# Privacy Policy
OpenRoadStore Last updated: May 2026


The short version
We collect your name, email, and listing details to run the marketplace. We don't sell your data. We don't use it for advertising. We store it on Base44's servers in the United States under a proper legal agreement. You can ask us to delete everything at any time. If you're in the EU, you have extra rights and we respect them.


1. Who we are
Plain English: OpenRoadStore is the company responsible for your data. You can contact us directly.

OpenRoadStore ("we", "us", "our") operates the marketplace at openroadstore.com. We are the data controller responsible for the personal information you provide when using our platform. OpenRoadStore is based in Ireland and is subject to Irish and EU data protection law, including the General Data Protection Regulation (GDPR).

Contact: openroadstore2@gmail.com


2. What information we collect
Plain English: We collect what you give us — your name, email, and listing details. We also automatically collect some basic technical info like your IP address.
Information you provide directly:
Account information: display name, email address, phone number (optional)
Listing information: vehicle details, photos, location, price, description, contact preferences
Communication data: messages sent through our in-app messaging system, questions, offers
Payment-adjacent data: if you request a Featured listing or inspection service, we process payment via Stripe. We do not store your card details — Stripe handles this directly.
Consent records: when you agreed to our Terms, with timestamp
Information collected automatically:
IP address and approximate location
Device type and browser
Pages visited and time spent on them
How you found us (referral source)
Information we do NOT collect:
We do not collect payment card numbers or banking details
We do not track you across other websites
We do not use advertising cookies or sell data to advertisers


3. Why we collect it and what we do with it
Plain English: We use your data to run the marketplace, keep it safe, and send you messages about your listings. Nothing else.

Purpose
Legal basis
Creating and managing your account
Contract (you agreed to our Terms)
Displaying your listings to buyers
Contract
Sending messages between buyers and sellers
Contract
Processing Featured listing payments via Stripe
Contract
Preventing fraud and detecting spam
Legitimate interest
Sending operational notifications (new messages, offers)
Legitimate interest
Sending marketing updates (newsletter, platform news)
Consent — you can withdraw anytime
Complying with legal obligations
Legal obligation


We will never use your data for targeted advertising. We will never sell your data to third parties.


4. Who we share your data with
Plain English: We share your data with the companies that help us run the platform. That's it.

Base44 — our application hosting and authentication provider. Your account data and listing data is stored on Base44's servers located in the United States. This transfer is legally covered by Base44's Data Processing Agreement, which incorporates the European Commission's Standard Contractual Clauses (SCCs). Base44 Privacy Policy
Stripe — payment processing for Featured listings and inspection fees. Stripe is PCI-DSS compliant. Stripe Privacy Policy
Email service provider — we use a third-party email provider to send transactional emails (account verification, password reset, listing notifications). They process your email address only for this purpose.
Legal authorities — we will disclose data if required by law, court order, or to protect the safety of our users.

We do not share your data with any other third parties.


5. Contact information on listings
Plain English: If you add your phone number or WhatsApp to a listing, that becomes public. We warn you before you do this. Think carefully about what you share.

When creating a listing, you may choose to display your phone number, WhatsApp number, or email address publicly. We show you a warning before you enable any of these options. Once published, this information is visible to anyone who views the listing, including people who are not registered on OpenRoadStore.

In-app messaging through OpenRoadStore Chat does not expose your personal contact details.


6. How long we keep your data
Plain English: We keep your data while your account is active. If you delete your account, we delete your data within 30 days, except where we're legally required to keep it longer.

Active account data: kept for as long as your account exists
Listing data: kept for 2 years after a listing is marked as Sold or Deleted, for dispute resolution purposes
Messages: kept for 2 years
Payment records: kept for 7 years as required by financial regulations
Deleted accounts: personal data deleted within 30 days of account deletion request, except where legal retention obligations apply


7. Your rights
Plain English: You have real rights over your data. You can see it, correct it, export it, or ask us to delete it. Just email us.

Regardless of where you live, you can:

Access your data — ask us what we hold about you
Correct inaccurate data — update it yourself in your account settings or ask us
Delete your data — close your account and we'll delete everything within 30 days
Export your data — ask for a copy in a readable format
Withdraw consent for marketing emails — unsubscribe link in every email, or email us

If you are in the European Union or EEA, you have additional rights under GDPR:

Right to restrict processing
Right to object to processing based on legitimate interest
Right to lodge a complaint with your local data protection authority

If you are in California, you have rights under CCPA including the right to know, the right to delete, and the right to opt out of the sale of personal information (we don't sell it, but the right applies).

To exercise any of these rights, email us at: openroadstore2@gmail.com. We will respond within 30 days.


8. Cookies
Plain English: We use minimal cookies — just the ones needed to keep you logged in and remember your preferences. No advertising cookies.

We use:

Session cookies — to keep you logged in
Preference cookies — to remember your currency, distance unit, and fuel unit settings
Analytics cookies — basic, anonymised usage statistics to understand how people use the platform (no personal identification)

We do not use advertising cookies, retargeting cookies, or third-party tracking cookies.


9. Security
Plain English: We take reasonable steps to protect your data. No system is perfect, but we follow standard best practices.

We use industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access controls. We rely on Base44's infrastructure security, which is maintained to industry standards.

If we become aware of a data breach that affects your personal data, we will notify you and relevant authorities as required by law within 72 hours of becoming aware.


10. Children
OpenRoadStore is not directed at anyone under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.


11. International data transfers
Plain English: Our servers are in the United States. If you're in the EU, your data is still protected by a proper legal agreement.

OpenRoadStore uses Base44 to host our application and manage user authentication. All personal data is transferred to and stored on Base44's servers located in the United States. This international data transfer is legally safeguarded by Base44's standard Data Processing Agreement, which incorporates the European Commission's Standard Contractual Clauses (SCCs).


12. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or by a prominent notice on the platform before the changes take effect. The date at the top of this page shows when it was last updated.


13. Contact us
For any privacy questions, data requests, or concerns:

Email: openroadstore2@gmail.com Response time: within 30 days, usually much faster



This privacy policy was last reviewed in May 2026.