Privacy policy
Your vehicles and numbers are personal. Here is how our current tools handle that information.
01 / Who we are
This Privacy Policy describes how Carvumi handles information in its vehicle-planning website. Carvumi is operated by the owner of carvumi.com; This policy applies to Carvumi's own features, not to independent websites that you may visit from links here.
02 / Information you provide
You may enter vehicle details, loan/payoff amounts, lease assumptions, ownership costs, dealer quotes, photos, checklists, comparisons, reminders and optional profile information. If cloud accounts are enabled, Supabase can process your email address, authentication events and account identifiers. You may also provide information in support or privacy requests.
We do not ask you to provide a Social Security number, bank password, payment card number or credit report into Carvumi's own forms. Please do not enter sensitive credentials or other people's personal financial information.
03 / Where data is stored
If you use Carvumi as a guest, many saved records reside in your browser's local storage or device database and may be erased when that data is cleared. When optional Supabase cloud accounts are connected, user-entered Garage records, comparison scenarios, checklist/reminders and profile settings may be stored privately in Supabase and synced across signed-in devices. Cloud photo uploads, if used, may be held in a private storage bucket.
Paid Decision Report inputs may be sent to Netlify Functions to calculate and validate a purchase; the existing workflow does not automatically attach purchased reports to your cloud account. Do not assume purchase recovery across devices unless and until a separate recovery feature is clearly offered.
04 / Technical and payment information
Our hosting and infrastructure providers may automatically process IP address, browser/device information, request times and security logs to operate and protect the Service. When hosted photographs load from Unsplash's image CDN, that provider may receive a request from your browser.
If paid checkout is enabled, Stripe processes payment-card details, billing information, transaction records and fraud checks under its own terms. Carvumi does not receive full payment-card numbers. We may receive a payment identifier, status, amount and limited billing details required to validate access, provide support and keep legally necessary records.
05 / Why we use information
We use information to calculate your scenarios, save your Garage and comparisons, authenticate your account when enabled, provide purchased features, respond to requests, prevent abuse, monitor service performance, comply with law and protect users. We do not use your vehicle or finance entries to make automated lending or credit eligibility decisions. We do not sell your personal information or currently run third-party targeted advertising through this website.
06 / Cookies, local storage and analytics
Carvumi uses local browser storage for your guest preferences, saved calculations and sessions. Cloud authentication (when configured) can persist login sessions. Service infrastructure may use essential session cookies and logs. We do not currently enable advertising pixels or behavioral ad networks in this build. If analytics or marketing tools are added later, this notice and applicable choice mechanisms must be updated before deployment.
07 / Who receives information
To provide the Service, data may be processed by service providers such as Netlify (hosting, functions and request logs), Supabase (optional accounts, database and private photos), Stripe (payments once enabled), and an image CDN for site photography. We may disclose information if required by law or to protect security and rights. We do not share your records with a dealership or lender solely because you use a calculator. Any later referral or data-sharing program requires a separate clear disclosure and, where required, consent.
08 / Retention and deletion
Guest data generally stays on your device until you delete it or your browser clears it. For cloud account data, records are normally retained while your account remains active and may be deleted following a valid request, subject to fraud, tax, financial record-keeping or other legal exceptions. Technical logs and payment records may be retained for provider-defined periods and legal obligations.
From your account, when enabled, you may export or delete stored records. Complete identity deletion requires the account-deletion backend to be activated; if unavailable, contact Carvumi to request deletion. We will confirm the applicable process and legal response period rather than promise immediate erasure of all backups.
09 / Privacy rights
Depending on your location and whether relevant laws apply, you may have rights to request access, correction, deletion, portability or information about data use, and to appeal a denial. You may also have rights to opt out of certain sales, targeted advertising or profiling if those activities are ever introduced. Carvumi does not currently sell personal data, serve targeted ads, or profile users to make legally significant decisions.
Submit requests through Contact Carvumi, with “Privacy request” in the message. We may verify your identity before releasing or deleting data. We will follow applicable legal procedures and deadlines; this notice does not assert that every statutory regime applies to this business.
10 / Security
We use security-conscious design including HTTPS hosting, private cloud storage rules when configured, server-side payment verification and no secret server keys in website HTML. Nevertheless, no internet service or storage method is completely secure. Use a trusted email account and devices, do not share sign-in links, and keep your own copies of important purchase or financing records.
11 / Children and international use
Carvumi is intended for adults 18 and older and is not directed toward children. We do not knowingly request children's personal information. The Service is designed for U.S. vehicle-shopping assumptions; users outside the U.S. should not assume tax, lending, warranty or privacy rules match their country.
12 / Policy updates and contact
We may revise this policy as features and providers change. We will update the effective date and provide additional notice or choices where required. For questions, requests or concerns, use the contact page. We will communicate through our listed support channels.