Privacy Policy

The short version

• The app receives only what a car search needs: where and when you want to pick up and drop off, driver age, currency, language, and any filters you asked for. Nothing else.
• We never receive your name, email, phone number, payment card, driving licence, or any government ID — and we never receive your ChatGPT conversation.
• Your search parameters go to one third party, DiscoverCars, whose rental offers we compare. Booking and payment happen on their site, never inside ChatGPT.
• We hold searches in memory for up to 24 hours so the results card can filter and page. There is no database and no user account. We don't sell data, don't advertise, and don't train AI models on it.

Who we are

"Carhopp" ("we", "us") builds the Carhopp app for ChatGPT and publishes the travel journal at carhopp.bot. We are the controller for the data described below. For any privacy question — including access, correction, or deletion requests — reach us at privacy@carhopp.bot.

The Carhopp app for ChatGPT — what we receive

When you ask ChatGPT to find a rental car, ChatGPT sends our server only the parameters needed to run that search. Depending on what you asked for, those are:

• the place you want to pick the car up and drop it off — first as the place name you typed, then as the airport code or coordinates of the location you chose;
• pickup and drop-off dates and times;
• driver age, when you or ChatGPT supply one — we use a default of 30 when it is not specified;
• currency and response language;
• the filters and sorting you asked for — car category, transmission, seats, luggage, maximum price, supplier, free cancellation and similar;
• an internal search identifier and offer identifier, so the results card can page through offers you already have and open the details of one you picked.

That is the complete list. Our tools do not request your ChatGPT conversation, transcripts, or broad context "just in case", and we do not ask for — or accept — payment card details, government IDs, health data, or login credentials.

ChatGPT also attaches technical metadata to each call, including pseudonymous session and account tokens it generates. We do not read, use, or store those.

Why we use it, and who receives it

We use those parameters for a single purpose: to run your car-rental search, show you comparable offers, and — if you choose one — hand you a link to book it.

DiscoverCars is the only third party that receives your search parameters. To return live offers we send them the pickup and drop-off location, dates and times, driver age, and currency, together with a fixed country-of-residence value we configure for pricing (it does not come from you). They act as the rental inventory provider, and their handling is governed by their own privacy policy.

Microsoft Azure hosts the service (Sweden Central region) and processes data on our behalf as our infrastructure provider.

We do not sell or share your data for advertising, do not build profiles of you, and do not use your searches to train AI models.

Booking a car

When you pick an offer and ask to book, we build a link to DiscoverCars carrying our affiliate tag and show it to you. The link opens only when you click it — nothing is reserved, booked, or charged inside ChatGPT, and the app never handles payments.

Once you follow that link you are on DiscoverCars' website. Everything you enter there — your name, driving licence, and payment details — goes to DiscoverCars under their privacy policy. We never see or receive it. If you complete a booking we may earn a commission; your price is exactly the same as booking directly.

How long we keep it

• Search cache — up to 24 hours. Your search parameters and the offers returned are held in the server's memory so the results card can filter, sort and page without re-querying. Entries expire after 24 hours, only the 300 most recent searches are kept, and everything is erased whenever the service restarts or is updated. This is memory only: there is no database and nothing is written to disk.
• Operational logs — 30 days. For reliability, debugging and abuse prevention we record which tool was called, whether it succeeded, how long it took, any error code, the filters applied, how many offers matched, and technical request metadata such as our own internal session identifier. These logs are deleted automatically after 30 days. They contain no name, contact details, or payment information.

Your choices and controls

• Stop sharing at any time by removing the Carhopp app from your apps in ChatGPT. No further data reaches us.
• Control what you send. The app only ever receives what you put in a request — if you would rather not share a driver age, simply don't state one.
• Access, correction, deletion, objection. Depending on where you live (for example under GDPR or the CCPA) you have these rights over personal data we hold. Because we operate no accounts and hold no identifier that links a search to you, we usually cannot single out "your" data — and the cache erases itself within 24 hours regardless. Write to privacy@carhopp.bot and we will respond and help where we can.
• Data you gave DiscoverCars during a booking is theirs to hold; direct those requests to DiscoverCars.

carhopp.bot — this website

The sections below cover the website only. It is a static publication: no accounts, no comment system, and no sign-up forms that store what you enter.

Like almost any website, our hosting provider may automatically record standard technical logs — such as your IP address, browser type, and the pages requested — for security and to keep the site running. These logs are not used to identify you and are kept only for a short period.

Cookies and analytics

We set no tracking or advertising cookies of our own, and if we ever add privacy-friendly, aggregate analytics we will update this page first.

Our journal pages embed a car-search widget from DiscoverCars. When it loads, it runs DiscoverCars' own scripts (including Google Tag Manager) and may set its own cookies — to power the search and to attribute a booking to us. This happens under DiscoverCars' privacy policy, not ours, and we don't receive the data it collects. A content blocker will stop the widget without affecting the rest of the page.

Our pages also load fonts from Google Fonts. Serving those fonts means your browser requests them from Google's servers, which receive your IP address as part of the request. See Google's privacy policy for details.

Affiliate links and DiscoverCars

carhopp takes part in the DiscoverCars affiliate program. Links that lead to a car rental carry an affiliate tag so DiscoverCars can attribute the visit to us.

If you book, we may earn a commission. Your price is exactly the same as booking directly, and we never see or receive your booking details, payment information, or the personal data you give DiscoverCars. That information is handled by DiscoverCars under their own terms and privacy policy.

Links to other sites

carhopp.bot links to external websites we think are useful. We are not responsible for the content or privacy practices of those sites; this policy covers carhopp.bot only.

Children

Neither the app nor the website is directed at children. Renting a car requires a driving licence, and carhopp.bot is written for a general, adult audience. We do not knowingly collect data from children under 16, and we never knowingly accept personal information about a child through the app.

Changes to this policy

We may update this policy as the app and the site evolve — including whenever the app's tools start or stop handling a category of data. When we do, we will revise the "last updated" date above, and material changes will be made clear on this page.

Contact

Questions about this policy? Email privacy@carhopp.bot and we'll get back to you.