Services on our behalf:
- Towing and transportation companies
- Payment processors
- For CarBrain: We share personal data and vehicle-related data for certain site users with User.com for website chat communications and customer engagement automation. You may review User.com’s Privacy Policy at https://www.user.com/security/privacy-policy
- Other site-specific vendors as described in the below Site-Specific Information section
Legal Requirements:
- To comply with legal obligations
- In response to valid legal requests, including law enforcement
- To protect our rights and safety
Business Transfers: If We are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
Business Partners:
- For CarBrain: We operate as a marketplace where partner dealers can view and bid on vehicles. Your personal information is NOT shared with partners during the bidding stage. We only share your information with a partner dealer after:
- We have contacted with you about the partner's offer and you have agreed to accept the partner's offer
- Once you accept, We facilitate the connection by sharing limited information with both parties:
- Information shared with partner:
- Your phone number, address, and vehicle details (year, make, model, trim, and VIN if collected) for the specific transaction.
- Information NOT shared with partners:
- Title photos, identification documents, or other supporting ownership documents collected for CarBrain's internal use
After this introduction, the partner handles the transaction directly with you, including pickup logistics, payment, and title exchange
- For CarBrain: Partner dealers in our buyer network (only after you accept an offer)
- For CASAuto/CasMiami: Shipping companies, port operators, customs brokers (only for completed transactions)
Partner Agreements are governed by the Terms of Service: For CarBrain partner dealers, all data access permissions and obligations are governed by the Terms of Service they accepted during account signup. There are no additional per-transaction agreements.
We share encrypted personal information (first and last name, street, email and phone) with Google via Enhanced Conversions to measure advertising effectiveness. This data is hashed and used to match conversions to ad interactions — it is not resold. This may constitute 'sharing' under California law.
We share encrypted personal data (email and phone) with Facebook via Meta Conversions API to measure advertising effectiveness. This data is hashed and used to match conversions to ad interactions — it is not resold. This may constitute 'sharing' under California law.
We DO NOT sell your personal information.
Law Enforcement: We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any personal information or other information about you or your vehicle to government or law enforcement officials or private parties as We, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including without limitation subpoenas), to protect Our property and rights or the property and rights of a third party, to protect the safety of the public or any person, to comply with the requirements of federal, state or local laws and regulations, or to prevent or stop activity We consider to be illegal or unethical.
-
Data Retention
For vehicles not purchased, data is archived after 90 days (no longer visible in our active systems) or retained until deletion is requested (as is the case of CASMiami.com, below). Certain data such as photos, logs, and chat history may be permanently deleted at archival. Archived records remain in our backend systems.
For completed transactions, data is retained indefinitely for legal protection, tax compliance, warranty claims, toll bills, DMV records, and dispute resolution. Deletion requests for completed transactions will be denied due to legal obligations.
Site-specific retention practices are detailed in the Site-Specific Information section below.
-
Data Security
We implement industry-standard security measures:
Encryption:
- Database disk encryption (protects against physical theft/loss)
- SSL/HTTPS encryption for all data transmission
- Secure file transfer protocols (SSFTP)
Access Controls:
- Personal information access limited to employees, contractors, and agents with legitimate business need
- Confidentiality obligations enforced
- Violations subject to discipline, termination, and criminal prosecution
Communication Recording & Retention:
Phone Calls: All phone calls may be recorded for quality assurance, training, and dispute resolution.
- Platform: Dialpad
- Retention: Up to 1 year
- By contacting us by phone, you acknowledge that such recording takes place Text Messages
& Chat: SMS and messaging communications are stored via:
- Platform: Twilio (SMS), WhatsApp, other messaging apps as may be supported
- Retention: Active leads - indefinitely; Archived leads - may be deleted after 90 days
- Email: Email communications are retained as part of your transaction or inquiry record.
Customer and Visitor Disclaimer:
In general, visitors & clients should be diligent in securing their Web browsing & email activities throughout the internet by utilizing devices that have active antiviral / anti-malware software & firewalls.
Email is outside Our control, sent unencrypted, and not secure. By contacting Us electronically, you acknowledge this risk.
Do not use unsecured devices and/or WIFI networks that are open and public since they are potential portals for cyber fraud.
We will not be liable for any vulnerabilities or financial loss that you may incur while browsing Our Website or any sites on the internet.
