Privacy Policy

1. Controller and contact

The controller is Anopia Tech EOOD (Анопия Тех ЕООД). For questions and requests under this policy write to contact@anopiatech.com or to the address above.

2. Data we process

What we process depends on how you interact with us:

• Website visitors: technical visit data (pages, device, approximate country), aggregated by our analytics only after your consent (see the Cookie Notice).
• Contact form: name, dealership, phone, email, city, cars sold per month and your message.
• Platform users: email, name, phone, role and dealership; activity data (which cars you priced, published or removed and when); your Mobile.bg and Facebook credentials, stored encrypted; support correspondence.
• Platform logs: IP address, request id, errors — for security and troubleshooting.
• Vehicle data from auctions and dealers (VIN, photos, specifications), which is normally not personal data.

3. Purposes and legal bases

We use the data for these purposes on these bases:

• Providing the Service — accounts, workspace, publishing listings, share texts, CRM, analytics (performance of a contract, Art. 6(1)(b) GDPR).
• Answering contact requests and preparing an offer (pre-contractual steps, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f)).
• Security, abuse prevention, logs and backups (legitimate interest, Art. 6(1)(f)).
• Website visit analytics (consent, Art. 6(1)(a) — withdrawable at any time).
• Accounting and tax obligations (legal obligation, Art. 6(1)(c)).

4. Cookies and analytics

On the public pages we use only essential cookies (sign-in session, your stored cookie choice) and, after consent, Vercel Analytics — cookieless analytics without cross-site tracking. Details are in the Cookie Notice.

5. Who we share data with

We do not sell personal data. We share it only with providers that process data on our behalf and instructions, with the platforms you publish to on your instruction, and with authorities where the law requires.

6. Transfers outside the EU

Data is stored primarily in the European Union. Some providers (e.g. Vercel, Resend, Meta) may process data in the USA; in those cases we rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

7. How long we keep data

We keep data only as long as needed for the purposes above:

• Accounts and platform data — while the dealership uses the Service and up to 12 months after termination (unless exported or deleted at your request).
• Contact form requests — up to 24 months.
• Technical logs — up to 90 days; backups — up to 30 days.
• Accounting records — for the statutory period (normally 10 years).

8. Security

We apply technical and organisational measures: encrypted connections (TLS), encrypted storage of third-party credentials, database-level isolation of each dealership’s data, role-based access control and activity logging. No system is completely secure and we cannot guarantee absolute security.

9. Your rights

You may request access to your data, rectification, erasure, restriction of processing and portability, object to processing based on legitimate interest, and withdraw consent at any time. Write to contact@anopiatech.com; we answer within one month.

You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with your local supervisory authority.

10. Dealership client data (we act as processor)

Dealerships enter data about their clients in the CRM module (names, phones, emails, notes, associated cars). For that data the dealership is the controller and decides the purposes; we process it only on its instructions, never for our own purposes, and delete it after the agreement ends. If you are a dealership’s client and want to exercise your rights, contact the dealership; we will assist it.

On request we enter into a data processing agreement under Art. 28 GDPR with the dealership.

11. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data.

12. Changes

We may update this policy. The current version is published here with the date of the last change; material changes are announced to platform users.

13. Contact

Anopia Tech EOOD (Анопия Тех ЕООД), UIC 204731570, 21 Han Asparuh St., Montana 3400, Bulgaria. Email: contact@anopiatech.com.