Privacy Policy
1. Basic Policy
Carseven Philippines Inc (the "Company") complies with the Data Privacy Act of 2012 (Republic Act No. 10173, the "DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (the "NPC") in handling personal information collected in connection with the Service (Mobility Data Intelligence, the "Service").
2. Information We Collect
Account information: name, company affiliation, and email address.
Authentication records: records of one-time passcode (OTP) emails sent and login records.
Usage information: IP address, session identifiers, access logs, search and browsing history within the Service, and device and browser information.
Audit logs: system-level operation and access records maintained for the secure operation of the Service.
Inquiry content: content submitted by users through the Contact Us form, including any company contact information the user enters.
3. Purpose of Use
Providing the Service (vehicle catalog search, auction market price search, statistics, and price trend display, among others) (for the performance of the contract);
Authenticating users by one-time passcode (for the performance of the contract);
Improving quality and analyzing usage (for the Company's legitimate interest in maintaining the security and quality of the Service);
Responding to incidents and preventing fraudulent use (for the Company's legitimate interest in maintaining the security and quality of the Service);
Complying with applicable laws and regulations (for compliance with legal obligations); and
Sending important notices (for the performance of the contract).
4. Storage Location and Cross-Border Transfer
Operational data for the Service is stored in the AWS Singapore Region (ap-southeast-1).
For any cross-border transfer, the Company implements contractual and technical safeguards providing a level of protection comparable to that required under the DPA. The Service is provided to users in the Philippines, and the Company handles personal information on the basis that the DPA applies to it.
5. Disclosure to Third Parties
The Company does not disclose personal information to third parties except where required by law, with the individual's consent, or for the service-provider and analytics processing described in Sections 6 and 10 of this Policy.
Where aggregated market price data is disclosed to third parties, it is disclosed only in an anonymized form that does not identify any individual.
6. Outsourcing
The Company may outsource part of its operations, including cloud infrastructure operations, to third-party service providers as necessary to provide the Service.
The Company requires such service providers to maintain a level of security comparable to this Policy and supervises them appropriately.
7. Security Measures
The Company implements technical and organizational security measures, including encryption of communications, access control, the principle of least privilege, and audit logging.
8. Retention Period
The Company retains personal information for the period necessary to achieve the purposes of use. After termination of the contract, such information is deleted or anonymized within a reasonable period, except to the extent retention is required by law or is otherwise necessary for legitimate business purposes such as the resolution of disputes.
9. Rights of Data Subjects
Under the DPA, users have the following rights with respect to their personal information: (1) to be informed; (2) to access; (3) to rectification; (4) to erasure or blocking; (5) to damages; (6) to data portability; and (7) to object.
To exercise these rights, please contact the Company through the channel described in Section 11. Users also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
10. Cookies and Similar Technologies
As a general rule, the Service uses cookies or browser local storage to maintain the login session and to remember the display language (English or Japanese). The Service does not use tracking technologies for advertising purposes.
Where the Service has a measurement ID configured for Google Analytics 4, the Company uses Google Analytics 4 ("GA4"), provided by Google LLC, as an analytics tool engaged under Article 6 (Outsourcing). GA4 sets cookies or similar identifiers in the browser and collects the URL of the page viewed, the time of the visit, and general browser/device information, which is processed by Google (including outside the Philippines); this disclosure falls within the exception to third-party disclosure set out in Article 5. The Company does not intentionally configure GA4 to send direct identifiers, such as name or email address, to Google. The Company's own page-view measurement logic excludes the admin console (/admin), member portal (/portal), login screen (/login), and photo review screen (/review-photos) from measurement, but depending on GA4's property-level settings (such as Enhanced Measurement), page views on these screens may still be recorded automatically by Google independently of the Company's own logic, and the Company does not guarantee that this exclusion is complete. You can disable this measurement by disabling JavaScript in your browser, or by installing the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). If a measurement ID is not configured, the Service does not load the GA4 script at all, and no measurement occurs.
11. Changes to this Policy; Contact
The Company may revise this Policy from time to time. Material changes will be announced in advance through the Service or other appropriate means.
Inquiries regarding this Policy may be directed to the Company through the Contact Us form on the Service (/contact/form).
Effective Date
Effective Date: September 6, 2026