Privacy Policy

1. Introduction

SoldOnTok ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Platform"). Please read it carefully. By using the Platform, you consent to the practices described here.

2. Information We Collect

We may collect:

• Account information: name, email address, password (hashed), and profile details when you register or sign in (including via third parties such as Google).
• Dealer information: business name, location, contact number, and verification-related data if you register as or become a dealer.
• Listing and content: vehicle details (make, model, year, price, mileage, description), photos, videos, and any other content you upload.
• Usage and technical data: IP address, browser type, device information, pages visited, and how you interact with the Platform (e.g. favourites, inquiries).
• Communications: messages you send (e.g. inquiries to dealers) and support correspondence.
• Social and OAuth data: where you connect social accounts (e.g. TikTok, YouTube) for posting, we receive and store tokens and related identifiers necessary to post on your behalf; we do not store your social media password.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform (listings, search, dealer dashboards, social posting).
• Create and manage your account and authenticate you.
• Display your listings and content to other users and, where you have enabled it, post approved content to your connected social accounts.
• Process inquiries and communicate with you about the Platform, support, or updates.
• Send marketing or promotional communications where you have opted in; you can opt out at any time.
• Monitor usage, analyse trends, and improve security and performance.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal Basis (UK / EEA)

Where applicable under UK and EEA law, we process your data on the basis of: (a) performance of a contract (providing the Platform and features you use); (b) your consent (e.g. marketing, optional social connections); (c) our legitimate interests (security, analytics, improving the service); and (d) legal obligation where required.

5. Sharing and Disclosure

We may share your information with:

• Other users: listings, dealer profiles, and contact details you choose to show are visible as designed (e.g. to buyers and dealers).
• Service providers: hosting (e.g. Vercel), database and auth (e.g. Supabase), analytics, and other processors that help us run the Platform; they are bound by confidentiality and data protection commitments.
• Social platforms: when you use social posting, we send content and necessary identifiers to the relevant platforms (TikTok, YouTube, etc.) in accordance with their APIs and your authorisation.
• Authorities: when required by law or to protect our rights, safety, or property.

We do not sell your personal data to third parties for their marketing.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the services and comply with legal obligations. After account closure or withdrawal of consent where applicable, we may retain certain data for backup, legal, or legitimate business purposes for a limited period, after which it is deleted or anonymised where possible.

7. Your Rights

Depending on where you live (e.g. UK, EEA), you may have the right to: access your data; correct or update it; request deletion; restrict or object to certain processing; data portability; and withdraw consent. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below. We will respond within the time required by applicable law.

8. Security

We use appropriate technical and organisational measures (e.g. encryption, access controls, secure providers) to protect your data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings. Disabling some cookies may affect how the Platform works.

10. Third-Party Links and Services

The Platform may contain links to third-party sites or integrate with third-party services (e.g. social networks, OAuth). Their privacy practices govern data you provide to them; we are not responsible for their policies or practices.

11. International Transfers

Your data may be processed in the United Kingdom, the EEA, and in countries where our service providers operate. Where we transfer data outside the UK/EEA, we ensure appropriate safeguards (e.g. adequacy decisions, standard contractual clauses) as required by law.

12. Children

The Platform is not intended for users under 18. We do not knowingly collect personal data from children; if we learn we have done so, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on the Platform and update the "Last updated" date. Continued use after changes constitutes acceptance. For material changes, we may provide additional notice where required by law.

14. Contact Us

For privacy-related questions, to exercise your rights, or to contact our data protection contact, please use the contact details provided on our website (e.g. contact form or email). For matters related to our Terms of Service, see the contact section there.