Privacy Policy

Car2Door ("we", "us", "our") operates a marketplace connecting customers, garages, and drivers for car repair, service estimates, and pickup/delivery. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Car2Door is currently operated as a pilot / proof-of-concept project. It has not yet been incorporated as a registered company. We're telling you this plainly because we'd rather you know exactly what you're dealing with than assume otherwise.

We collect only what we need to run the service:

• Profile identity: your name, phone number, and preferred language (locale).

• Vehicle data: make, model, and license plate. License plates are personal data and we handle them with the same care as any other identifying information.

• Service activity: your service requests, estimates and bids you receive or send, and the history of those interactions.

• Photos: pickup and delivery photos taken as part of a service request, used to document the vehicle's condition.

• Device tokens: if you enable push notifications, we store a device token so we can send you updates about your requests.

• Contact-form and lead submissions: if you fill out a contact or demo-request form on our public site, we collect the name, email, phone number, and message you provide.

We use this information to:

• create and manage your account,

• connect you with garages or customers and process service requests, estimates, and bids,

• send you notifications about the status of your requests,

• respond to contact-form and demo-request submissions,

• keep the service secure and diagnose problems.

We rely on a small number of third-party service providers to run Car2Door:

• Supabase — authentication, database, and file storage.

• Cloudflare — hosting and content delivery.

These providers process data on our behalf and are limited to the purposes we use them for. We do not sell your data to anyone.

We keep this section short because that is the honest answer. Car2Door uses only what is strictly necessary to keep you signed in — an authentication cookie set by Supabase when you log in.

We use Sentry for server-side error monitoring so we can find and fix bugs; Sentry does not set tracking or advertising cookies. We do not currently use Google Analytics, PostHog, or any advertising/tracking cookie or pixel.

We keep your data for as long as your account is active, plus a reasonable period afterward to meet legal, accounting, or dispute-resolution needs. Photos and request history are kept for as long as needed to support warranty or dispute questions on a completed job. You can ask us to delete your data sooner — see "Your rights" below.

We use industry-standard safeguards, including encryption in transit and database-level access controls (Supabase Row Level Security) that restrict who can read or write your data. No system is 100% secure, but we take reasonable steps to protect the information you give us.

Car2Door is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect data from children.

You can ask us, at any time, to:

• give you a copy (export) of the data we hold about you,

• correct inaccurate data,

• delete your data.

Email privacy@car2door.co and we will act on it.

Our service providers (Supabase, Cloudflare) may process and store data on servers located outside Israel. Where that happens, we rely on the safeguards those providers offer as part of their standard infrastructure.

We may update this policy as the product changes. We'll update the "last updated" date above when we do. Material changes will be reflected here — check back occasionally.

Questions about this policy or your data? Email privacy@car2door.co.