Privacy Policy

Last updated: May 2, 2026

This Privacy Policy explains how CarCRM ("we", "us", or "our") collects, uses, and protects information about you when you use our services.

Controller: Sole proprietor Semenov Ruslan Oleksiiovych Contact: [email protected]

1. Information We Collect

We collect information you provide directly, including:

• Account information — name, email address, password (hashed), company details
• Dealer profile data — business name, address, phone number, website, and social media links
• Vehicle and inventory data — car listings, pricing, photos, and related business records
• Client data — contact information for clients entered by dealer users
• Communication data — messages sent through our contact or inquiry forms

We also automatically collect:

• Usage data — pages visited, features used, session duration
• Technical data — IP address, browser type, device information, referring URL
• Cookies — session and preference cookies (see Section 6)

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the CarCRM platform
• Process your registration and manage your account
• Send transactional emails (account confirmation, password reset, notifications)
• Respond to inquiries and support requests
• Improve and develop our services
• Comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers — third-party vendors who help operate our platform (email delivery, file storage, hosting), bound by confidentiality agreements
• Legal requirements — if required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with advance notice to affected users

4. Data Retention

We retain your personal data for as long as your account is active. After account termination:

• Account and profile data is deleted within 30 days
• Business records (cars, clients, transactions) may be retained for up to 3 years for legal and accounting purposes
• Backup copies may persist for up to 90 days after deletion

5. Your Rights

Under applicable data protection law (including GDPR where applicable), you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Cookies

We use essential cookies required for the platform to function (authentication sessions, language preferences). We do not use advertising or tracking cookies from third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (HTTPS), hashed passwords, and access controls. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. International Transfers

Our servers are located in the European Union. If you access CarCRM from outside the EU/EEA, your data may be transferred to and processed in EU-based infrastructure. Such transfers comply with applicable data protection regulations.

9. Children's Privacy

CarCRM is a business-to-business service not directed at children under 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-app notification at least 14 days before they take effect.

11. Contact

For privacy-related questions or requests:

Sole proprietor Semenov Ruslan Oleksiiovych Email: [email protected]

This policy is governed by the laws of Ukraine.

Developed by Vialan