Privacy Policy

1. Data controller

The data controller responsible for your personal data is SIA IO Technology, Latvia. Contact: contact@caralert.lv.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use Car alert at https://car.iotechnology.pro.

2. Personal data we process

Account data: username, password (stored as a secure hash), email address if provided, subscription plan, expiry date, and Stripe customer identifiers.

Usage data: alert rules and criteria, favourite listings, read/unread state, language preference, and last activity timestamp.

Notification data: email address for alerts, Telegram chat ID and bot token (if you configure Telegram), webhook URL (Pro), and browser push subscription keys (if you enable push notifications).

Technical data: session cookies, server logs (IP address, user agent, request time), and cookies stored when previewing SS.LV pages through our proxy.

Payment data: processed by Stripe. We receive payment status, invoice references, and customer IDs, not full card numbers.

3. Purposes and legal bases

We process your data to provide the Service, manage your account, deliver notifications you request, process payments, prevent abuse, and comply with legal obligations.

Legal bases under the GDPR include: (a) performance of a contract (Art. 6(1)(b)) — providing the Service you subscribed to; (b) legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and service improvement; (c) consent (Art. 6(1)(a)) — optional channels such as browser push where required; and (d) legal obligation (Art. 6(1)(c)) — tax and accounting records.

4. Recipients and processors

We use trusted service providers who process data on our behalf, including: Stripe (payments), our hosting and email infrastructure, and Telegram's API when you enable Telegram notifications.

Listing information displayed in the app originates from publicly accessible SS.LV sources. When you open an SS.LV preview, requests may be sent to SS.LV servers.

We do not sell your personal data. We may disclose data if required by law or to protect our rights and users.

5. International transfers

Some providers (e.g. Stripe, Telegram) may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

Account data is kept while your account is active and for a reasonable period afterwards to handle support, disputes, and legal obligations.

Car listings in our database are automatically deleted after approximately 21 days.

Server logs and payment records are retained for periods required by security needs and applicable law (typically up to 7 years for accounting records).

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

You may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.

To exercise your rights, email contact@caralert.lv. We will respond within one month unless the request is complex.

8. Cookies and similar technologies

We use strictly necessary session cookies to keep you logged in and to operate the SS.LV preview proxy. These cookies are required for the Service to function.

If you install the app as a PWA or enable browser notifications, your browser may store additional technical data locally.

We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling session cookies will prevent login.

9. Security

We apply appropriate technical and organisational measures, including HTTPS, hashed passwords, and access controls. No method of transmission over the Internet is 100% secure.

You are responsible for choosing a strong password and securing devices where you stay logged in.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always available at https://car.iotechnology.pro/legal/privacy with the date shown at the top.