Privacy Policy

whatmoves (the “Service”) is operated by [LEGAL ENTITY NAME]. This Privacy Policy explains what personal information we collect, why we collect it, and your rights. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

• Account information — name, email, phone number, and province you provide when you register or update your profile.
• Authentication data — a hashed password and, if you enable it, two-factor authentication settings and recovery codes (stored hashed).
• Listing & bidding activity — vehicles you list, bids you place, comments, watchlist, and related timestamps.
• Uploaded content — photos, documents, and records you submit, which may include embedded metadata such as EXIF/GPS used for fraud screening.
• Payment information — when payments are enabled, payment details are handled by our third-party payment processor; we do not store full card numbers.
• Technical data — IP address, browser/user-agent, and log data generated when you use the Service.

• To create and operate your account and run auctions.
• To screen listings for fraud and protect the integrity of the platform.
• To communicate with you about your account, bids, listings, and transactions.
• To provide AI-assisted listing write-ups and related features.
• To comply with legal obligations and enforce our Terms and Auction Rules.

We use essential cookies to keep you signed in and to secure the Service, and a bot-protection challenge (Cloudflare Turnstile) on certain forms.

We also use Google Analytics to understand how visitors use the Service in aggregate (pages viewed, traffic sources, device type, approximate location). Google Analytics sets cookies such as _ga and _ga_*in your browser, and processes your IP address and usage data on Google’s infrastructure. We do not use this data for advertising or to identify you personally. You can opt out of Google Analytics by installing Google’s opt-out browser add-on, by clearing or blocking cookies, or by using your browser’s “Do Not Track” / tracking-protection settings.

We do not use advertising or cross-site tracking cookies. If that changes, we will update this policy and provide any required choices.

We share personal information with service providers only as needed to operate the Service, under contracts that require them to protect it:

• Infrastructure, hosting, and bot protection (including Cloudflare).
• Email delivery for verification and notifications.
• Analytics (Google Analytics) to measure aggregate site usage — see “Cookies & analytics” above.
• AI providers used to generate write-ups and screen listings (listing text and photos may be processed for these purposes).
• A payment processor, when payments are enabled.

We do not sell your personal information. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and security of users and the Service. Some providers may process data outside your province or outside Canada, where it may be subject to foreign law.

We keep personal information only as long as necessary for the purposes described here or as required by law — for example, to operate your account, maintain auction and transaction records, resolve disputes, and meet legal and audit obligations. When no longer needed, it is deleted or anonymized.

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections and hashed credentials. No system is perfectly secure; we cannot guarantee absolute security, and you are responsible for protecting your account credentials.

Subject to applicable law, you may request access to or correction of your personal information, and you may withdraw consent to certain uses (which may limit your ability to use the Service). You can manage much of your information directly in your account settings. To make a request, or to complain about how we handle your information, contact our Privacy Officer below. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy from time to time. Changes are reflected by the “Last updated” date above and, where material, by additional notice.

For privacy questions or requests, contact our Privacy Officer at [PRIVACY CONTACT EMAIL], or by mail at [LEGAL ENTITY NAME], [BUSINESS MAILING ADDRESS].