Privacy Policy

1. Information we collect

Business account information: business name, contact name, work email, phone, city/state, and the categories you serve. Authentication is handled by Firebase Authentication; we store a session cookie to keep you signed in.

Billing information: subscriptions are processed by Stripe. Card details go directly to Stripe — we never see or store full card numbers. We keep your Stripe customer reference, subscription status, and renewal date.

Activity: bids you place, listings you view, contact-form messages, and basic technical logs (IP, browser, timestamps) used for security and debugging.

2. Consumer listing data you access

Listings shown in the marketplace contain information provided by car owners through the CarTek app — vehicle details, documents, photos, and approximate location. This data is shared with subscribed businesses for the sole purpose of making offers, under confidentiality obligations described in our Terms of Service. Consumers’ direct contact details are withheld until an owner accepts an offer.

3. How we use your information

To operate the marketplace: authenticate you, gate access by subscription, deliver listings, transmit your bids, and notify car owners of your offers (by push notification and email).

To run the business: billing through Stripe, support, service announcements, abuse prevention, and improving the product. We do not sell your personal information.

4. Sharing

With car owners: when you bid, the owner sees your business name, offer amount, and message. With service providers who operate the platform on our behalf: Stripe (payments), Google Firebase (authentication, database, hosting infrastructure), and our email/notification providers. With authorities when the law requires it, and as part of a business transfer (merger, acquisition) with notice.

5. Cookies and sessions

We use an essential, httpOnly session cookie to keep you signed in. We do not run third-party advertising trackers on this site.

6. Retention and security

We retain account and billing records while your account exists and as required for legal and accounting purposes. We use industry-standard safeguards (encrypted transport, server-side access controls, least-privilege credentials). No system is perfectly secure, and we cannot guarantee absolute security.

7. Your choices and rights

You can update your business profile in Account, cancel your subscription anytime via Manage subscription, and request a copy or deletion of your account data through the contact form. Depending on where you operate, you may have additional rights (e.g., under state privacy laws) — contact us and we’ll honor applicable requests.

8. Changes

We will update this policy as the Service evolves and revise the “last updated” date above. Material changes will be communicated before they take effect.