Privacy Policy

Last updated: July 29, 2025

Carapis ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when you interact with our platform.

This policy applies only to data we collect from our users (clients). It does not apply to any personal data that may be present in third-party sources we process for analytical purposes.

1. Data We Collect

We collect the following categories of personal data from users of our platform:

Identity Information: Full name, email address, company name, job title.
Account Details: Login credentials, usage logs, IP address, browser/device data.
Billing Information: Payment method (via secure third-party providers), billing address.
Communication Data: Messages or inquiries sent to us, support tickets.

We do not knowingly collect personal data about individuals whose information may appear in automotive marketplace listings or third-party websites.

2. How We Collect It

We collect personal data through:

Direct input (account registration, contact forms)
Automated tracking (cookies, server logs)
Third-party providers (e.g., payment processors, analytics tools)

All collected data is used in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

3. How We Use Your Data

We use your information for the following purposes:

To provide and maintain access to our services.
To manage your account, billing, and customer support.
To improve our platform and analyze usage trends.
To communicate service updates, legal notices, and relevant offers.
To prevent fraud, abuse, or security threats.

We rely on the following legal bases (where applicable under GDPR):

Contractual necessity (e.g., to provide services),
Legitimate interest (e.g., security, analytics),
Consent (e.g., for marketing, where required).

4. Data Sharing and Disclosure

We do not sell your personal data.

We may share limited data with trusted third parties solely for the following purposes:

Payment processing (e.g., Stripe, PayPal)
Infrastructure hosting (e.g., AWS, Vercel)
Analytics and diagnostics (e.g., Plausible, Sentry)
Legal compliance or to respond to lawful requests by authorities

All third parties are contractually bound to process your data securely and in compliance with applicable laws.

5. Data Security

We take reasonable administrative, technical, and physical precautions to protect your information from loss, misuse, or unauthorized access.

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as necessary to:

Provide services to you,
Fulfill legal and regulatory obligations,
Resolve disputes, or
Enforce our agreements.

Once no longer needed, your personal data is securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have the following rights:

Access to the personal data we hold about you.
Correction of inaccurate or incomplete information.
Deletion of your personal data.
Objection to certain processing activities.
Portability of your data.
Opt-out of marketing communications.

To exercise your rights, contact us at privacy@carapis.com.

8. Cookies and Tracking

We use minimal cookies and tracking tools only for essential site functionality and anonymized analytics. No third-party advertising trackers are used.

You may control cookies through your browser settings.

9. Scraped Data Disclaimer

Carapis collects and processes aggregated automotive data from public and commercial sources. While our systems are designed to avoid personal data, we cannot guarantee the complete absence of personally identifiable information (PII) in source content.

We take commercially reasonable steps to anonymize or pseudonymize any such data during processing. We do not process or retain such data for profiling or marketing.

This Privacy Policy does not apply to individuals whose data may be incidentally present in scraped third-party content. Such individuals should contact the original data provider directly.

10. Clients' Responsibilities

If you use Carapis data in a way that involves processing third-party personal data (e.g., combining it with your own systems), you are solely responsible for:

Ensuring appropriate legal basis for such processing,
Complying with applicable privacy laws,
Providing adequate notices and obtaining consents from your own users.

Carapis disclaims all liability for privacy obligations arising from your downstream use of the data.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top reflects the current version. We encourage you to review this page regularly.

Significant changes will be communicated via email or in-app notice where appropriate.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data rights, please contact:

Email: privacy@carapis.com