Privacy Policy

1. Who We Are

Cars4k, [TBD: registered address], is the operator of this service (the "data controller"). For privacy questions, contact us at privacy@cars4k.com.

2. Data We Collect

• Account data — your email address, password (stored only as a secure hash by our authentication provider), and any display name you provide.
• Billing data — your subscription plan and status, and a payment-provider customer reference. Card and payment details are collected and stored by Stripe, not by Cars4k; we do not see or store your full card number.
• Usage data — your downloads, license certificates, favorites, and collections, so we can provide the service and enforce plan allowances.
• Technical data — device and browser information, and log data. Where we record IP-derived information (for example, for abuse prevention), we do not store raw IP addresses: they are hashed with a daily-rotating salt so the original address cannot be recovered.
• Analytics data — how you interact with the platform, collected through our analytics provider to understand and improve the product.
• Communications — messages you send us and records of transactional emails we send you.

3. How We Use Your Data

• To create and operate your account and provide the platform.
• To process subscriptions and single-clip purchases, and to issue license certificates.
• To enforce plan scopes, download allowances, and these policies, and to prevent fraud and abuse.
• To send transactional and service messages (e.g. sign-up confirmation, password reset, billing notices).
• To understand usage and improve the product, its content, and its performance.
• To comply with legal obligations and enforce our agreements.

4. Legal Bases (where applicable)

Where data-protection law such as the GDPR applies, we rely on: performance of a contract (to provide the service you sign up for); legitimate interests (to secure, maintain, and improve the platform and prevent abuse); consent (for non-essential analytics/cookies, where required); and legal obligation (e.g. tax and accounting records).

5. Sharing and Processors

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and where required by law. Our main processors are:

• Supabase — authentication and application database (account and usage data).
• Stripe — payment processing, subscriptions, and tax (billing data).
• Backblaze B2 and Cloudflare R2 — storage of media files and previews.
• Bunny Stream — video streaming and delivery.
• Upstash Redis — job queue and caching.
• Meilisearch — search indexing (catalog data).
• Resend — transactional and lifecycle email.
• Sentry — error monitoring; PostHog — product analytics.
• Vercel — application hosting and delivery.

We may also disclose data to comply with legal process, enforce our agreements, or protect the rights, safety, and security of Cars4k and its users, and to a successor in the event of a merger, acquisition, or asset sale.

6. Cookies and Similar Technologies

We use cookies and similar technologies that are necessary to run the platform (e.g. to keep you signed in) and, subject to your choices where required, to measure and improve the product. You can control non-essential cookies through your browser or any consent tool we provide.

7. Data Retention

We keep your data for as long as your account is active and as needed to provide the service. After account closure, we retain what we must for legal, tax, accounting, and dispute-handling purposes, and otherwise delete or anonymize it. Hashed technical data is retained only for as long as needed for security and abuse prevention.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Correct inaccurate data or complete incomplete data.
• Delete your data (subject to legal retention obligations).
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Request portability of data you provided to us.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, contact us at privacy@cars4k.com. You can update or delete much of your account information directly from your account.

9. Security

We use technical and organizational measures to protect your data, including encryption in transit, access controls, hashed passwords, hashed IP handling, and signed, short-lived URLs for media downloads. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

11. Children

Cars4k is not directed to children and is intended for users 18 and older. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy. We will post the updated version with a new "last updated" date and, for material changes, provide additional notice as appropriate.

13. Contact

Privacy questions or requests: privacy@cars4k.com. Postal address: [TBD: registered address].