Privacy Notice

1. Who is responsible and what this notice covers

CARRAS is the commercial brand operated by Carras Technologies LLC, a North Dakota limited liability company serving customers in the United States. Mailing address: 2425 24th Ave W, Apt 302, Williston, ND 58801, United States. Privacy contact: info@carrastechnologies.com; telephone: (701) 713-9996.

This notice applies to carrastechnologies.com and communications about its software, automation, consulting, 3D printing, RFID/NFC and connected-device services. CARRAS determines the purposes of processing for these website and business-contact activities.

A customer portal, a separately operated product or a system built for a client can involve different data. Any product-specific notice and the relevant agreement describe those activities. When we process information on a client's instructions, the client determines the authorized purposes and the applicable service or data-processing agreement governs our role. This public website notice does not authorize monitoring people or importing their information into a client system.

2. Information we receive

Please do not submit passwords, payment-card details, Social Security numbers, medical records, biometric identifiers or other sensitive personal information through the inquiry form. Do not place personal or confidential information in a page URL. Arrange an appropriate channel before sharing confidential technical material or information about other people.

• Private feedback: a rating from one to five, comments, optional name, email and project or order reference, whether you request a reply, privacy acknowledgment and submission time. Ratings below four are marked for internal attention; all ratings use the same private channel.
• Information you provide: name, email, optional phone and company, service interest, timeline, message, and subsequent correspondence. The form also sends the page used to submit the request, your acknowledgment of this notice and the request time.
• Project-related information you choose to share through an agreed channel: business requirements, drawings, dimensions, design files, contact details and records needed to discuss or manage a project. The public form has no file-upload or payment-card field.
• Technical information: hosting and security infrastructure process requests that can include IP address, browser or device information, requested URL, referral information, time and diagnostic or security events.
• Privacy preferences: your analytics choice, notice version and the dates used to remember that choice in this browser. Optional analytics, if enabled and accepted, can receive page views, device/browser characteristics, approximate location derived from network information and limited interaction events.

3. Why we use information

Submitting an inquiry requests a response about that inquiry. It does not enroll you in a marketing subscription or constitute consent to advertising cookies. We do not use the public website to make decisions producing legal or similarly significant effects through automated profiling.

• Review feedback, investigate concerns, improve our service and reply when requested. Private feedback is not posted as a public review or used for marketing without separate permission.
• Respond to your request, assess feasibility, prepare a proposal and communicate about a potential or existing project.
• Administer an agreed business relationship, including project coordination, support and related records.
• Operate, deliver and protect the website; investigate misuse or technical problems; and maintain information needed for legal obligations or disputes.
• Remember your privacy preferences and, only when optional analytics is configured and you permit it, understand website use and improve its content.

4. Who receives information

People working for CARRAS receive information relevant to handling the request or business activity. Vercel hosts this website; Resend delivers form submissions to our mailbox; our email service processes messages and replies. Optional analytics runs in Umami on CARRAS-operated servers. Cloudflare transports and protects analytics requests. This does not grant those services permission to use your form content for analytics.

A particular project may require additional hosting, software, hardware, manufacturing or professional-service providers. Their involvement, access and relevant data requirements must be addressed for that engagement. Do not infer that every provider used on a client project receives information from this public website.

Information may also be disclosed where reasonably necessary to comply with law or valid legal process, protect rights and security, investigate fraud, or obtain professional advice. A business transfer may involve relevant records, subject to applicable privacy requirements and protections.

The current public website does not sell personal information, run targeted-advertising pixels or share website visitor information for cross-context behavioral advertising. Necessary processing by a hosting or email provider is distinct from advertising. We will update this notice and provide any required choices before materially changing those practices.

5. Cookies, analytics and browser signals

On-demand web chat: when you choose Chat with us, we load Chatwoot from chatwoot.carrastechnologies.com, operated by CARRAS. It stores a conversation identifier in your browser to continue the chat and sends your messages, the page reference and connection information to our reception infrastructure through Cloudflare. Chat content is not sent to our analytics. Clearing browser data can prevent access to the previous conversation. The chat is separate from optional analytics; email and phone remain available.

The Cookie Policy explains browser storage and optional analytics. Umami measurements remain blocked until a valid affirmative choice permits them. Rejecting analytics does not prevent browsing or submitting an inquiry. Names, email addresses, phone numbers and form content are not sent through our analytics events.

You can reopen Cookie settings in the footer, withdraw permission or change your choice. We honor a detectable Global Privacy Control signal or a Do Not Track value of 1 by keeping this site's optional analytics disabled, including when an earlier saved choice allowed it. These controls apply to this website and browser, not automatically to independent sites you visit through a link.

Hosting and security processing needed to deliver a request can still occur without analytics consent. This is separate from optional analytics. An outside website or service you choose to visit may collect information under its own notice.

6. How long information is kept

The same purpose-based retention criteria apply to private feedback and any related resolution correspondence.

Retention depends on the record and its purpose: whether an inquiry remains active, a project or support relationship continues, business or tax records must be kept, or information is needed for security, a legal obligation or a claim. There is no single retention period for every inquiry or project record. We seek to retain identifying information only for the applicable purpose and retention requirements, then delete it or make it non-identifying.

A deletion request may not remove records we must retain for legal requirements, security, transactions or claims. If an exception applies, we will explain the relevant basis to the extent permitted by law. Copies in backups or service-provider systems may follow their applicable retention and deletion cycles and must remain protected.

Cookie choices are treated as valid for 180 days. The cookie policy specifies the browser lifetimes configured for optional analytics. Browser-storage lifetimes are not a statement of how long a provider or business record is retained.

7. Protection and processing locations

We use safeguards appropriate to the information and the services involved. No internet transmission or storage system can be guaranteed completely secure. Please report a suspected exposure involving this website to info@carrastechnologies.com, without including exposed credentials or sensitive records in the initial message. Where applicable law requires notice of a breach, we will provide the required notices.

CARRAS is based in the United States. Hosting, email and other authorized providers may process data in the United States or other locations where their infrastructure operates. The presence of this notice does not represent that every record is stored exclusively in North Dakota. This website currently offers services in the United States; any engagement requiring additional jurisdiction-specific safeguards must be assessed for that engagement.

8. Requests and US state privacy rights

Contact info@carrastechnologies.com, call (701) 713-9996 or write to the mailing address above to ask about information you provided, request access or a copy, correct it or request deletion. Identify the relevant interaction and the request without sending unnecessary identification documents. We may seek proportionate information to verify identity or an authorized agent's authority before disclosing or changing records.

Depending on your state, the information involved and whether the relevant law applies to CARRAS, you may have additional rights to access, correct, delete or obtain portable information; opt out of sale, sharing, targeted advertising or certain profiling; or limit specified uses of sensitive information. We will assess requests under applicable law, communicate any lawful exception, and respond within the deadlines that apply to the request. We do not penalize a person for exercising an applicable privacy right.

If we decline a request, you may ask us to reconsider by replying with the subject 'Privacy appeal' and explaining the issue. Where an applicable law provides an appeal right, we follow its requirements. You may also contact the relevant state attorney general or privacy regulator. You do not need to complete an informal discussion with us before exercising a non-waivable legal right.

California visitors can also use the contact information above to review or request changes to information provided through this site. The sections on cookies and recipients describe our response to browser signals and possible collection by service providers. We do not claim that every state privacy statute applies to every visit or business relationship.

9. Children

This business website is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child has submitted information should contact us so we can investigate and take appropriate action, including deletion where required. Minors should not submit a project request without an authorized adult.

10. Updates and related notices

We will update the effective date when this notice changes. Material changes will be brought to your attention through an appropriate notice, and any consent required for a new use will be requested before that use. Merely publishing a new policy or continuing to browse is not consent to optional analytics. Website Terms and the Cookie Policy are available in the footer.