Privacy Policy

Introduction

Welcome to CarListAPi.com ("Company", "we", "our", "us")! We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us via our contact form.

When you visit our website CarListAPi.com, and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy notice, we describe our privacy policy. We seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy policy that you do not agree with, please discontinue use of our Services immediately.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register on CarListAPi.com, subscribe to our services, express an interest in obtaining information about us or our products and services, when you participate in activities on CarListAPi.com (such as posting messages in our online forums or entering competitions, contests, or giveaways) or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the CarListAPi.com website, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Personal Information Provided by You. We collect names, phone numbers, email addresses, mailing addresses, job titles, login information, and other similar information.
• Payment Data. We collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is collected, stored and processed by our payment processor, Stripe. You may find their privacy policy link(s) here: Stripe Privacy Policy.
• API Usage Data. We collect data on the usage of our API endpoints, including the frequency and scope of requests made to the API.
• Third-Party Sign-In Data. If you register, sign in, or connect an account using Google or GitHub, we may retain the provider name, the provider's durable account identifier, your verified primary email address, display name or username, and avatar URL. We do not retain your Google or GitHub password, repository contents, or contact or friends lists.
• Newsletter Consent and Activity Data. If you choose to receive product emails, we collect the email address covered by your consent, when you opted in, subscription and unsubscription status, and related delivery activity that may include deliveries, opens, link clicks, bounces, and unsubscribe events.

2. How Do We Use Your Information?

We use personal information collected via CarListAPi.com for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below:

• To facilitate account creation and logon process.
• To connect, maintain, and secure third-party sign-in methods that you request.
• To post testimonials.
• Request feedback.
• To enable user-to-user communications.
• To manage user accounts.
• To send administrative information to you.
• To protect our Services.
• To enforce our terms, conditions, and policies.
• To respond to legal requests and prevent harm.
• To manage subscriptions and process payments.
• To monitor and analyze API usage and improve our services.
• To provide customer support.
• To send you marketing and promotional communications.
• To record and honor your newsletter consent, subscription, and unsubscription preferences.

3. Will Your Information Be Shared With Anyone?

We only share and disclose your information in the following situations:

• Compliance with Laws. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Vital Interests and Legal Rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, and illegal activities, or as evidence in litigation in which we are involved.
• Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. These third parties include Stripe for payment processing, Google and GitHub when you choose to use their authentication services, and EmailOctopus for storing newsletter contacts, maintaining subscription and suppression status, delivering product emails, and reporting campaign delivery and engagement. Review the EmailOctopus Privacy Policy.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• With Your Consent. We may disclose your personal information for any other purpose with your consent.

4. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies can be found in our Cookie Policy.

5. How Do We Handle Your Social Logins?

You may choose to register, sign in, or connect your existing CarListAPI account using Google or GitHub. We receive only the provider name, a durable provider account identifier, your verified primary email address, display name or username, and avatar URL. We use the provider account identifier, rather than your email address alone, to recognize the connection. We do not automatically link a provider to an existing CarListAPI account solely because the email addresses match; you must first authenticate to that account and intentionally connect the provider.

We use a temporary OAuth access token during the authorization request to obtain this identity information. CarListAPI does not retain Google or GitHub OAuth access or refresh tokens after the request completes, and we do not request or access your repositories, files, contacts, friends lists, or unrelated provider data.

You may disconnect a provider from your profile when another usable sign-in method remains on your account. Disconnecting removes the active association from CarListAPI, but it may not revoke CarListAPI's authorization at the provider. You may separately revoke access through your provider settings. For more information, review the Google Privacy Policy and GitHub Privacy Statement.

CarListAPI's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

6. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Third-party sign-in metadata is retained while the provider remains connected and your account is active. When you disconnect a provider, we delete its active association from your account, subject to limited retention in backups and records needed for security, fraud prevention, dispute resolution, or legal compliance. A request to delete your CarListAPI account also covers remaining third-party sign-in metadata, subject to these same limited retention needs.

Newsletter contact and consent records are retained while you remain subscribed. If you unsubscribe, we and EmailOctopus may retain limited email address and unsubscription information on a suppression or do-not-contact list so that your preference is honored and you are not added again by mistake. Campaign delivery and engagement records are retained according to our operational needs and EmailOctopus's applicable retention practices.

7. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

8. What Are Your Privacy Rights?

In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.

9. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy policy.

10. Do California Residents Have Specific Privacy Rights?

Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information. California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

11. Do We Make Updates to This Notice?

We may update this privacy notice from time to time in order to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO), RJ, by email at info@carlistapi.com.

13. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email us at info@carlistapi.com.

You can also disconnect Google or GitHub from your profile when another usable sign-in method remains on the account. Contact us at info@carlistapi.com if you need help reviewing or removing a provider connection or cannot access your account.

You can withdraw newsletter consent at any time from the Product newsletter card on your profile or through the unsubscribe link included in every product email. Unsubscribing stops future product marketing emails but does not affect administrative, security, billing, or service communications required for your account.