We will not accept responsibility if you transfer money into an incorrect account due to cyber fraud or by your own error.
-
Cookies & Tracking Technologies
For detailed information about the individual cookies and other tracking technology We use to understand usage of Our sites, please review Our Cookies Policy.
A cookie is a small string of information that the website that you visit transfers to your computer for identification purposes. Cookies can be used to follow your activity on the website and that information helps us to understand your preferences and improve your Website experience. Cookies are also used to remember, for instance, your user name and password. You can turn off all cookies, in case you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. For both options you have to adjust your browser settings (like Google Chrome, Microsoft Edge, Firefox, Internet Explorer). There are also software products available that can manage cookies for you. Please be aware though that when you have set your computer to reject cookies, it can limit the functionality of the website you visit and it is possible then that you do not have access to some of the features on the website.
We use cookies in the following ways:
- To store session information while users are browsing Our websites.
- To enable more accurate reporting of site usage data, such as new visitors, unique visitors and returning visitors.
- To enable targeted content to be served on Our sites or other third-party sites based on your browsing history (see privacy considerations below).
Cookie Categories:
- Strictly Necessary
- Functional
- Analytics & Performance
- Advertising & Retargeting
Do Not Track (DNT): We do not currently respond to DNT signals. Third-party sites may track your browsing; review their privacy policies.
-
Global Privacy Control (GPC) Signals
Global Privacy Control (GPC) is an automated browser signal that allows you to communicate your privacy preferences to Websites and services.
What is GPC? GPC is a privacy preference signal that can be enabled through your browser, browser extension, or device settings. When enabled, GPC sends a signal communicating your preference not to have your personal information sold or shared.
How We Honor GPC: We recognize and honor GPC signals from your browser or device. When We detect a valid GPC signal, We treat it as:
- An opt-out request from "sales" of personal information (under CCPA/CPRA)
- An opt-out request from "sharing" of personal information (under CCPA/CPRA)
- A request not to process personal information for targeted advertising purposes
- A request not to process personal information for profiling in furtherance of decisions that produce legal or similarly significant effects
Which Laws Does GPC Cover? We honor GPC signals for users in jurisdictions that recognize such signals, including:
- California (CCPA/CPRA)
- Virginia (VCDPA)
- Colorado (CPA)
- Connecticut (CTDPA)
- Utah (UCPA)
- Other jurisdictions as required by law
What Happens When You Enable GPC?
When We detect a valid GPC signal:
- We will not sell your personal information
- We will not share your personal information for advertising purposes
- We will not use your personal information for targeted advertising
- We will not process your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects
- We will not discriminate against you for exercising this preference
Important Limitations: GPC does not prevent:
- Necessary business communications (transaction confirmations, account updates)
- Service delivery (fulfilling your purchase or service request)
- Fraud prevention and security measures
- Legal compliance and regulatory obligations
- Data processing necessary to provide your requested service
Verification of GPC Signal: We use industry-standard methods to verify GPC signals, including:
- Detecting the GPC header in HTTP requests
- Recognizing GPC browser extensions and settings
- Validating GPC signals against IAMAI standards
How to Enable GPC: GPC can be enabled through:
- Browser settings (if your browser supports it)
- Browser extensions (e.g., "Privacy Badger," "DuckDuckGo")
- Device-level privacy settings (some devices allow system-wide GPC signals)
For instructions, visit globalprivacycontrol.org or your browser's help center.
-
Your Privacy Rights
All Users:
Access: Request a copy of your personal information
Correction: Update inaccurate information
Deletion: Request deletion (subject to legal retention requirements)
Opt-Out: Unsubscribe from marketing emails Portability: Receive your data in a structured format
California Residents (CCPA/CPRA):
You have rights under California law:
Right to Know: What personal information We collect, use, and share Right to Delete: Request deletion of personal information (with exceptions) Right to Opt-Out: Opt out of “sale" or "sharing" for advertising purposes
Right to Non-Discrimination: We will not discriminate for exercising your rights
Do We "Sell" or "Share" Your Information? We share data with advertising partners (Google Enhanced Conversions, retargeting cookies, and with Facebook (Meta Conversions API)) and for CarBrain, with User.com, we share your name, email, vehicle information and phone, which may constitute "sharing" under California law.
