This Privacy Policy explains how Cars Bucket ("Cars Bucket", "we", "us") collects, uses, shares, protects and deletes information when you use the Cars Bucket mobile app for Android and iOS and the website at carsbucket.com (together, the "Service").
Cars Bucket is a business-to-business platform for car showrooms and dealers. By creating an account or using the Service you agree to the practices described here. If you do not agree, please do not use the Service.
1. Information we collect
We collect only what is needed to run a verified dealer marketplace. We do not use advertising SDKs, we do not track you across other apps or websites, and we do not sell your information.
Information you give us
| Category | What it includes | Why we need it |
|---|---|---|
| Account details | Name, email address, phone number (optional) and password. Passwords are stored only in hashed form. | To create and secure your account and contact you about it. |
| Business verification | A photo of your business visiting card, and optionally the showroom that referred you and a referral note. | So our team can confirm you are a genuine car business before approving the account. The visiting card is seen only by our admin team and is not shown to other users. |
| Email verification | One-time six-digit codes sent to your email. We store only a hashed copy, which expires shortly after it is issued. | To confirm you own the email address. |
| Showroom profile | Showroom name, phone, WhatsApp number, email, city, area, address, map location (latitude and longitude), description, logo and cover image. | To show your showroom to other dealers and let them contact you. |
| Vehicle listings | Vehicle details, specifications, prices, photos and stock status. | To list your stock on the marketplace. |
| Deals and stock records | Deal requests between showrooms (offered price, commission, messages and status) and stock-out records (reason, buyer showroom or buyer name, sale price and notes). | To run dealer-to-dealer deals and keep your inventory history. |
| Team members | The email or user ID of employees you add to your showroom, and their role. | To give your staff access to your showroom. |
| Customer leads | Details you enter about your own customers: name, phone, WhatsApp number, email and enquiry message. See section 5. | To help you track and follow up enquiries. |
| Support messages | Anything you send when you contact us. | To answer you. |
Information collected automatically
- Log and security data: IP address, device and browser type (user agent), sign-in times and a record of actions taken in your account (for example creating a listing or approving a deal). We use this to keep accounts secure, prevent fraud and resolve disputes.
- Authentication tokens: a token stored on your device that keeps you signed in. It is removed when you sign out or delete your account.
- In-app notifications: notices about deals, leads and approvals that we show inside the app.
We do not collect your contacts, call logs, SMS messages, browsing history or advertising identifier.
2. Device permissions
The app asks for a permission only when you use the feature that needs it. You can refuse or withdraw any permission in your phone settings; the rest of the app keeps working.
- Camera and photos: to take or choose pictures of your visiting card, vehicles, showroom logo and cover image. Only the pictures you pick are uploaded.
- Location (approximate or precise, while using the app): to sort marketplace cars by distance from you, and to pin your showroom on the map if you choose to. Your current location for a "nearest" search is sent with that search only and is not saved to your account. A showroom pin you set is saved as part of your showroom profile.
- Notifications: to alert you about new deal requests, leads and account approval, if you allow them.
3. How we use information
- To create, verify, approve and manage your account.
- To operate the marketplace, deals, leads, inventory and team features.
- To send service emails such as verification codes and account notices. We do not send marketing email without your consent.
- To keep the Service secure, detect abuse and fraud, and enforce our Terms of Service.
- To fix problems and improve the Service.
- To comply with the law and respond to lawful requests.
4. How information is shared
We do not sell, rent or trade your personal information, and we do not share it for advertising.
- Other dealers on Cars Bucket: your showroom profile (name, contact numbers, email, address, map location, logo, description) and your vehicle listings are visible to other approved users of the Service. Deal requests are visible to the two showrooms involved.
- Your own team: employees you add can see your showroom's vehicles, leads and deals according to their role.
- Service providers: companies that host our servers, store files and deliver email for us. They process data only on our instructions and may not use it for their own purposes.
- Legal reasons: when required by law, court order or a government authority, or to protect the rights, safety and property of Cars Bucket, our users or the public.
- Business transfer: if Cars Bucket is merged, acquired or sells its assets, information may transfer to the new owner under this policy.
5. Customer data you enter
When you add a lead, you are entering personal information about your own customer. You are responsible for having a lawful reason to record it and for telling your customer where required. We store and process lead information only to provide the lead features to you and your team; we do not contact your customers or use their details for any other purpose.
6. Security
- All data between the app and our servers is sent over an encrypted HTTPS connection.
- Passwords and email verification codes are stored only as one-way hashes.
- Access is limited by role: only you and your team can manage your showroom, and only our admin team can see verification documents.
- Sign-in and verification requests are rate-limited to block password-guessing.
No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as required by law.
7. Data retention
- Account and showroom data: kept while your account is open.
- Email verification codes: expire within minutes and are deleted when you delete your account.
- After you delete your account: see section 8.
- Server backups: may hold deleted data for a limited period until they are overwritten in the normal backup cycle.
8. Deleting your account
You can delete your account and associated data at any time:
- In the app: open your profile or settings and choose Delete account, then confirm with your password.
- On the web: go to https://carsbucket.com/delete-account, sign in with your email and password, and confirm.
- By email: write to support@carsbucket.com from your registered email address. We will verify your identity and complete the request within 30 days.
What is deleted
- Your name, email address, phone number and password.
- Your visiting card photo, which is removed from our storage.
- Your referral details, notifications, sign-in tokens and verification codes.
- The IP address and device details in your activity history.
- Your team memberships and roles.
- Showrooms you own are closed: their vehicle listings and customer leads are removed from the Service, and their staff lose access.
What is kept
Deal requests and stock-out records that involve another showroom are also part of that other business's records. We keep them, with your personal details removed, so the other dealer's history stays complete. We may also keep limited information where the law requires it or to resolve a dispute or prevent fraud. Deletion is permanent and cannot be undone.
9. Your choices and rights
- Access and correction: you can view and update most of your details in the app. For anything you cannot change yourself, contact us.
- Deletion: as described in section 8.
- Copy of your data: email us to request a copy of the personal information we hold about you.
- Permissions and notifications: turn them off at any time in your phone settings.
Depending on where you live, you may have further rights under local law, such as objecting to certain processing. Contact us to exercise them; we will respond within 30 days.
10. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Where data is stored
Your information is stored on servers operated by our hosting providers, which may be located outside your country. Wherever it is processed, we protect it as described in this policy.
12. Changes to this policy
We may update this policy as the Service changes. We will change the "Last updated" date above, and for significant changes we will tell you in the app or by email before they take effect.
13. Contact us
Questions, requests or complaints about privacy: