Privacy Policy

Last updated: March 23, 2026

1. Introduction

CarDealSniper ("we", "our", or "us") operates the CarDealSniper mobile application and website (cardealsniper.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored as a bcrypt hash). We never store your password in plain text.

Usage Data: We collect information about how you use the app, including deal views, searches, bot configuration preferences, and notification interactions.

Device Information: We collect device tokens for push notifications via Firebase Cloud Messaging (FCM). We do not collect device identifiers for advertising purposes.

Location Data: We collect your ZIP code (provided by you) to find local vehicle deals. We do not use GPS or continuous location tracking.

Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. We receive only a Stripe customer ID and subscription status.

3. How We Use Your Information

To scan vehicle marketplaces (OfferUp, Facebook Marketplace, Craigslist) and find deals matching your preferences
To send push notifications about new deals via Firebase Cloud Messaging
To process subscription payments through Stripe
To provide customer support and respond to your inquiries
To improve our deal-finding algorithms and pricing accuracy
To detect and prevent fraud, scam listings, and abuse

4. Third-Party Services

We use the following third-party services:

Stripe — Payment processing. Stripe's privacy policy: stripe.com/privacy
Firebase (Google) — Push notifications (FCM) and crash reporting (Crashlytics). Firebase's privacy policy: firebase.google.com/support/privacy
Sentry — Error tracking and performance monitoring. Sentry's privacy policy: sentry.io/privacy
Cloudflare — CDN and DDoS protection. Cloudflare's privacy policy: cloudflare.com/privacypolicy

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit (TLS/HTTPS). We use industry-standard security measures including:

Bcrypt password hashing
JWT token-based authentication with expiration
HTTPS enforcement via HSTS
Rate limiting on all API endpoints
Daily automated database backups

6. Push Notifications

We use Firebase Cloud Messaging (FCM) to send push notifications about new vehicle deals. You can control notification preferences in the app's Notification Settings, or disable notifications entirely through your device settings.

7. Your Rights

You have the right to:

Access your personal data (available in Profile > Edit Profile)
Correct inaccurate data (via Edit Profile)
Delete your account and all associated data (contact [email protected])
Export your data (contact [email protected])
Opt out of push notifications (via app settings or device settings)

8. Data Retention

We retain your account data for as long as your account is active. Deal history is retained for 90 days. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or data requests:

Email: [email protected]