Privacy Policy

1. Introduction

CarChive ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use the Service.

This Privacy Policy complies with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.

2. Information we collect

2.1 Personal information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, password, and profile information
• Dealer Information: Business name, registration details, address, tax information, and payment details
• Vehicle Listings: Vehicle details, specifications, images, pricing, and location information
• Payment Information: Billing address, payment method details (processed securely through payment partners)
• Communication: Messages, inquiries, reviews, and feedback you send to us or other users

2.2 Automatically collected information

When you use the Service, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, searches, and interactions
• Location Data: General location information based on IP address or GPS (with your permission)
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies

2.3 Information from third parties

We may receive information about you from third-party services, including:

• Payment processors (Paystack) for transaction information
• Authentication providers (Supabase) for account verification
• Analytics services for usage statistics
• Social media platforms if you connect your account

3. How we use your information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our Service
• Account Management: To create and manage your account, process transactions, and send notifications
• Communication: To respond to inquiries, send service updates, and provide customer support
• Personalization: To customize your experience and show relevant content
• Analytics: To analyze usage patterns, improve functionality, and develop new features
• Security: To detect, prevent, and address fraud, security issues, and violations
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Marketing: To send promotional communications (with your consent, which you can opt-out of)

4. Information sharing and disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service providers

We share information with trusted third-party service providers who assist us in operating the Service:

• Payment processors (Paystack) for payment processing
• Cloud hosting providers (Supabase) for data storage and hosting
• Email service providers for communications
• Analytics services for usage analysis

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Public information

Certain information is publicly visible on the Service:

• Vehicle listings (including images, specifications, and pricing)
• Dealer business information and profiles
• Public reviews and ratings
• Username and profile information (if made public)

4.3 Legal requirements

We may disclose information if required by law, court order, or government regulation, or to:

• Comply with legal processes or requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

4.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data security

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Encrypted databases and secure cloud infrastructure
• Access Controls: Limited access to personal information on a need-to-know basis
• Authentication: Secure authentication systems and password hashing
• Regular Audits: Security assessments and vulnerability testing

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your rights and choices

Under POPIA and other applicable laws, you have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us at carchiveauto@gmail.com. We will respond to your request within 30 days as required by law.

7. Cookies and tracking technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze usage patterns and improve the Service
• Provide personalized content and advertisements

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

8. Data retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records as required by law

When you delete your account, we will delete or anonymize your personal information, except where retention is required by law or for legitimate business purposes.

9. Children's privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information promptly.

10. International data transfers

Your information may be transferred to and processed in countries other than South Africa, including countries that may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or via email. The "Last Updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact us

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us: