Privacy Policy

1. Data Controller

The data controller is BCT Solution, reachable at privacy@bctsolution.com.

2. Data Collected

• Registration data: email, password (hashed), dealership name, vehicle type
• Usage data: pages visited, actions performed, timestamps
• Payment data: processed by Stripe — we do not store banking details
• Technical cookies: authentication, session preferences

3. Purposes

• Providing and maintaining the service
• Managing user accounts and billing
• Improving the service (anonymized analytics)
• Communicating with users (transactional emails)

4. Legal Basis

Processing is based on contract execution (Terms of Service) and user consent for non-essential cookies.

5. Data Retention

Data is retained during service usage, then archived for 90 days after termination, in compliance with legal obligations.

6. User Rights

Under GDPR, you have the right to access, rectify, erase, port, restrict processing, and object.

Exercise these rights by writing to privacy@bctsolution.com.

7. Hosting

Data is hosted in the European Union. Our sub-processors (Stripe, Resend) are GDPR-compliant.

8. Security

We implement technical measures (TLS encryption, bcrypt password hashing, httpOnly JWT) and organizational measures to protect your data.

9. Cookies

We use essential cookies (authentication) and optional cookies (analytics). Manage your preferences via the consent banner.

10. Contact

For data protection inquiries: privacy@bctsolution.com.