Privacy Policy
How we collect, use, and protect your data — a privacy-first approach across every Carstat product.
At Carstat, we take a "privacy-first" approach across our products. This policy applies to all Carstat services, including Carstat API (our vehicle data API) and Carstat Garage (our consumer vehicle management product). We believe that your data belongs to you, and our products are built to provide vehicle data without compromising your personal information.
- We never sell your personal data to advertisers.
- We never share your personal data with third parties.
- We never engage in email marketing or spam.
1. Information We Collect
To provide the Services, we collect only the minimum necessary information:
- Account Information: Your email address and password used to secure your account.
- API Usage Data: Logs of your API requests (timestamps and endpoints) to manage rate limits and billing.
- Billing Information: If you subscribe to a paid plan, payment processing is handled by an authorized third-party provider. We do not store your full credit card details on our servers.
- Garage Vehicle Data: If you use Carstat Garage, we store the vehicles you save (including VIN, make, model, year, trim and any nickname you set), together with the maintenance schedules, service records, mileage entries, expense records and documents you choose to add. This information is visible only to you and is never used for any purpose other than operating your garage.
2. Authentication
Login and signup for Carstat are managed by Auth0, a secure third-party authentication provider. Auth0 handles account creation, login, and password management. We do not store or process your password directly; all authentication is performed through Auth0's secure platform.
3. How We Use Your Information
We use your information strictly for the operation of the Services:
- To authenticate your access to the Services.
- To provide technical support and security alerts regarding your account.
- To process transactions for your selected subscription plan.
4. No Marketing Policy
Your email address is used exclusively for functional communications (e.g., password resets, billing receipts, or critical API updates). We do not send promotional newsletters, marketing offers, or third-party advertisements.
5. Data Sharing and Disclosure
We do not disclose, sell, or rent your personal data to any individual or entity. The only exceptions are:
- Legal Requirements: If required by law to comply with a valid legal process (e.g., a subpoena).
- Service Providers: We use third-party infrastructure for hosting and payment processing, which are bound by their own strict privacy requirements.
6. Data Security
We implement industry-standard security measures to protect your Registration Data from unauthorized access. You are responsible for maintaining the confidentiality of your API keys and account password.
7. Changes to This Policy
We may update this Privacy Policy to reflect changes in our products or our legal obligations. The current version is always published on this page, with its Last Updated date shown above.
- Where a change materially affects how we collect, use or share your personal information, we will notify you by email or dashboard notice before it takes effect.
- Where the law requires your consent for a new use of your personal information, we will obtain that consent before the new use begins.
- We encourage you to review this page periodically.
8. Contact Us
If you have questions regarding this Privacy Policy, please contact our privacy team at: [email protected]