Privacy policy

1.What we collect

• Account details: your email, and your name, phone number, country and account type if you add them.
• Yard pages: name, logo, photos, contact links, address and map location.
• Listings: the car's photos, specifications, price, VIN and location.
• Viewings: the time you choose, your notes, and your phone number, which the other party sees.
• Reviews, reports, favorites and messages you send us.
• Verification documents you upload, such as an ID or trade licence.
• Necessary technical data: cookies that keep you signed in and remember your language, and technical logs that protect the service.

2.How we use it

• To run the service: creating your account, showing your listings and managing viewings.
• To send necessary emails: your sign-in link, viewing notifications and reminders, and replies to your messages.
• To build trust: decoding VINs, calculating the trust score, and keeping odometer and price readings for each VIN to detect tampering.
• To draft your listing with AI from your photos when you ask for it.
• To review reports and verification requests and to prevent fraud.

3.What others see

• Listings and yard pages are public.
• For individual sellers, the car's location on the map is approximate; the exact place is shown only to a buyer once their viewing is confirmed.
• VINs are shown partly masked.
• When you book a viewing, the seller sees your name and phone number, and you see the seller's contact details.
• Sellers never learn who reported their listing, and only our review team sees verification documents.

4.Service providers

We use trusted companies to run the service; they process data only on our behalf:

• Supabase: database, storage and sign-in, on servers in the European Union.
• Vercel: website hosting.
• Cloudflare: AI processing of car photos to draft listings.
• Resend: sending emails.
• OpenFreeMap: the site's maps; it receives your IP address when a map loads.
• NHTSA (the US National Highway Traffic Safety Administration): VIN decoding; we send it the VIN only.

We may disclose data where the law requires it, or to protect users from fraud.

5.Advertising and cookies

Today we only use necessary cookies. When we add advertising (such as Google AdSense on the website and AdMob in the apps), ad companies may use cookies or device identifiers; we'll update this policy and ask for your consent where the law requires it.

6.Retention and deletion

We keep your data while your account exists. You can delete your account at any time from “My account”, and we delete your profile, yards, listings, photos, viewings and documents.

We keep only the odometer and price readings linked to VINs, with nothing that identifies you, because they protect buyers from odometer fraud.

7.Your rights

• See and correct your data from “My account”.
• Delete your account and your data.
• Ask us for a copy of your data, or object to how it's processed, by writing to us.

8.Security

We protect data with encryption in transit and with fine-grained permissions that stop any user from reaching anyone else's data; verification documents are kept in private storage. No system is perfectly secure, so keep your email account safe.

9.Children

The service is for people aged 18 and over, and we don't knowingly collect children's data.

10.Changes and contact

We may update this policy and will publish the new version here with its date. For any question about your privacy, write to us from the Contact us page.