How Carrot in a Box handles your data: the short version is that your data is never sold. Load the page to read the full policy.