carropana

Privacy Policy

Last updated: June 29, 2026

Carropana ("Carropana", "we", "us", or "our") is a vehicle marketplace operated by Tiny Developers LLC. This Privacy Policy explains what personal information we collect when you use carropana.com and our related services (the "Service"), how we use and share it, and the choices and rights you have.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Who we are

The Service is provided by:

Tiny Developers LLC
3120 Southwest Freeway, Ste 101, PMB 30504
Houston, TX 77098, United States

For any privacy question or request, contact us at privacy@carropana.com.

2. Information we collect

a. Account information (sign-in)

You create an account by signing in with Google or Facebook, through our authentication provider, Clerk. When you sign in, we receive from that provider:

  • Your name
  • Your email address
  • A profile picture (if provided by the login provider)
  • A unique account identifier from the provider

About Facebook Login specifically: when you choose "Continue with Facebook," we receive only the basic profile information you authorize (your name, email address, and profile picture). We do not post to your Facebook account, access your friends list, or read your Facebook content. You can review and revoke this access at any time in your Facebook settings under Settings → Apps and Websites.

b. Information you provide when listing a vehicle (sellers)

When you publish a listing, we collect the contact details you choose to share so buyers can reach you:

  • Seller name
  • Phone number
  • WhatsApp number
  • Email address
  • Your preferred contact method
  • Vehicle details and photos you upload

c. Information you provide when contacting a seller (buyers)

When you submit an inquiry on a listing, we collect:

  • Your name
  • Your phone number
  • Your message

d. Activity within your account

  • Favorites (listings you save)
  • Saved searches

e. Information collected automatically

When you use the Service we automatically collect certain technical and usage data through cookies and similar technologies:

  • Device and browser information, IP address, and general location
  • Pages viewed, searches run, and interactions with listings
  • Analytics and advertising identifiers

We use the following analytics and measurement tools: PostHog (product analytics) and the Meta Pixel + Conversions API (advertising measurement).

3. How we use your information

We use personal information to:

  • Operate the marketplace and connect buyers with sellers
  • Create and manage your account and authenticate your sign-in
  • Display your listing and your chosen contact details to interested buyers
  • Deliver buyer inquiries to sellers
  • Remember your favorites, saved searches, and language preference
  • Measure and improve the Service through analytics
  • Maintain security, prevent fraud and abuse, and enforce our terms
  • Comply with legal obligations

4. How we share your information

We do not sell your personal information. We share it only as described below:

  • With other users. The contact details you include in a listing (name, phone, WhatsApp, email, preferred contact method) are shown to buyers so they can reach you. Buyer inquiry details are shared with the relevant seller.
  • With service providers who process data on our behalf, under contract and only as needed to run the Service:
    • Clerk — authentication and sign-in
    • PostHog — product analytics
    • Meta Pixel + Conversions API — advertising measurement
    • Neon — database hosting (PostgreSQL)
    • Cloudflare — hosting, content delivery, and file storage
  • For legal reasons — when required by law, regulation, legal process, or to protect the rights, safety, and property of Carropana, our users, or the public.
  • In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this policy.

For conversion measurement, we may share a SHA-256 hashed version of your phone number or email address with Meta. We never share the raw values with Meta.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as your language), and measure use of the Service. These include:

  • Essential cookies — cp_client, which anonymously identifies the device, and cookies required to sign you in and keep your session secure.
  • Preference cookies — cp_locale remembers your language and cp_consent remembers your analytics and advertising choice.
  • Analytics and advertising cookies — PostHog's ph_* cookies and the Meta Pixel's _fbp and _fbc cookies.

You can opt out of analytics and advertising by selecting Reject in the cookie banner. You can also delete or block cookies using your browser controls.

6. Data retention and deletion

We keep your personal information for as long as your account is active or as needed to provide the Service.

We retain attribution_touches and recommendation_events records for up to 24 months.

When you request deletion (see Section 7), we soft-delete your account and anonymize your personal data — removing or irreversibly replacing information that identifies you — within 30 days of confirming your request. We may retain anonymized or aggregated data that can no longer be linked to you, and we may retain limited information where required for legal, security, or fraud-prevention purposes.

7. Your rights and choices

You can:

  • Access and update your account information at any time while signed in.
  • Request deletion of your account and personal data.

How to delete your data. Follow the instructions on our data deletion page at carropana.com/delete-data, or email us directly at privacy@carropana.com. Once we confirm your request, your account is soft-deleted and your personal data is anonymized within 30 days. You can also use that address for any other request or question about your data.

8. Data security

We use industry-standard safeguards — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International data transfers

Carropana is operated from the United States. If you use the Service from the Dominican Republic or elsewhere, your information will be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to this transfer.

10. Children's privacy

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact privacy@carropana.com and we will delete it.

11. Third-party links

The Service may link to third-party websites or services we do not control. This policy does not apply to those, and we encourage you to review their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.

13. Contact us

Tiny Developers LLC
3120 Southwest Freeway, Ste 101, PMB 30504
Houston, TX 77098, United States
Email: privacy@carropana.com

14. Governing law

This Privacy Policy and any dispute arising from it are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles.