Privacy Policy

Last updated: 30 June 2026

JAMEOLAS PTY LTD (ABN 67 641 857 043) trading as CarBuyAgent® is committed to protecting your personal information. This policy explains what information we collect, why we collect it, and how we use and protect it, in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles.

1. What Information We Collect

Information you provide directly

• Name and email address (provided when purchasing a service or submitting a verification)
• Vehicle registration plate and state
• Vehicle odometer reading and asking price
• Facebook Marketplace or Gumtree listing URL (optional)
• Payment information (processed by Stripe — we do not store card details)

Information collected automatically

• Verification codes and associated vehicle check results (stored for 31 days)
• Basic usage data via Vercel analytics (page views, no personal identification)

2. How We Use Your Information

Purpose	Information used	Legal basis
Delivering your CarBuyAgent Verified report	Rego, state, odometer, asking price	Contract performance
Sending your certificate email	Name, email address	Contract performance
Enabling buyer verification lookups	Verification code, check results	Contract performance
Processing payment	Email (passed to Stripe)	Contract performance
Responding to enquiries	Name, email, enquiry details	Legitimate interest
Improving our services	Anonymised usage data	Legitimate interest

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Third Parties We Share Data With

Provider	Purpose	Data shared	Location
AutoGrab	Vehicle data — PPSR, odometer history, market data	Registration plate, state	Australia
Stripe	Payment processing	Email, payment details	USA (Privacy Shield)
Resend	Email delivery	Name, email, certificate content	USA
Vercel	Website hosting and serverless functions	Request data, no PII stored	USA/Global CDN
Upstash	Verification code storage (31-day retention)	Verification code and check results	Singapore (ap-southeast-1)

All third-party providers are bound by their own privacy policies and, where applicable, data processing agreements.

4. Data Retention

• Verification codes and results — automatically deleted after 31 days (matching the verification validity period)
• Email records — retained by Resend for 30 days per their free plan data retention policy
• Payment records — retained by Stripe as required by law (typically 7 years)
• Enquiry emails — retained in our Google Workspace inbox until manually deleted

5. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, contact us at hello@carbuyagent.com.au. We will respond within 30 days.

6. Security

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. Measures include:

• All API keys and credentials stored as encrypted environment variables (Vercel sensitive storage)
• All data transmitted over HTTPS/TLS
• Payment processing handled entirely by Stripe — we never see or store card details
• Verification data stored in encrypted Upstash Redis with automatic expiry

7. Cookies

CarBuyAgent's website uses no tracking cookies and no advertising cookies. Basic session functionality may use browser local storage. We do not use Google Analytics or Facebook Pixel on this site.

8. Children

Our services are not directed at children under 18. We do not knowingly collect personal information from minors.

9. Changes to this Policy

We may update this policy from time to time. The current version will always be available at carbuyagent.com.au/privacy. Material changes will be noted with an updated date at the top of this page.

10. Complaints

If you believe we have breached the Australian Privacy Principles, you may contact us first at hello@carbuyagent.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Contact

Privacy enquiries: hello@carbuyagent.com.au
JAMEOLAS PTY LTD trading as CarBuyAgent® · ABN 67 641 857 043