StarcarStart free

Last updated October 17, 2026

Privacy policy

This policy explains what information Starcar collects, why, who it is shared with and the choices you have. It covers starcarcloud.com, the Starcar app and every dealership storefront hosted on Starcar.

1. Who is responsible for your data

Starcar ("we") operates the Starcar dealer management system.

For information a dealership stores in Starcar about its own customers, vehicles and deals, the dealership is the controller and we process that information on its behalf and on its instructions. If you are a customer of a dealership, contact that dealership first about your data.

For account details of people who sign up, website visitors, demo requests and support conversations, we are the controller.

2. Information we collect

Account information: name, email address, password (stored hashed by our authentication provider) or Google sign-in details, role and dealership.

Dealership data: vehicles, photos, prices, reconditioning and service records, contacts, leads, deals, payments and files that your team enters or imports.

Storefront enquiries: the name, email, phone number and message a visitor sends to a dealership through its Starcar storefront.

Demo requests and support chat: the details you type into these forms and conversations.

Assistant messages: questions your team asks the in-app AI assistant and its answers.

Technical information: IP address, browser type, pages visited and a first-party visitor identifier used to count sign-ups. We do not set this identifier when your browser sends Do Not Track or Global Privacy Control signals. IP addresses used for abuse prevention are stored only as short one-way hashes.

3. How we use information

To provide, secure and support the service, including access control, the audit trail and data export.

To deliver storefront enquiries and notifications to the right dealership.

To prevent spam, fraud and abuse, including rate limits and security checks on public forms.

To understand which pages lead to sign-ups and improve the product, using aggregated figures.

To contact you about your account, a demo you requested or important changes to the service.

We do not sell personal information, and we do not use dealership data to train AI models.

4. Service providers we share data with

Supabase (database, authentication and file storage) and Cloudflare (hosting, content delivery and the Turnstile security check).

Lovable AI gateway and the model provider it routes to, only for assistant and support-chat messages.

Resend, for transactional email such as invitations and enquiry alerts.

Google, if you choose to sign in with Google.

These providers process data only to provide their service to us. We may also disclose information when the law requires it or to protect the rights and safety of our users.

5. International transfers

Our providers may store and process data in countries other than yours. Where required, we rely on contractual safeguards such as standard contractual clauses.

6. Retention

Dealership data is kept while the dealership's account is active. After an account is closed we delete or anonymise it within 90 days, unless the law requires us to keep it longer.

Abuse-prevention records are kept for up to 24 hours. Demo requests and support conversations are kept for up to 24 months.

7. Security

Each dealership's data is separated at the database level, access follows each user's role, changes to key records are written to an audit log, and vehicle photos are stored privately until a dealership publishes them on its storefront. No system is perfectly secure, so please use a strong password and keep it private.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing.

Dealership owners and admins can export all dealership data at any time from Settings.

To make a request, email privacy@starcarcloud.com. We will reply within 30 days. You can also complain to your local data protection authority.

9. Cookies

We use cookies and local storage that are needed to keep you signed in and remember your language and theme, plus the first-party sign-up counter described above. We do not use third-party advertising cookies.

10. Children

Starcar is a business tool and is not directed at anyone under 16.

11. Changes and contact

We will post any change to this policy on this page and update the date above. For significant changes we will notify account owners by email or in the app.

Questions: privacy@starcarcloud.com