Privacy Policy

CarSaudi is an online automotive directory and digital marketplace platform owned and operated by Ayrex Digital Solutions W.L.L., operating across Saudi Arabia under Commercial Registration.

For privacy-related questions, requests, or to contact our Data Protection Officer (DPO), please reach us at privacy@carsaudi.com.

This Privacy Policy applies to personal information collected when you:

• Visit or browse the CarSaudi website (carsaudi.com)
• Download, install, or use the CarSaudi iOS or Android mobile applications
• Create or manage a user, seller, or dealer account
• Search, filter, save, or favorite vehicles
• Submit vehicle inquiries or initiate 1-click WhatsApp/call routing to advertisers
• Submit, publish, or manage vehicle listings
• Register as a licensed car dealership, showroom, or private seller
• Use car valuation, estimation, recommendation, or automated/AI features
• Purchase or use paid fixed listing packages processed via our payment gateway (Tap Payments)
• Communicate with our customer support team
• Interact with our advertisements, emails, or other communications

3.1 Information You Provide Directly

• User Account Info: Full name, email address, mobile phone number (including WhatsApp contact details), account password or authentication info, profile details, preferred language, account preferences, vehicle search preferences, and saved/favorite vehicles.
• Enquiries and Communications: Messages, preferred contact methods, enquiry history, selected vehicles, feedback, reviews, reports, and information included in support requests.
• Dealer & Showroom Data: Commercial Registration (CR) copies, automotive trade license details, authorized representative ID copies, showroom logo, tax information, and official billing addresses.
• Vehicle Listing Content: Listing titles, vehicle body types, sale/rental terms, asking prices, descriptions, locations, mileage, specifications, features, high-resolution photographs, videos, inspection reports, availability status, and contact details associated with the listing.
• Payment Data: Transaction history, invoice records, and package purchase status (credit/debit card details are processed directly by Tap Payments; see Terms & Conditions, Payment Terms).

3.2 Information Collected Through Sign-In Services

CarSaudi offers authentication using third-party identity providers such as Google Sign-In and Apple Sign-In. When signing in through these providers, we receive your name, email address, profile information, provider-specific identifier, and account settings made available by the provider to create, authenticate, and manage your account.

3.3 Technical, Device and Usage Information

We automatically collect technical information including IP address, browser type, device type, operating system, device identifiers, screen resolution, language settings, approximate location derived from technical info, pages/vehicles viewed, search activity, referring URLs, access times, click interactions, and crash diagnostic logs.

3.4 Location Information

We use approximate location (derived from IP) to display nearby vehicles and support location-based searches. If precise GPS location features are enabled via your device permissions, our app displays vehicles near your physical position. GPS access can be disabled anytime in device settings.

We process personal information to:

• create and manage accounts;
• authenticate users;
• display and manage vehicle listings;
• process vehicle searches and preferences;
• save favorite vehicles;
• process and route vehicle enquiries directly to relevant dealerships or sellers via WhatsApp/calls;
• connect users with dealers;
• provide customer support;
• provide car valuation and automated features;
• process payments via Tap Payments;
• operate, maintain, and improve platform functionality;
• analyze usage trends;
• detect and prevent fraud, spam, fake listings, and security threats;
• enforce our Terms & Conditions;
• comply with legal, tax, and regulatory obligations in the Kingdom of Saudi Arabia; and
• communicate administrative or promotional notices where permitted by law.

• Performance of a Contract / Service: To provide requested services, create accounts, route inquiries, deliver purchased fixed listing packages, or perform agreements with you.
• Explicit Consent: Where required for specific activities (e.g., marketing communications or precise GPS location).
• Legal Obligations: To comply with applicable laws of the Kingdom of Saudi Arabia, judicial orders, or governmental requests.
• Legitimate Operational Interests: To secure the platform, prevent fraud, analyze usage, maintain technical infrastructure, and protect business continuity for Ayrex Digital Solutions W.L.L.

• Dealerships and Sellers: When you submit an enquiry, your information (name, phone, email, message) is shared with the relevant dealership, showroom, or individual seller so they can respond. Advertisers become independent data controllers upon receipt.
• Service Providers: Cloud infrastructure (AWS, Supabase, Firebase), email/communication providers, map providers (Google Maps), payment processing (Tap Payments), analytics, and technical security vendors who handle data under strict contractual requirements.
• Legal and Regulatory Authorities: Where necessary to comply with applicable law, respond to lawful governmental requests, comply with court orders, or protect safety and legal rights.
• Business Transfers: If CarSaudi (or part of its business/assets) is involved in an Asset Purchase Agreement, merger, or acquisition by Ayrex Digital Solutions W.L.L., personal information will be transferred securely under applicable Saudi privacy laws.

CarSaudi uses machine-learning tools, automated analysis, recommendation engines, and Answer Engine Optimization (AEO) schemas to improve search, generate vehicle summaries, categorize listings, detect fraud, and optimize content for AI search crawlers. Automated outputs are for informational purposes only and do not constitute professional legal, financial, or appraisal advice.

We enforce administrative, technical, and physical safeguards including HTTPS/TLS 1.3 encryption across all endpoints, AES-256 database encryption at rest, restricted employee access, and vulnerability logging. Where cloud service providers store or process data internationally, we ensure appropriate contractual protections in accordance with applicable Saudi legal requirements.

We retain personal information only as long as necessary for the purposes outlined in this policy:

• Active account data is retained for the account lifetime.
• Enquiry logs are kept up to 12 months for QA.
• Financial and billing records are retained for up to 5 years to comply with applicable corporate accounting and tax rules under Ayrex Digital Solutions W.L.L.
• Published vehicle listings remain visible on the portal indefinitely until explicitly deleted or removed by the uploader or account holder.

When personal data is no longer required, it is securely deleted or anonymized.

Under the Saudi Personal Data Protection Law (PDPL), you have the right to request access to, correction of, or deletion of your personal data held by us, or to withdraw consent. You may manage account details inside App Settings.

In-App Account Deletion (Apple & Google Compliance)

You can request complete account deletion directly within our mobile app via Profile / Settings → Account → Delete Account. Alternatively, email support@carsaudi.com with subject line "Account Deletion Request." Account data will be permanently removed within 7 business days, subject to statutory retention rules.

For technical, billing, or privacy inquiries, contact our operating entity: