Privacy Policy
1. What we collect
Your email address and password (stored securely by our authentication provider, never in plain text); the details, photos, and location you include in a listing; messages you send through our in-app messaging; your saved searches and favourited listings; and, before you can publish a listing, a photo ID document. We also use Google Analytics and Microsoft Clarity to see how the site is used and to spot and fix usability problems — Clarity may record how you move around and interact with a page (clicks, scrolling, session replays), and masks text typed into form fields by default. “Recently viewed” vehicles are stored only in your own browser and are never sent to us or linked to your account. Once payments are live, Stripe will process your payment details directly — we never receive or store your full card number.
2. Why we collect it
To operate the marketplace — creating and managing listings, and enabling buyers and sellers to message each other; to verify seller identity and reduce fake or fraudulent listings; to process listing fee payments; to send you emails you've asked for, like saved search match notifications; to look into reports of listings or users that breach our Terms of Service; and to understand and improve how the Platform is used.
3. ID documents specifically
ID documents are stored in a private, access-restricted location. They are never published, shown to other users, or attached to your public profile or listings. Only Auto Resource administrators can access them, and only for identity verification or to investigate a report or dispute. We delete your ID document within 30 days of your account being closed, unless we're required to keep it longer to investigate fraud or comply with the law.
4. Who we share data with
We use third-party providers to run the Platform: Supabase (database and file storage, hosted in Sydney), Vercel (website hosting, Sydney), Resend (sending emails), Google Analytics and Microsoft Clarity (site usage analytics, which may process data outside Australia), and, once payments are live, Stripe (payment processing — Stripe may process data outside Australia as part of its global payments infrastructure). We don't sell your personal information to anyone. We may disclose it if required by law, to enforce our Terms of Service, or to investigate fraud or a report made about a listing or user.
5. How long we keep it
We keep your account and listing data while your account is active. If you close your account, we delete your personal information within a reasonable period afterwards, except where we're required to keep records for longer (for example, for tax, fraud-prevention, or legal reasons). ID documents are covered by the retention period in section 3 above.
6. Your rights
Under the Australian Privacy Principles, you can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it. To make a request, contact us using the details below — we'll respond within a reasonable time. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
7. Changes to this policy
We may update this Privacy Policy from time to time, for example as new features are added or laws change. We'll update the date below when we do.
8. Contact
For any privacy question, access request, or complaint, contact us here.