Privacy policy

Who we are

Car Auction Data (carauctiondata.com) is run by a private individual based in Lithuania, who is the controller of the personal data described here. For privacy questions or any other inquiry, contact admin@carauctiondata.com. Where the law requires it, we will give our full identity on request.

What we collect

• Account details: your email address and, if you set one, your password. Passwords are stored only in hashed form by our authentication provider.
• What you create: the vehicles you choose for reports and monitors, the lot links, lot numbers or VINs you paste into the price calculator, and the saved results.
• Usage limits: how many free reports you have used each day, so we can apply the daily allowance.
• Emails we send: a record of which service emails we sent you and when, so you don’t get duplicates.
• Security data: when you sign up, sign in, reset your password, or submit a report, monitor or estimate, Cloudflare Turnstile checks that you are a person. For reports, monitors and estimates we also turn your IP address into a one-way code to apply rate limits. We do not store the IP address itself.
• Visit statistics: we count page views with Vercel Web Analytics, which records the page, the site you came from, your country, and your browser and device type. It uses no cookies and doesn’t identify you. We remove private links and codes from page addresses before they are counted.
• Telegram (only if you connect it): your Telegram chat ID, so we can send you alerts.
• Error reports: technical details when something breaks. We set these up to exclude your account details, cookies and request contents.

Why we use it

• To provide the service you signed up for: your account, reports, monitors, estimates and service emails. Legal basis: performing our contract with you.
• To keep the service secure and fair: bot checks, rate limits and error monitoring. Legal basis: our legitimate interest in preventing abuse and keeping the site working.
• To understand how the site is used: counting visits and which pages and links bring people here, in anonymous totals. Legal basis: our legitimate interest in improving the service.
• Marketing emails: we only send them if you separately opt in, and you can unsubscribe at any time. Legal basis: your consent.

We do not sell your data and we do not use it for advertising. We do not make automated decisions about you that have legal or similarly significant effects.

Who we share it with

We use trusted providers to run the service. They process data only on our instructions:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting and cookie-free visit statistics.
• Trigger.dev: background jobs that build reports, monitors and estimates.
• Resend: service emails.
• Cloudflare: security checks (Turnstile) and domain services.
• Sentry: error monitoring.
• Telegram: alerts, only if you connect it.
• Plotly’s content network: loads the chart software on report pages, which means it receives your IP address like any website request.

Our auction data provider receives the vehicle searches, lot numbers and VINs needed to fetch auction records. It does not receive your name or email address.

International transfers

Some of these providers are based in, or use servers in, the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses, as set out in each provider’s data processing terms. Our website’s server code runs on Vercel servers in Frankfurt, Germany (EU), but Vercel is a US company and delivers pages through a worldwide network.

How long we keep it

• Your account and everything saved in it: for as long as the account exists.
• After you ask us to delete your account: removed within 30 days.
• Monitors: deleted 30 days after they end.
• Security codes used for rate limits: 30 days.
• Backups: we don’t keep separate backups, so data we delete is gone straight away.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

To use any of these rights, email admin@carauctiondata.com from the address on your account. We reply within one month.

You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or the data protection authority where you live.

Age

Car Auction Data is for people aged 18 and over. We do not knowingly collect data from anyone younger.

Changes to this policy

If we change this policy we will update the date at the top. For important changes we will also email you before they take effect.