Privacy Policy

What we collect

Your account — a name (optional), and the phone number or email address you verify when signing in, or the name, email and profile photo shared by Google or LinkedIn when you sign in with them. Sign in with Apple shares your name the first time and an email address, which may be an Apple private relay address that forwards to you.

What you do on the site — saved cars, AI-analysis preferences and results, price alerts, group-buy interest, and enquiries (finance, test drive, callback).

Conversations — if you chat with our team on the site or message us on WhatsApp, we store the conversation so we can help with your enquiry and pick up where we left off.

Technical details — when you submit a form, sign in, or tap a dealer contact button, we record your IP address and the approximate city it resolves to. This helps us spot abuse and understand where enquiries come from.

Usage analytics — we use Google Analytics to understand which pages are visited and how the site is used in aggregate. Google processes this on our behalf under its own terms; it doesn't see your account details, messages, or enquiries.

What we use it for

To run the product: sync your saved cars across devices, send the one-time codes that sign you in, email you price-alert matches and chat replies, and pass your enquiry to the relevant provider only when you ask us to (for example a group-buy or a callback request). We don't sell your data, and we don't share your contact details with a dealer without an action from you that says so.

Who processes it

Trusted service providers process data on our behalf under contract — for hosting, email delivery, sign-in codes, usage analytics, and WhatsApp messaging (if you message our WhatsApp number, WhatsApp's own terms also apply). For the current list of providers, email privacy@directcars.ae.

When you sign in, Cloudflare Turnstile checks that the request comes from a person and not a bot, before we send a sign-in code. It runs invisibly and collects data from your browser and device for that check, as described in Cloudflare's Turnstile Privacy Addendum.

Search and questions

When you use the search box or ask a question about a car, the text you type is sent to OpenAI to understand it and, for questions, to write an answer from DirectCars data. We keep what you typed, the filters we applied, the answer and a one-way hash of your IP address for 90 days, to improve results and to stop abuse. We don't send your name, contact details or exact IP address to OpenAI.

How long we keep it

Sign-in sessions expire after 30 days (180 days at the longest). Conversations, messages and contact events are deleted automatically 24 months after their last activity. Account data is kept while the account exists.

Your choices

Every alert email carries a one-click unsubscribe. You can sign out everywhere from your account page. To ask what we hold about you, correct it, or delete your account and its data, email privacy@directcars.ae — we'll respond within 30 days.