Privacy
Cairn is operated by Foodtruck AI LLC, doing business as CMD+RVL. When you text Cairn or enter your number, we store your phone number, the messages exchanged, and the details you give us during setup (your name, what you asked Cairn to watch, and an optional email). If you arrive from a link on one of our own pages, we also keep a short label for that link (for example, the page you came from) and the time you signed up, so we can tell which pages lead people to Cairn. It contains nothing you typed.
If you email Cairn a document or give it names to check, we store those too. If you ask Cairn to check a person or a company, we use the name you send to run that check. If you fill in the form at hirecairn.com, we store your name, firm, email, and what you asked for, along with any report or video you email us.
We use this only to run the service: to set you up, to send you the alerts you asked for, and to answer you. We do not sell or share your phone number or message content with third parties for their marketing. Mobile opt-in data and consent are never shared with third parties.
Documents you send
We keep documents you send so Cairn can answer you and show its sources. We use them only to do the work you asked for and to fix errors in how Cairn handled it. We don't use them to train models. We use AI providers only under terms that do not allow training on what we send them. A KYC check never sends the name to anyone: we download the sanctions and watchlists ourselves and match the name on our own servers. We don't show your documents to other customers.
AI model providers
Our standard providers are Anthropic and TypeSafe AI, Inc., called directly through their APIs. Anthropic processes text and documents to help Cairn answer you. TypeSafe's Jev model classifies, scores, and makes yes/no decisions over short text the platform already holds: catalog metadata such as table names, descriptions, and column lists, and, later, document excerpts. Jev generates no text. KYC names are never sent to Jev or any other AI provider. For paid Hire Cairn engagements, the agreement names the models used.
For the free Text Cairn service only, some small workloads may be handled through OpenRouter and a selected third-party model provider. Relevant message text or document excerpts needed for those tasks may be processed by both. Provider selection remains subject to our commitment not to allow training on what we send. Retention depends on the provider and the terms that apply to the request. See the Text Cairn sub-processors disclosure. This exception does not apply to paid Hire Cairn engagements, which follow the provider terms agreed with the client.
Who sees your information
People at CMD+RVL may read your messages and documents to answer you, check Cairn's work, and fix errors. The companies that process information for us are listed on our sub-processors page. Messages are delivered through Twilio, our SMS provider, which processes them under its own privacy policy. WhatsApp messages also pass through WhatsApp, which is owned by Meta. Signal messages are end-to-end encrypted and pass through Signal. Anthropic keeps what we send it for up to 30 days for safety monitoring, then deletes it; content it flags for a policy violation can be kept longer.
TypeSafe keeps what we send it only as long as necessary to provide the service; it does not train on it. Zero-retention terms are available under an enterprise agreement. TypeSafe does not publish a fixed retention period for standard API accounts. See its privacy policy, data processing addendum, and enterprise retention information.
Website analytics
textcairn.com, hirecairn.com and our sign-up pages load Google Analytics only after you allow it in Analytics settings. Your choice is separate from consent to receive texts. Browser Global Privacy Control and Do Not Track signals keep analytics off. With permission, analytics cookies and an opaque account identifier let us measure visits, completed signup, first SMS, dataset-message delivery, a relevant Hire offer and a recorded inquiry. Message delivery does not mean you opened or read a dataset. We do not send Google your phone number, name, email, messages or dataset references. Google processes this measurement data; we do not use it for advertising personalization.
You can change the choice in Analytics settings on each site. Each site uses browser-held withdrawal tokens to stop future exports for accounts or inquiries linked there. To stop previously linked SMS analytics, use Stop linked SMS analytics. The sign-up site uses its stored token when available; otherwise sign in to confirm the account. Failed withdrawal shows a retry message. Withdrawal stops future linked exports, not events already sent. Previously stopped account measurement is not silently re-enabled by a later website visit.
Keeping and deleting
We keep your information while you use Cairn. Your phone number is also kept in our contact records (our sign-up database and our CRM) so Cairn knows who it is talking to, and it is removed from both on request. Reply STOP at any time to opt out; after that Cairn only answers HELP, and START brings you back. We keep a record of when you agreed to receive texts and the wording you agreed to. Messages Cairn starts are sent between 8am and 9pm your local time, judged from your number's area code; replies to something you just asked are not held. To have your data deleted, email cairn@cmdrvl.com and we will delete your messages, documents, and account details. Backup copies are overwritten on their normal schedule.
Last updated 2026-10-24.