Privacy notice
This notice explains the limited data handling in the Carspecy staging service. It is not the final policy for a public paid launch.
Information the service can process
- Basic technical request and security information needed to operate and protect the service.
- Vehicle selections and catalog queries.
- Catalog correction submissions, including the selected vehicle, issue category, explanation and optional supporting URL.
- During an authorised staging test, listing URLs, pasted listing text, confirmed vehicle identity and buyer notes used to build a private report.
Carspecy does not require an account or email address for the current catalog correction form.
Private report access
Private reports use an access token. The browser can keep that token in session storage so the same browser tab can retrieve the report. Server-side access tokens are designed to be stored as one-way hashes rather than readable raw tokens.
Do not paste unnecessary personal data into a listing or notes field.
Service providers and payments
Carspecy is hosted on infrastructure providers that process requests on its behalf. Stripe sandbox services may be used in supervised tests, but sandbox transactions do not move real money. Production payment processing is disabled.
OpenAI-backed production report execution is disabled at this stage. Any future production AI use and its data boundary must be disclosed before launch.
Purpose and retention
Staging data is used to operate, secure, test and improve the service, investigate failures and review catalog corrections. Carspecy will publish definite retention periods and deletion procedures before public sales begin.
Carspecy does not claim to sell personal information or use the staging service for cross-site behavioural advertising.
Your choices
You can avoid submitting listing text, notes or a catalog correction. Closing the browser tab clears session storage under normal browser behaviour. A verified privacy-rights contact route will be added with the Carspecy domain and support mailbox before public launch.