Privacy Policy

1. Data We Collect

• Account information: Name, email address, password (hashed)
• Payment information: Processed via Stripe; we do not store credit card data
• Technical information: IP address, browser type, access logs via Cloudflare
• Content: Vehicle listings, images, and descriptions you upload
• Usage data: Pages visited, search queries, interaction patterns

2. Purpose of Processing

We process personal data to:

• Provide access to the platform and display listings
• Process payments securely through our payment processor
• Prevent fraud and ensure platform security
• Communicate with you regarding support requests
• Improve our services and user experience
• Comply with legal obligations

3. Legal Basis (GDPR)

Data is processed based on:

• Contract performance: To provide our services
• Legal obligations: Tax reporting, fraud prevention
• Legitimate interests: Platform security, service improvement
• Consent: For optional communications and analytics

4. Data Sharing

We may share your data with:

• Stripe: For secure payment processing
• Cloudflare: For security and content delivery
• Supabase: For secure data storage and authentication
• Law enforcement: When required by law

We do not sell or share your personal data with advertisers or third parties for marketing purposes.

5. Cookies and Analytics

We use only functional and technical cookies necessary for the operation of the website. We do not use advertising or tracking cookies. For more information, see our Cookies Policy.

6. Data Storage & Security

Your data is stored in secure systems within the European Union. We implement reasonable technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Limit processing of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at: support@carlynx.us

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is deleted within 30 days of account closure, unless retention is required for legal compliance.

9. Contact & Data Protection Officer

For privacy inquiries or to exercise your rights, contact our Data Protection Officer at: support@carlynx.us