Privacy Policy

Last updated: April 9, 2026. This Privacy Policy explains how CARMA (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website at carmasearch.com and our car price comparison services.

Information We Collect

We collect the following types of information:

Account Information. When you create a CARMA account, we collect your email address and any profile information you choose to provide. We use this to authenticate your account and communicate with you about the service.

Usage Data. When you use CARMA to analyze vehicle listings, we collect the listing URLs you submit, the search filters you apply, and the alerts you configure. This data is necessary to provide our price comparison and alert services.

Automatically Collected Data. When you visit carmasearch.com, we automatically collect standard technical information including your IP address, browser type, device type, referring URL, and pages visited. We use this to maintain and improve the service.

Cookies. We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See the Cookies section below for details.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve CARMA's car price comparison and deal scoring services
  • Send you price drop alerts and other notifications you've requested
  • Respond to your support requests and communicate about your account
  • Analyze aggregate usage patterns to improve the service (we do not use individual data for this purpose)
  • Protect against fraud, abuse, and unauthorized access

We do not use your data for advertising. We do not build advertising profiles. We do not sell your information.

Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share limited information in the following circumstances:

Service Providers. We use third-party services to host our infrastructure, send emails, and analyze aggregate service performance. These providers only receive the minimum data necessary to perform their function and are contractually required to protect it.

Legal Requirements. We may disclose information if required by law, regulation, legal process, or governmental request.

Business Transfers. If CARMA is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Cookies

CARMA uses a minimal number of cookies:

Essential Cookies. Required for authentication, session management, and security. These cannot be disabled without breaking core functionality.

Preference Cookies. Store your settings such as theme preference. These are optional.

We do not use advertising cookies, social media tracking cookies, or third-party analytics cookies that track you across websites.

Data Retention

We retain your account information and usage data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are legally required to retain it.

Automatically collected technical data (server logs) is retained for up to 90 days for security and debugging purposes, after which it is deleted.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

Right of Access. You can request a copy of the personal data we hold about you.

Right to Rectification. You can request that we correct any inaccurate personal data.

Right to Erasure. You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.

Right to Restriction. You can request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability. You can request a copy of your data in a structured, machine-readable format.

Right to Object. You can object to the processing of your personal data under certain conditions.

To exercise any of these rights, contact us through our Help Center. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS), secure authentication mechanisms, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

CARMA is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website. Your continued use of CARMA after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our Help Center.

You also have the right to lodge a complaint with a data protection supervisory authority in your country of residence.