Privacy Policy

Information you give us:

• Account: your name, email address and password (stored only as a secure hash).
• If you sign in with Google: the name, email address and profile picture from your Google account, plus the sign-in tokens Google gives us. We use them only to sign you in; we don't access your Google contacts, files or anything else.
• Listings: vehicle details (including the VIN), price, description, photos, and the ZIP code, city and state where the vehicle is located.
• Messages: when you contact a seller, your message and the phone number you choose to add.
• Reports and support requests you send us.

Information collected automatically:

• Your IP address and browser type, used for security, abuse prevention and rate limiting.
• Cookies that keep you signed in and remember your language. We don't use advertising or third-party tracking cookies.
• If you use "Use my location", your device's location is used once to find the nearest ZIP code. We don't store it.

• To run the Service: publish listings, show search results by location, deliver messages between buyers and sellers, and send account emails (verification and password reset).
• To keep the Service safe: prevent fraud, spam and abuse, review reported listings, and enforce our Terms.
• To get vehicle history information for a listing's VIN from data providers.
• To comply with the law and respond to lawful requests.

Listings are public, including their photos, VIN, approximate location (ZIP code, city and state) and the seller's display name. Search engines can index them. Don't put personal contact details in a listing's description or photos.

Sellers' email addresses are never shown on the Service. When a buyer sends a message, the seller receives the buyer's name, email address, optional phone number and message so they can reply directly.

We share personal information only:

• between buyers and sellers, as described above;
• with service providers that process it for us: hosting and database, photo storage, email delivery, sign-in with Google (if you choose it) and vehicle history data providers (which receive the VIN, not your contact details);
• when required by law, or to protect the rights, property or safety of our users, the public or CarHyve;
• as part of a merger, acquisition or sale of assets, subject to this Policy.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

We keep account information while your account is open. Listings and messages are kept while your account exists, unless you delete them sooner. Security logs and rate-limit records are short-lived. After you close your account, we delete or anonymize your information within a reasonable period, except what we must keep for legal reasons.

You can edit or delete your listings from your account at any time. You can also ask us to:

• tell you what personal information we have about you and give you a copy;
• correct information that's inaccurate;
• delete your account and personal information.

Send the request from your account's email address to support@web.carhyve.cloud. We'll verify it and answer within 45 days. Depending on your state (for example California, under the CCPA/CPRA), you may have these rights by law; we won't treat you differently for using them.

We use encryption in transit (HTTPS), hashed passwords and access controls. No system is completely secure, so please use a unique password for CarHyve.

The Service is not for anyone under 18, and we don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.

We may update this Policy. If a change is material, we'll give notice on the Service or by email before it takes effect.

Privacy questions and requests: support@web.carhyve.cloud.