Opt-Out: https://carbrain.com/privacy-request
European Users (GDPR):
If you are in the European Economic Area:
p> Legal Basis for Processing:
- Contractual necessity (to provide services)
- Legitimate interests (business operations, fraud prevention)
- Consent (marketing, cookies)
Your Rights:
- Right to access, rectify, erase, restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with supervisory authority
International Data Transfers: Your information may be transferred to and processed in the United States. We use appropriate safeguards for international transfers. If you indicate that you are an EU resident in any forms that request your information, your explicit consent will be collected.
-
Your Choices Regarding Communications
Opting Out from Email Communications
This subsection applies to both opt-out rights and the rights to object to processing and withdraw consent.
After you register or use our Services, We may periodically send you feed-back reviews, newsletters and other e-mails featuring special offers, promotions and other benefits. If you no longer wish to receive these communications, please let us know by clicking on the "unsubscribe" link in our e-mails. Our e- mail database is continually updated. However, you may continue to receive e-mail communications from Us for no more than ten business days from the time We receive your unsubscribe request. Please note that We can only control our own mailing list and policies. Third party advertisers that maintain their own mailing lists may send communications that advertise our products or services; and you may need to contact those parties directly in order to stop receiving their e-mail communications.
Certain administrative communications, including e-mails and telephone calls, are necessary to deliver our services. If you agree to use our Services, you agree to receive these administrative communications. For further clarification of these administrative communications, please contact our customer service center at info@carbrain.com.
For further clarification of these administrative communications, please contact our customer service center at info@carbrain.com.
How to Exercise Rights:
- Submit a request: use this privacy request form.
- Your Choices Regarding SMS Communications
TRANSACTIONAL MESSAGES (Account/Transaction Related)
By providing your phone number, you consent to receive SMS about your specific transaction/quote only:
- Quote confirmation
- Pickup scheduling
- Payment reminders for YOUR transaction
- Delivery status
MARKETING MESSAGES (Promotional/Sales Offers)
Separate opt-in required. You will checkbox: "Yes, send me promotional SMS about new vehicles and special offers"
You must ACTIVELY CHECK this box. Default = OPT-OUT (no marketing SMS).
DO NOT CALL REGISTRY - WE HONOR IT
For MARKETING SMS/calls: Your number on National Do Not Call Registry is HONORED.
- You will NOT receive marketing calls/SMS if on registry (unless you have opted in with a checkbox as above)
For TRANSACTIONAL calls: Do Not Call registry does NOT apply
- We MAY call about YOUR pending transaction (pickup, payment, title)
- These are account service calls
- You can still opt-out by replying "STOP" or requesting no-call, but your transaction will not be possible.
SMS OPT OUT
To stop receiving messages and/or Opt-out of SMS communications entirely please reply "STOP" at any moment. To resubscribe please reply "START". If you would like to receive more information during the process, please reply "HELP". Your opt-out requests will be honored within 24 hours.
You can also adjust your communications settings:
- Login → Settings → Communications
- Uncheck SMS preferences
- Takes effect within 24 hours
IMPORTANT - READ THIS
Express Written Consent for Marketing
By checking the marketing SMS box during signup, you expressly consent:
- You authorize SMS for promotional offers
- You understand message rates may apply
- You are 18+ (or parent/guardian if minor)
- This is your personal phone number (not someone else's)
- You can opt-out anytime
This checkbox constitutes express written consent per TCPA § 227(b)(1)(C).
Your Choices Regarding SMS Communications
PHONE CALLS
- We may call you about your transaction (pickup, payment, questions).
- Marketing calls: We honor Do Not Call Registry.
- You can refuse calls anytime.
If We call: You'll hear "This call may be recorded.
Children's Privacy (COPPA Compliance)
Our services are not intended for children under 16. We do not knowingly collect information from children under 16. If you believe We have collected such information, contact us immediately. If We determine that a user is under 16 years of age and has submitted information, We will immediately delete such information.
Changes to This Policy
We may update this Policy periodically. Changes will be posted with a new "Last Updated" date. Significant changes will be communicated via:
- Prominent notice on our Website
- Email notification (for certain services)
Your continued use after changes indicates acceptance.
