Privacy Policy

COURSER Technologies Ltd. ("COURSER," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, mobile applications, and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

This Privacy Policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Data Protection Act 2018, and other applicable data protection laws.

We collect information that you provide directly to us, information we collect automatically when you use the Service, and information we obtain from third-party sources.

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including processing transactions and delivering features you request
• To verify your identity and the authenticity of vehicle listings through our Trust & Safety processes
• To personalize your experience, including search results, recommendations, and market insights
• To communicate with you, including sending service updates, security alerts, and promotional messages
• To detect, prevent, and address fraud, abuse, security issues, and technical problems
• To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of other users
• To conduct research and analysis to improve our products, services, and user experience
• To process payments and manage your subscription

We do not sell your personal data. We may share your information in the following circumstances:

• With other members: Your public profile information, verified status, and listing details are visible to other authenticated members of the platform
• With service providers: We share information with third-party service providers who perform services on our behalf, including identity verification, payment processing, cloud hosting, analytics, and customer support
• With insurance partners: When you opt in to insurance services, we share relevant vehicle and owner information with our insurance partners
• For legal compliance: We may disclose your information when required by law, regulation, legal process, or governmental request
• For safety and fraud prevention: We may share information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to safety, or violations of our Terms of Service
• In business transfers: If COURSER is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

We implement industry-leading security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for all stored personal data and identity documents
• TLS 1.3 encryption for all data in transit
• End-to-end encryption for all platform messaging
• SOC 2 Type II certified infrastructure
• Regular penetration testing and security audits by independent third parties
• Multi-factor authentication for all team members with access to user data
• Strict access controls with role-based permissions and audit logging
• Automated anomaly detection and intrusion prevention systems

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data: Retained for the duration of your account and for 30 days after account deletion to allow for reactivation
• Identity verification documents: Retained for 7 years after account closure as required by anti-money laundering regulations
• Transaction records: Retained for 7 years as required by financial regulations
• Communication records: Retained for 3 years after the last interaction
• Log data and analytics: Retained for 2 years in aggregate, anonymized form
• Marketing preferences: Retained until you opt out or delete your account

When the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request correction of inaccurate personal data
• Right to erasure: You have the right to request deletion of your personal data, subject to legal retention requirements
• Right to restrict processing: You have the right to request that we limit the processing of your personal data
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction

To exercise any of these rights, please contact us at privacy@concours.io or through the privacy settings in your account dashboard. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to enhance your experience on the Service. You can manage your cookie preferences through your browser settings or our cookie consent tool.

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. For detailed information about the cookies we use, please refer to our Cookie Policy.

COURSER operates globally with offices in Istanbul, Dubai, London, and Monaco. Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer personal data outside the European Economic Area (EEA) or the United Kingdom, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information immediately.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@concours.io.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to opt out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

California residents may submit a verifiable consumer request by contacting us at privacy@concours.io or through the privacy settings in your account. We will verify your identity before processing the request.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: