Privacy Policy
Last updated: 2026-01-03
Introduction
Car Spy ("we", "us", "our") operates the website carspy.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
Data We Collect
Data from Website Usage
- Search queries and filters you use
- Pages you visit and time spent
- Device information (browser type, operating system)
- IP address and approximate location
- Cookies and similar tracking technologies
Data from Social Media (Instagram, Facebook)
When you contact us through Instagram Direct or Facebook Messenger:
- Your Instagram/Facebook user ID
- Profile name and avatar
- Content of messages you send us
- Technical metadata (message timestamps, read status)
- Advertising source information (if you came from an ad)
Account Data
If you create an account:
- Email address
- Password (encrypted)
- Notification preferences
- Saved searches and favorites
How We Use Your Data
- To provide and maintain our Service
- To respond to your inquiries about vehicles
- To improve and personalize your experience
- To send notifications about price changes (if subscribed)
- To analyze usage patterns and improve our Service
- To detect and prevent fraud or abuse
Legal Basis for Processing
Consent
When you contact us via social media or subscribe to notifications
Legitimate Interest
To improve our Service and ensure security
Contract Performance
To provide services you requested
Data Storage and Security
Your data is stored on secure servers provided by Supabase (EU/US regions) and Vercel. We implement industry-standard security measures including: - Encryption in transit (HTTPS/TLS) - Encryption at rest - Access controls and authentication - Regular security audits
Retention Period
- Website analytics: 26 months
- Social media messages: 12 months or until deletion request
- Account data: Until account deletion
- Cookies: See Cookie section below
Data Sharing
We do not sell your personal data. We may share data with:
Your Rights
Under Ukrainian law and GDPR (where applicable), you have the right to:
Access
Request a copy of your personal data
Rectification
Correct inaccurate personal data
Erasure
Request deletion of your personal data
Portability
Receive your data in a portable format
Object
Object to processing based on legitimate interest
Withdraw Consent
Withdraw consent at any time
To exercise these rights, contact us at d7@ukr.net or disconnect the app in your Instagram/Facebook settings.
Cookies
We use cookies and similar technologies:
| Type | Description | Duration |
|---|---|---|
| Essential | Required for the website to function | Session |
| Preferences | Remember your settings (language, currency) | 1 year |
| Analytics | Understand how you use our website | 26 months |
You can manage cookies through your browser settings. Disabling essential cookies may affect website functionality.
Children's Privacy
Our Service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or your personal data, contact us:
Email: d7@ukr.net
Car Spy Ukraine