1. Information you provide
We collect account and profile details such as your name, email, optional phone number, selected area, address, profile photo, language and preferences. Passwords are stored as hashes, not readable passwords. Where social sign-in is available and you choose it, we receive the identity and permitted profile details supplied by that provider.
We also collect information you submit in vehicle listings and uploads, favourites, saved searches, messages, offers, quotation requests, appointments, reviews, reports, support enquiries and consent choices. Showroom, corporate rental and advertising services may require business contacts, authorisation or verification documents, quotations, contracts, campaign materials and related records. Only provide information you have authority to share.
2. Usage and technical information
When the website or app connects to our servers, we process technical information such as IP address, request and authentication records, browser or app context and security logs. Searches and interactions may be recorded, including account-linked searches when signed in. These records help operate the marketplace, prevent abuse and produce service reports.
A selected division, district or area and coordinates you enter for a listing are location information you provide. The current mobile app does not read device GPS or collect background location. An exact listing map is optional; the map visibility you select determines what other users can see.
3. Photos, device access and local storage
The app uses the system photo picker or camera when you choose to upload a profile photo, vehicle photo or private document. It uploads the items you choose for that purpose; it does not read your contacts, calendar, microphone recordings or entire photo library. Public vehicle images are processed for display; profile photos remain account-facing and listing documents are access-controlled.
The app stores its sign-in token in device secure storage, account information and preferences locally, and a cache of listing photos. Signing out clears the token, stored account and listing-photo cache. The current app contains no analytics, advertising, attribution or crash-reporting SDK and does not collect an advertising ID. New integrations that change data handling will require updated disclosures and permissions or consent where applicable.
4. Why we use information
We use information to authenticate and secure accounts, publish and manage listings, power search and recommendations, maintain saved activity, deliver messages and notifications, arrange offers and visits, operate showroom and rental services, fulfil paid services, respond to support, moderate content and prevent fraud.
We also use relevant records to reconcile payments, manage disputes, comply with legal obligations and evaluate service performance. Where applicable, processing relies on providing the service you request, contractual or legal obligations, security and other lawful interests, or your consent. Optional marketing and tracking choices are separate from accepting the Terms.
5. What other users and the public can see
Published listings and showroom pages expose the information intended for public display, including vehicle details, photos, price, selected location, business identity and enabled contact options. Visibility of a seller phone number or exact location depends on the relevant settings. Search engines or other visitors may copy public content.
Messages and information you submit in an offer, quotation request or appointment are shared with the intended recipient and authorised showroom team where needed. A test-drive contact phone is released according to the appointment workflow. Private uploads are accessible only to authorised participants or staff under the applicable access rules. Avoid putting identity numbers, home details, passwords or banking secrets in public fields.
6. Cookies, advertising and marketing choices
The website uses essential cookies or storage for authentication, security and preferences. Optional analytics, advertising personalisation and campaign measurement are controlled through Privacy choices in the website footer. You can choose Essential only, or withdraw optional consent later, without losing ordinary marketplace access.
Where enabled and consented, website campaign measurement may send conversion information to Meta, and advertising integrations may receive the technical information needed for their permitted operation. Declining optional tracking does not necessarily remove contextual sponsored placements. The current mobile app has no advertising or tracking SDK and sends no Meta conversion events.
Marketing email and other optional promotional channels depend on the applicable consent choices. Use the unsubscribe link or contact us to opt out. Essential security, account and transaction notices may still be sent. See the Cookie notice for website storage choices.
7. Service providers and other disclosures
We do not sell personal information. We disclose relevant information to providers that support hosting, storage, security, email or SMS delivery, payments and enabled integrations, only as needed for those services and subject to applicable safeguards. Other users receive the information needed for the interactions you initiate, as explained above.
We may disclose records when required by law or a valid legal process, to investigate fraud or threats, protect rights and safety, or manage a business transfer with appropriate protection. We do not give advertisers access to private conversations or account exports. Advertising and marketing reports use aggregate and cohort controls rather than exposing individual customer records.
8. Payments and third-party links
If you buy a CarzLync service on the website, the selected gateway, bank or payment provider processes the payment details under its own privacy notice. We retain relevant order, amount, currency, transaction reference, payment status, receipt, refund and dispute records. Do not send card numbers, security codes, PINs or OTPs to support or another user. The current mobile app does not accept payments.
External maps, social sign-in, payment pages and third-party links are operated by their providers. Opening them may disclose technical information to that provider. Their privacy practices apply to their own services, so review their notices before sharing information.
9. Security and international processing
We take reasonable technical and organisational measures to protect information, including access controls, password hashing, protected authentication, HTTPS for production traffic and restricted access to private uploads and exports. No system is completely secure. Protect your device and credentials and contact us about suspected compromise.
Service providers may process or store information in Bangladesh or other countries. Where cross-border processing occurs, we apply the safeguards required by applicable law. This Policy does not promise that all information is stored only in Bangladesh.
10. Retention and account deletion
We retain information for the service purpose and any applicable legal, accounting, contractual, safety or dispute requirement. You can request account closure in the app or on the website. Eligible requests have a cooling-off period shown in the privacy workspace, seven days by default, followed by processing in the scheduled privacy run. Requests with retention holds require review and take longer.
On completed closure, direct profile identifiers are removed or replaced, the profile photo and private listing documents are deleted, public listings and owned business profiles are withdrawn, sessions and tokens are revoked, and saved activity and outstanding exports are removed. Shared conversations, soft-deleted listing records and media, consent history, audit, safety, payment and contractual evidence may remain where needed; account identity is pseudonymised but content may still contain information you submitted.
Retained records are not all subject to the cooling-off deadline. Their duration depends on the specific obligation or unresolved matter; contact us for information about a particular record or to request removal of personal information within retained content. An account export expires after the period shown when it is prepared, seven days by default. Backups and copies held independently by recipients or search engines are not erased immediately by account closure. See Account & Data Deletion for full instructions and exceptions.
11. Your choices and requests
You can correct profile information, manage listings and saved activity, change available notification or marketing preferences, and request a private account export or account closure through Privacy & account data. You may also contact us to request access, correction, deletion of particular data, consent withdrawal or other rights available under applicable law.
We may verify ownership before responding and may explain an applicable exception or retention requirement. Never send a password or one-time code. If you cannot sign in, use password recovery or the support contact below. Uninstalling the app or disconnecting a social provider does not delete your CarzLync account.
12. Children, changes and privacy contact
CarzLync account services are intended for people aged 18 or over. We do not knowingly seek personal information from children. Contact us if you believe a child has submitted personal information so we can review and take appropriate action.
We update this Policy when our services or data practices change. The date above identifies this revision; we provide further notice or seek consent where required. For questions, complaints or privacy requests, contact CarzLync using the details below with the subject Privacy Request - CarzLync. You may also raise a complaint with an authority competent under applicable law.