Contact Us
General for Privacy Inquiries: Privacy Matters, c/o CarBrain, LLC, 7920 NW 154th Street, Suite 401, Miami Lakes, FL 33016, USA. Phone: (305)385-9000
EU Address for Privacy Inquiries Privacy Matters, c/o CAS AUTO GMBH,
Taunustor 1, Stock 18, 60310 Frankfurt am Main, Deutschland
Data Privacy Requests: https://carbrain.com/privacy-request
Enforcement
We regularly review compliance with this Policy. Please feel free to direct any questions or concerns regarding this Policy or Our treatment of personal information by contacting us through this website or by writing to us at Privacy Matters, c/o CarBrain, LLC 7920 NW 154th Street, Suite 401, Miami Lakes, FL, 33016, USA.
When We receive formal written complaints at this address, it is Our policy to contact the complaining user regarding his or her concerns. We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between Us and an individual.
Site-Specific Information
The following information is related to each of our sites and the actions related to the services they offer.
CarBrain.com, Damageequipment.com, and other vehicle purchasing websites
Service Description
CarBrain, damagedcars.com, junkcarmasters.com, carjunkyardsnearme.com, Webuytotaledcards.com and damageequipment.com purchase vehicles directly from consumers and through partner dealers.
Personally Identifiable Information Documents We Collect
Seller Identification:
- Driver's license
- Business card or letter of affiliation
Special Situations:
- Marriage license/divorce decree (name discrepancies)
- Death certificate, trust documents, will (deceased ownership)
- Correction forms (signature errors)
Payoff Assistance:
- Lienholder authorization letter
- Vehicle registration
- Payoff letter
- Power of attorney documents
- Bills of sale
State-Specific:
- California: REG 262
- Washington: Affidavit in Lieu of Title
Minimize Your Data: Customers are encouraged to redact or cross-out non-essential information from any required document.
Third-Party Service Providers
- Towing companies
- Auction services
- 140+ partner dealers in buyer network
Partner Network
Partner dealers must acknowledge our Terms of Service (Section 7 confidentiality clause). Customer information shared only after deal acceptance and customer notification. https://carbrain.com/terms-of-services
Data Retention
Non-transacted leads stored for 90 days, then archived; certain data (photos, logs) may be deleted.
CASAuto.com, CasMiami.com and vehicle selling websites
Service Description
CASAuto.com, CasMiami.com, diplomatic.casauto.com, gm.casauto.com, casautomative.com sell vehicles to businesses and consumers with domestic and international shipping services. CASAuto specializes in global export with comprehensive international documentation; CasMiami focuses primarily on domestic and regional sales.
Registration Information
- Country
- Type of business (dealer, broker, rental agency, government)
- CASAuto also collects: Company name, job title, vehicle type preferences, Website URL
Documents We Collect
Buyer Identification:
- Personal ID (driver's license and/or passport)
- Business registration documents (for business customers)
- IDs of all business owners listed in registration
- Addresses of business owners and official business address
- Website address/URL (CASAuto)
Payment Documentation:
Copy of credit card
- We do NOT accept or store credit cards via email. Payment information accepted ONLY through:
- Secure online payment gateway (tokenized)
- Phone payment to our agent (processed immediately, not stored) - Wire transfer from your bank account
- Bank letter of credit (international) (via email)
- Wire confirmation with sender and business details
- Letter of Credit / bank guarantee (CASAuto international transactions)
- Sales order details (CasMiami)
- Sales contract (CASAuto)
- Bill of Sale
- Bill of Lading (shipment)
- Other shipping documentation
Shipping Information (CASAuto international):
- Port of destination
- Notifying party
- Shipping-related communications
Documents We Provide
- Vehicle title
- Manufacturer manuals (if available)
- Additional documentation varies by destination
CASAuto international sales also include:
- Homologation certificates
- T1 and T2 tax/customs documents (Europe)
Third-Party Service Providers
- Towing companies (domestic and global)
- Shipping companies (domestic and international)
- Port operators (CASAuto)
- Homologation contractors (CASAuto)
- Repair shops
- Shipping/towing insurance providers
Data Management Platforms
CASAuto:
- CRM: HubSpot
- ERP: Odoo
- ERP: NetSuite (transactional data)
- Website: WP Engine
CasMiami:
- ERP: NetSuite (customer and transactional data)
Cookie Consent
CASAuto uses CookieYes for cookie preference management. (carbrain.com/cookie-policy)
Data Retention
Non-transactional inquiries retained until deletion request.