Privacy Notice

How CarMetria handles account, subscription, notification, and product-usage information.

1. Who controls your information

CarMetria is the controller of personal information processed through this service. Privacy questions and requests can be sent to support@carmetria.eu.

2. Information we process

• Account information, including email address, username, password hash, plan, verification state, and login/session records.
• Subscription identifiers and status supplied by Stripe. CarMetria does not store complete payment-card details.
• Preferences and content you create, including alerts, listing watches, shortlists, shortlist notes, and notification read state.
• AI assistant requests, tool usage, token/cost totals, and responses needed to provide and limit the assistant.
• Technical and security logs such as IP address, browser information, timestamps, request paths, and abuse-prevention results.

3. Why we process it

We use this information to provide accounts and paid features, secure the service, process subscriptions, deliver requested emails and alerts, operate the AI assistant, diagnose failures, prevent abuse, and meet legal obligations. Where applicable, processing is based on performance of the service contract, legitimate interests in operating and securing CarMetria, consent where requested, and compliance with law.

4. Service providers

Information may be handled by infrastructure and service providers used to operate CarMetria, including the VPS host, Cloudflare, Stripe, the configured email provider, and OpenRouter and the selected AI model provider when you use the assistant. Each provider receives only the information required for its role and may process it under its own terms and privacy notice.

5. Vehicle-market data

CarMetria also processes publicly available vehicle listing and professional-seller information for market analysis. Private user account information is not added to public vehicle listings.

6. Retention

Account and subscription records are retained while an account is active and as needed for security, accounting, dispute handling, and legal compliance. Operational logs and AI usage records are retained only as reasonably needed to operate and protect the service.

7. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, object to certain processing, or withdraw consent where processing relies on consent. Withdrawing consent does not affect processing that occurred before withdrawal. You may also complain to your competent data-protection authority. Send requests from your registered email address to support@carmetria.eu. Identity verification may be required before a request is completed.

8. Cookies and local storage

CarMetria uses strictly necessary cookies and browser storage to keep you signed in, protect forms against cross-site request forgery, remember interface preferences, and support installation as a web application. These mechanisms are required for requested service functionality and are not used by CarMetria for third-party advertising.

9. Security and international processing

CarMetria uses access controls, encrypted HTTPS transport, hashed credentials and tokens, backups, and monitoring. No internet service can guarantee absolute security. Some providers may process information outside your country; where required, the relevant provider is responsible for an appropriate transfer mechanism.

10. Changes

Material changes will be reflected by a new effective date and may also be announced through the notification center or email. Privacy version: 2026-08-23.