Privacy Policy

Last updated October 12, 2026

Effective Date: October 12, 2026 Last Updated: October 12, 2026

1. Introduction

Car Seat Life LLC, doing business as CarSeatLife ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at www.carseatlife.com and any associated applications (collectively, the "Platform").

By using the Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, ZIP code, and password when you create an account.
• Family Profile Information: Children's names, dates of birth, height, weight, and car seat assignments. This information is used solely to provide personalized safety recommendations.
• Vehicle Information: Vehicle year, make, model, and LATCH anchor positions for compatibility lookups.
• Booking Information: Service selections, appointment dates and times, addresses for in-person services, and notes provided to Educators.
• Payment Information: Billing details processed through Stripe, Inc. CarSeatLife does not store your credit card numbers or full payment details on our servers.
• Educator Profile Information: For Educators: business name, certifications, service areas, qualifications, bio, availability, and banking information (processed through Stripe Connect).
• Communications: Messages you send and receive through the Platform's messaging feature (between a Client and the Educator of their booking or class, and any message from CarSeatLife staff in that conversation); reviews and feedback you submit; and any correspondence you send to our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, time spent on the Platform, and interaction patterns.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and error logs.
• Location Data: ZIP code or general location based on your IP address (we do not collect precise GPS location without your explicit consent).

2.3 Information from Third Parties

• Stripe: Payment confirmation, subscription status, and transaction identifiers (no full card numbers).
• Supabase: Authentication tokens and session data for account management.
• NHTSA: Publicly available recall data displayed on the Platform.

3. How We Use Your Information

We use the information we collect to:

• Provide and Improve Services: Operate the Platform, process bookings and payments, deliver personalized car seat compatibility and recall information, and improve our features and user experience.
• Facilitate Connections: Match Clients with qualified Educators based on location, availability, and service needs.
• Process Payments: Handle subscription billing, booking payments, class enrollment fees, and Educator payouts through Stripe.
• Communicate with You: Send booking confirmations, appointment reminders, recall alerts, service updates, an email notice when you receive a message on the Platform, and respond to your inquiries.
• Ensure Safety and Security: Verify Educator certifications, detect and prevent fraud, enforce our Terms of Service, and protect the safety of our users.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

4. How We Share Your Information

We do NOT sell your personal information to third parties. We may share your information in the following limited circumstances:

4.1 With Educators

When you book a service, we share with the assigned Educator what they need to provide it: your name, the appointment details (the service, date, time and location), the child, vehicle and car seat details you choose for that appointment, and any notes you provide. We do not give Educators your email address or phone number.

Once you have booked a service or enrolled in a class, you and that Educator can message each other on the Platform about that appointment or class. We store these messages and show them to you and the Educator currently assigned to that booking or class. If the Educator for a class you are enrolled in changes, including when you move to another session of it, the newly assigned Educator can read the earlier messages and the previous one no longer can. CarSeatLife staff may also write in the conversation. CarSeatLife administrators may open a conversation in our administrator tools to provide support, to investigate a report, or to enforce our Terms of Service; we keep a record each time they do. Messaging is how you and your Educator reach each other: we do not give Educators your email address or phone number, and what looks like a phone number, email address, web link or messaging handle in a message is hidden from the recipient (links to public safety agencies such as NHTSA are allowed) and marked for our review.

The Educator teaching a class you enroll in sees your name and your attendance during the class, and sees your name and the messages you send if you message them; CarSeatLife administrators see the class roster.

4.2 With Service Providers

We share information with third-party service providers who assist in operating the Platform:

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Background Check Disclosure (Educators Only)

As part of the Educator onboarding process and on an annual basis thereafter, CarSeatLife conducts criminal background checks through Checkr, Inc. in accordance with the Fair Credit Reporting Act (FCRA). Educators consent to these checks as a condition of Platform participation. Background check data is handled as follows:

• Background check results are used solely for determining eligibility to provide services on the Platform.
• Results are retained in accordance with FCRA requirements and applicable state law.
• CarSeatLife does not share background check results with Clients or other third parties except as required by law.
• Educators have the right to dispute inaccurate background check information directly with Checkr, Inc. in accordance with FCRA procedures.
• If a background check reveals potentially disqualifying information, the Educator will be notified and given an opportunity to respond before a final decision is made, as required by FCRA.

4.4 For Legal Reasons

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change. Text messaging opt-in data and consent are not transferred (see Section 4.7).

4.6 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so. This section does not apply to text messaging; see Section 4.7.

4.7 Text Messages (SMS)

Text messages are optional. If you turn on Appointment reminders via SMS on the Profile tab of your account Settings, we text a reminder to the mobile phone number on your profile about 40 minutes before each confirmed appointment: for Clients (families), each appointment you book; for Educators (technicians), each appointment booked with you. We record when you turn text reminders on. Message frequency varies with your bookings (one reminder per appointment). Message and data rates may apply. Reply STOP to any message to opt out, or turn the setting off in your account. If you reply STOP and later want reminders again, reply START and turn the setting back on. Reply HELP for help, or email support@carseatlife.com.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from all of the sharing described in this Section 4 and are not shared with any third parties. Our messaging service provider, Twilio Inc., processes your mobile number and the text of each message on our behalf only to deliver our messages, and our database provider, Supabase, stores them.

5. Children's Information

5.1 Children's Safety Data

CarSeatLife collects information about children (names, ages, height, weight) solely for the purpose of providing accurate car seat safety recommendations. This information is:

• Stored securely and encrypted at rest.
• Accessible only to the parent/guardian who created the family profile and any Educators they book services with.
• Never sold, shared for advertising purposes, or used for any purpose other than child passenger safety.
• Deletable at any time by the parent/guardian through their account settings.
• Anything you write about your child in a message stays with that conversation (Section 7) and is visible to the Educator in it and, as Section 4.1 describes, to CarSeatLife administrators.

5.2 Children Under 13

CarSeatLife does not knowingly collect personal information directly from children under the age of 13. All children's data is provided by their parent or legal guardian. We comply with the Children's Online Privacy Protection Act (COPPA).

If you believe we have inadvertently collected information from a child under 13 without parental consent, please contact us immediately at privacy@carseatlife.com.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption: All data transmitted to and from the Platform is encrypted using TLS/SSL.
• Secure Authentication: Passwords are hashed and salted; we never store plaintext passwords.
• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis.
• Payment Security: All payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification.
• Database Security: User data is stored in Supabase with row-level security policies, so that each account reads only its own data and what Section 4 describes as shared with an Educator or administrator.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account.
• Booking Records: Retained for 7 years for tax and legal compliance purposes.
• Messages: Messages between you and an Educator are kept with the booking or class enrollment they belong to and are deleted with it. Deleting your account deletes your bookings and class enrollments and the messages that belong to them. Deleting an Educator's account deletes that Educator's bookings and the messages that belong to them. If a class instructor's account is deleted, the messages stay with your enrollment and the instructor's name is shown as a neutral label.
• Payment Records: Retained by Stripe in accordance with their data retention policies and applicable financial regulations.
• Usage Data: Retained for up to 24 months for analytics and service improvement.

When you delete your account, we will delete or anonymize your personal information within 30 days, except for data we are required to retain for legal or regulatory purposes.

8. Your Rights and Choices

8.1 Access and Update

You can access and update your personal information at any time through your account settings.

8.2 Delete Your Account

To delete your account, email privacy@carseatlife.com from the address on your account; we delete it within 30 days. Account deletion is permanent and cannot be undone.

8.3 Communication Preferences

You can turn text message reminders on or off on the Profile tab of your account Settings, or reply STOP to any text (see Section 4.7). Emails about your account, your bookings, recall alerts and messages you receive on the Platform are sent regardless of these settings. We do not send marketing emails; if we start, each will include a way to unsubscribe.

8.4 Data Portability

You may request a copy of your personal data in a structured, commonly used format by contacting us at privacy@carseatlife.com.

8.5 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: Request disclosure of the personal information we collect, use, and share about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do NOT sell personal information, so this right does not apply.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@carseatlife.com. We will respond within 45 days as required by law.

9. Cookies and Tracking Technologies

9.1 What We Use

The Platform uses minimal cookies and local storage for:

• Authentication: Maintaining your logged-in session.
• Preferences: Remembering your settings and preferences.
• Analytics: Understanding how users interact with the Platform to improve our services.

9.2 What We Do NOT Use

We do NOT use:

• Third-party advertising trackers.
• Cross-site tracking cookies.
• Social media tracking pixels.
• Any cookies that sell or share your browsing data with advertisers.

9.3 Managing Cookies

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Platform.

10. Third-Party Links

The Platform may contain links to third-party websites or services (such as NHTSA.gov, car seat manufacturer websites, or educational resources). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Educator-Specific Privacy

11.1 Educator Data

Educators who join the Platform provide additional information including certifications, service areas, availability, pricing, government-issued identification, emergency contact information, insurance documentation, and banking information for payouts. This information is used to:

• Verify qualifications, identity, and maintain quality and safety standards.
• Conduct and process background checks through Checkr, Inc.
• Verify CPST certification through Safe Kids Worldwide's Organization Management system.
• Verify and monitor professional liability insurance status.
• Display Educator profiles to potential Clients (only approved profile information is publicly visible; sensitive data such as SSN, background check results, and insurance policy details are never displayed).
• Process payments and issue tax documents (1099 forms via Stripe).

11.2 Background Check Data Retention

Background check results are retained for the duration of the Educator's active participation on the Platform plus 3 years, or as required by applicable law, whichever is longer. Educators may request a copy of their background check report directly from Checkr, Inc.

11.3 Insurance Verification Data

Certificates of Insurance, policy numbers, and coverage dates are retained for the duration of the Educator's active participation on the Platform plus 3 years. This data is used solely to verify active coverage and is not shared with Clients or other third parties.

11.4 Educator Reviews

Client reviews of Educators are displayed publicly on Educator profiles. Educators may respond to reviews but cannot request removal of honest reviews.

11.5 Tax Reporting

Stripe may issue IRS Form 1099-NEC to Educators who receive $600 or more in a calendar year, in compliance with federal tax law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on the Platform and, for significant changes, by sending an email notification. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Car Seat Life LLC d/b/a CarSeatLife Email: privacy@carseatlife.com Website: www.carseatlife.com

For privacy-related requests, we will respond within 30 days.

Document version 1.4 • Effective 2026-10-12