Privacy Policy

CarWorld is operated by The Up Capital Ltd. We are the data controller for information collected through carworld.autos. For questions about your data, contact us at privacy@carworld.autos.

Sellers:

• Name, email address, phone number
• Government ID type and last 4 digits (Emirates ID or Canadian driver's license) for verification
• Vehicle photos, descriptions, and listing details
• Payment information (processed and stored by Stripe, not by us)

Buyers:

• Search queries and browsing activity on CarWorld
• Saved searches and vehicle saves
• Reservation details and contact information when making an offer

Dealers:

• Business name, contact details, trade license information
• Account credentials (passwords are hashed, never stored in plain text)
• Showroom inventory and performance analytics

All users:

• IP address, browser type, device information
• Pages visited, timestamps, and interactions with the platform

• To operate the marketplace: display listings, match buyers with sellers, process payments
• To verify identity: confirming seller legitimacy using partial government ID
• To power AI features: photo inspection, price estimation, description generation, and buyer matching
• To communicate: listing updates, transaction notifications, and support
• To improve the platform: usage analytics, performance monitoring, and bug fixes
• To prevent fraud: detecting fake listings, suspicious activity, and abuse

Vehicle photos and listing details are processed by AI systems (powered by third-party providers including Anthropic) to generate descriptions, classify photos, estimate prices, and detect potential fraud. These AI systems process your data to provide their output but do not retain it for training purposes. AI-generated content is clearly labeled on the platform.

• Stripe for payment processing. See Stripe's privacy policy.
• Vercel for hosting and content delivery.
• Neon for database hosting (data stored in AWS regions).
• Anthropic for AI-powered features (photo analysis, text generation).
• Other users: your listing details (photos, car info, city, asking price) are visible to all visitors. Your full name, email, phone, and ID details are never shown to buyers.

We do not sell your personal data. We do not share it with advertisers. We only share data with third parties as described above to operate the platform.

Your data is stored on servers in the United States (via Neon/AWS and Vercel). We protect it with HTTPS encryption in transit, hashed passwords (bcrypt), signed session tokens (JWT), CSRF protection, and rate limiting. No system is perfectly secure, but we take reasonable measures to protect your information.

• Active accounts and listings: retained as long as your account is active
• Closed listings: retained for 12 months for dispute resolution, then anonymized
• Deleted accounts: personal data removed within 30 days, anonymized transaction records kept for legal compliance
• Server logs: retained for 90 days

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to processing of your data for specific purposes

To exercise any of these rights, email privacy@carworld.autos. We will respond within 30 days.

CarWorld uses essential cookies only: a session cookie for seller/dealer login (cw_session) and a region preference cookie (cw-region). We do not use tracking cookies, advertising cookies, or third-party analytics that track you across sites.

CarWorld is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

If you are in the UAE, your data may be transferred to the United States for processing and storage. By using CarWorld, you consent to this transfer. We rely on our service providers' data protection practices and contractual safeguards.

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. The "last updated" date at the top reflects the most recent revision.

For privacy questions or data requests: privacy@carworld.autos