Trust & legal
Privacy policy
What personal data HaveKar handles, why we need it, when it becomes public, and the choices available to you.
Platform facts
1. Scope and who we are
HaveKar is a fully digital, worldwide vehicle marketplace at havekar.com. Private owners and agencies can advertise vehicles, and prospective buyers can discover and contact sellers. HaveKar has no walk-in office and is not a seller, buyer, dealer, inspector, transporter, lender, insurer, or payment agent. This policy covers our website, accounts, listings, communications, and support services.
2. Information we collect
We collect account data (name, email, password hash, verification status, optional phone and profile image, language, and sign-in provider); listing data (vehicle details, price, country, optional city, description, images, features, contact choices, status, and dates); support messages and attachments; and newsletter preferences. We also process session identifiers, verification events and codes, IP address, browser and device details, request and security logs, approximate connection country, selected country, locale, theme, and essential cookie choices.
3. Why we use information
We use data to create and secure accounts, verify email, maintain sessions, publish and manage listings, show country-relevant content, deliver messages, answer support, process deletion, prevent fraud, enforce our Terms, and improve reliability. Depending on local law, the basis is our contract with you, legal obligations, legitimate interests in a safe marketplace, or consent. Consent may be withdrawn at any time without affecting earlier lawful processing.
4. Public and private information
Published listing details, country, optional city, price, description, images, and contact details you choose to show are public and may appear in search engines. Do not place sensitive or unnecessary personal data in a listing. Passwords, protected session records, codes, private support attachments, hidden contact details, and internal security records are not public. Media can be delivered through controlled storage and a content delivery network; a permitted viewer may still save content they can see.
5. Providers and disclosures
We use providers to host and deliver HaveKar, store data and media, send email, measure permitted usage, and support sign-in, including Vercel, Supabase/PostgreSQL, Cloudflare R2/CDN, Resend, our configured email provider through Nodemailer, Google Analytics and Google Tag Manager after optional consent, and Google if you choose Google sign-in. We share only what is needed to provide the service, follow your instructions, investigate abuse, protect people or the platform, comply with valid legal process, or support a business reorganization. We do not sell private account data.
6. Cookies, sessions, and security
Essential cookies include a secure HTTP-only session identifier used to retrieve protected server-side session records, remember language and country, and protect requests. Optional Google Analytics and Google Tag Manager scripts load only after the relevant consent choice, which you can change through Cookie settings. We use hashing, token protection, access controls, controlled media delivery, expiry limits, and monitoring. No online system is perfectly secure: use a unique password, keep codes secret, and report suspected unauthorized access.
7. Retention and deletion
We retain information only as reasonably needed to operate accounts and listings, resolve disputes, prevent repeated abuse, and meet legal, tax, or accounting duties. Verification and password-reset links currently expire after two hours. After secure account deletion, we delete or de-identify associated active data, subject to legal duties, fraud prevention, open disputes, and limited backups. Search caches and copies saved by others may remain outside our control.
8. Service messages and newsletters
We send essential verification, security, support, listing, moderation, renewal, and account messages. Marketing newsletters are separate: where an existing-customer opt-out is lawful we provide a clear refusal option, and where prior consent is required we ask separately. Every marketing email provides an unsubscribe method, also available in account settings when offered. Unsubscribing from marketing does not stop essential service messages.
9. International processing and your rights
HaveKar serves users worldwide and providers may process information outside your country. Where required, we use recognized transfer safeguards. Depending on local law, you may request access, correction, deletion, restriction, objection, portability, consent withdrawal, or complain to a competent authority. We may verify identity and retain information where law permits. Moroccan users may exercise rights under Law 09-08; applicable European rights remain available to users covered by the GDPR.
10. Safety, children, changes, and contact
HaveKar is not intended for children. You must be at least 18 or have the legal capacity required locally. Do not upload another person’s information without authority. We recommend communicating through HaveKar and never sharing financial credentials, identity documents, passwords, or codes. We may update this policy and will show the new date and any material notice required. For a privacy request, identify your account email but never send a password or one-time code.
Privacy questions or requests?
Email us or use the contact page. We may verify that the account belongs to you.
contact@havekar.com