Snapshot of the source text at fetch time — not a live mirror of the policy page.
Plain-English summary
The privacy policy indicates that some of your personal information, such as identifiers, biographical data, internet activity, non-precise geolocation, and inferences drawn to create a consumer profile, may be sold or shared (data_use-1, data_use-2, data_use-3, data_use-4). The company also states that it uses session recording tools to track user interactions on its website (data_use-5). Additionally, the policy is subject to arbitration provisions in the Terms of Use, which may limit your dispute rights (risk_flags-1). You also consent to waive claims of unlawful wiretapping, eavesdropping, or interception under state law and agree that disputes involving electronic communications and tracking technologies will be governed by Massachusetts and federal law (risk_flags-2, risk_flags-3).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risks
Potential legal or financial risks for users that are explicitly mentioned in the policy.
high95% confidence confidence
Terms of Use includes arbitration provisions
This Privacy Notice is incorporated into and subject to the CarGurus Terms of Use, including its arbitration provisions.
Why it matters: Your rights to dispute issues may be limited by arbitration provisions found in the Terms of Use, which this Privacy Notice is subject to.
**This Privacy Notice applies to all CarGurus digital properties, including our website, mobile website, and mobile applications. This Notice is incorporated into and subject to the CarGurus**[**Terms of Use**](https://www.cargurus.com/about/terms-of-use)**, including its arbitration provisions.**
Waiver of claims for unlawful wiretapping, eavesdropping, or interception
You consent to the use of electronic communications and tracking technologies, and waive any claim that such practices constitute unlawful wiretapping, eavesdropping, or interception under any state law, including but not limited to the California Invasion of Privacy Act, to the fullest extent permitted by law.
Why it matters: You waive any claim that the use of electronic communications and tracking technologies constitutes unlawful wiretapping, eavesdropping, or interception under any state law, including but not limited to the California Invasion of Privacy Act, to the fullest extent permitted by law.
You consent to the use of electronic communications and tracking technologies, and waive any claim that such practices constitute unlawful wiretapping, eavesdropping, or interception under any state law, including but not limited to the California Invasion of Privacy Act, to the fullest extent permitted by law.
Technologies We Use to Automatically Collect Personal Information, paragraph 4 · Citation strength: strong
high95% confidence confidence
Disputes governed by Massachusetts law
You agree that all Disputes and claims involving electronic communications and tracking technologies shall be governed exclusively by the laws of the Commonwealth of Massachusetts and applicable federal law, regardless of your state of residence.
Why it matters: All disputes and claims concerning electronic communications and tracking technologies will be governed exclusively by the laws of Massachusetts and applicable federal law, regardless of your state of residence.
You agree that all Disputes and claims involving electronic communications and tracking technologies shall be governed exclusively by the laws of the Commonwealth of Massachusetts and applicable federal law, regardless of your state of residence.
Technologies We Use to Automatically Collect Personal Information, paragraph 4 · Citation strength: strong
Data Use & Sharing
How the policy says user data is collected, processed, and shared with other companies.
medium90% confidence confidence
Identifiers/biographical information is sold or shared
Identifiers/biographical information, including name, postal and email address, phone number, online identifiers, Internet Protocol (“IP”) address, and other similar identifiers, is sold or shared.
Why it matters: Your identifiers and biographical information, such as your name, email, phone number, and IP address, may be sold or shared.
Identifiers/biographical information**, including name, postal and email address, phone number, online identifiers, Internet Protocol (“IP”) address, and other similar identifiers. | Yes. | Yes.
**a. Categories of personal information collected**, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Internet or other electronic network activity information is sold or shared
Internet or other electronic network activity information is sold or shared.
Why it matters: Your internet or other electronic network activity information may be sold or shared.
Internet or other electronic network activity information | Yes. | Yes.
**a. Categories of personal information collected**, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Non-precise geolocation data is sold or shared
Geolocation data (non-precise) is sold or shared.
Why it matters: Your non-precise geolocation data may be sold or shared.
Geolocation data (non-precise) | Yes. | Yes.
**a. Categories of personal information collected**, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Inferences used to create a consumer profile are sold or shared
Inferences, meaning inferences drawn from the above-listed categories of Personal Information to create a consumer profile reflecting consumer preferences or characteristics, are sold or shared.
Why it matters: Inferences drawn from your personal information to create a consumer profile may be sold or shared.
, meaning inferences drawn from the above-listed categories of Personal Information to create a consumer profile reflecting consumer preferences or characteristics. | Yes. | Yes.
**a. Categories of personal information collected**, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Session recording tools are used to track user interactions
These technologies may also include session recording tools such as heat maps, click maps, scroll maps, session replay software, and other similar technologies to track user interactions on our website, including viewed content (e.g. video) to fix bugs, evaluate effectiveness, and make other improvements as necessary.
Why it matters: Session recording tools, including heat maps, click maps, scroll maps, and session replay software, may be used to track your interactions on the website, such as viewed content.
These technologies may also include session recording tools such as heat maps, click maps, scroll maps, session replay software, and other similar technologies to track user interactions on our website, including viewed content (e.g. video) to fix bugs, evaluate effectiveness, and make other improvements as necessary.
Technologies We Use to Automatically Collect Personal Information, paragraph 3 · Citation strength: strong
Cancellation & Renewal
Details about account cancellation, refunds, and subscription renewals.
Not clearly stated: The document does not clearly state information about cancellation or renewal policies.
Gotchas
Potentially overlooked or surprising clauses that could be disadvantageous to the user.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
Statements in the policy that protect user rights or limit company actions.
Protection95% confidence confidence
No knowing sale or sharing of personal information for persons under 18
We do not knowingly sell or share personal information about persons under the age of 18.
Why it helps: This commitment helps protect the privacy of minors by explicitly stating that their personal information will not be knowingly sold or shared.
We do not knowingly sell or share personal information about persons under the age of 18.