Privacy Policy

1. Who we are

CarRect ("we", "us", "our") is operated by Kashei AB, registered in Sweden. We are committed to protecting your personal data and complying with applicable privacy laws, including the General Data Protection Regulation (GDPR) and applicable US state privacy laws.

For questions about this policy, contact us at contact@carrect.io.

2. What data we collect

When you use CarRect, we collect the following personal data:

• Full name
• Email address
• Phone number
• Vehicle details (make, model, year, license plate, mileage)
• Vehicle identification number (VIN), if provided
• Vehicle history report, only if you choose to share one
• Description of your vehicle problem
• Repair shop name, phone number and location
• Date and time of your repair appointment

We do not collect payment card details during the beta testing period. When payments are introduced, they will be processed by Stripe and we will not store your payment information.

3. Why we collect your data

We use your personal data to:

• Provide our car repair advocacy service
• Contact your repair shop on your behalf
• Communicate with you about your case
• Build our repair price database to improve our service
• Comply with legal obligations

The legal basis for processing your data is the performance of a contract with you (Article 6(1)(b) GDPR) and our legitimate interests in improving our service (Article 6(1)(f) GDPR).

4. How we store your data

Your data is stored securely using Google Workspace services. We retain your personal data for a maximum of 3 years from the date of your last interaction with us, after which it is deleted or anonymised.

Repair price data may be retained indefinitely in anonymised form as part of our price database. This data cannot be used to identify you.

5. Who we share your data with

We do not sell your personal data. We may share your data with:

• Your repair shop — your name (to confirm the vehicle is yours) and case details necessary to represent you
• Formspree — processes your form submission when you first contact us
• Google — for data storage and communication
• Stripe — for payment processing (when payments are introduced)
• Legal authorities — if required by law

Your phone number and email address are never shared with the repair shop. We contact the shop directly on your behalf.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a copy of your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, contact us at contact@carrect.io. We will respond within 30 days.

7. Cookies

Our website uses only essential cookies required for the site to function. We do not use tracking cookies or advertising cookies. No cookie consent banner is required as we do not use non-essential cookies.

8. Call recording

Calls made to repair shops on your behalf may be recorded for quality and training purposes. All parties to the call are informed of this at the start of the call in accordance with applicable recording laws in the United States.

9. Data transfers

As a Swedish company serving customers in the US, your data may be transferred between these jurisdictions. All transfers are carried out in accordance with GDPR requirements using appropriate safeguards.

10. Children

Our service is not directed at children under the age of 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

12. Contact and complaints

For any privacy-related questions, contact us at contact@carrect.io.

If you are in the EU, you may lodge a complaint with your local data protection authority.

← Back to CarRect