Data Deletion and Platform Disconnection

1. Disconnecting YouTube

An authorized dealer user may disconnect YouTube from the Dealer Connections section of the CARF portal.

When YouTube is disconnected directly through CARF:

• CARF immediately stops using the connected authorization.
• The stored authorization is deactivated so that it can no longer be used to reach the channel, the connection is disabled, and the saved channel association is cleared.
• Videos already uploaded to YouTube remain in the YouTube account unless they are separately deleted through YouTube.

Users may also revoke CARF’s access directly through their Google Account permissions page, which immediately ends CARF’s ability to access the connected channel:

• https://security.google.com/settings/security/permissions

To have the YouTube API information CARF holds deleted from CARF’s records, send a deletion request as described in section 3 below. CARF will delete that information after verifying the request.

2. Disconnecting Meta or Facebook

A dealership may have its Facebook or Meta connection disconnected by sending a request to CARF as described in section 3 below, using the subject line CARF Data Deletion Request or CARF Disconnect Request.

When the connection is disconnected:

• CARF stops using the applicable Page access token.
• CARF stops receiving new messages for that connection once Meta stops delivering the events.
• Platform Data that CARF is no longer legally or operationally required to retain will be deleted promptly.

A Page administrator may also remove CARF as an application or business integration directly through their Facebook or Meta account settings, which stops Meta from delivering further events to CARF.

Removing CARF does not automatically delete messages, listings, posts, advertisements, leads, or other information retained by Meta, Facebook, the connected dealership, or another recipient.

3. Requesting Deletion from CARF

To request deletion, email credit@carfii.com using the subject:

CARF Data Deletion Request

Include:

• Your name.
• The email associated with the CARF account or inquiry.
• The dealership or Facebook Page involved, if applicable.
• Whether the request relates to CARF, Google/YouTube, Meta/Facebook, or all services.
• Enough information to identify the applicable record.

CARF may request reasonable information to confirm identity and authority before deleting information.

After verification, CARF will process the request as soon as reasonably possible. YouTube API data subject to a direct deletion request will be deleted within the applicable YouTube policy period.

CARF may retain information where required by law, necessary to prevent fraud or abuse, required to complete a transaction, or needed to establish, exercise, or defend a legal claim.

If you would prefer help submitting a request by telephone, you can reach CARF at 905.660.2900 or toll free at 1.866.419.5959.

4. What CARF Deletion Does Not Delete

Deleting information held by CARF does not automatically delete information held by another organization.

For example:

• Videos uploaded to YouTube must be deleted through YouTube.
• Facebook or Messenger messages may remain in the accounts of the sender, recipient, dealership, or Meta.
• Dealer records may remain where the dealership has an independent legal reason to retain them.
• Transaction or accounting information may remain where required by law.

5. Confirmation

Where appropriate, CARF will confirm that a verified deletion request has been completed or explain any information that must legally be retained.

Canadian Automotive Reality Financial Inc.
CARF Dealer Intelligence
Email: credit@carfii.com