Privacy Policy

GCC Car Deals (“we”, “us”, “our”) operates the website dealers.gcccardeals.com, the business side of GCC Car Deals: the Dealer Terminal for dealers and the Data API for insurers, lenders, claims firms and other businesses. The Data API is provided by DealersCloud under the GCC Car Deals name. This Privacy Policy explains what information we collect when you use the site, how we use it, who else handles it, and the choices you have.

Information we collect

You can read the public pages (home, plans and prices, how it works, the Data API plans, about, contact, this policy and the terms) and open the free previews of the dashboard and the vehicle report without an account.

Like most websites, we automatically receive standard technical information your browser sends — such as your IP address, device and browser type, the referring page and the pages you view. We use this to operate the site, measure aggregate usage and keep the service secure.

Buying or trying the Dealer Terminal or the Data API involves the following information:

• your email address, for sign-in and for the subscription. You sign in with a 6-digit code that we email to you and that you type on the sign-in page (an account that has a password can also use it). Asking for a code for an address that has no account creates one;
• for each Dealer Terminal or Data API subscription: its plan, billing period, status and the date it renews or ends, the email address given at checkout, and the Stripe references that link it to your payments. For the Dealer Terminal we also keep the dealership name if you enter one, any access we granted you ourselves, when you last opened it, and which version of the Terms you accepted at checkout and when;
• for the Data API free trial: your email address, the plan, billing period and market you chose, the domain of your address (the part after the @), when you accepted the API Terms, and the trial's subscription, which records when it ends and whether its first payment was made. A trial needs a confirmed work email address: we read the domain to refuse personal mailboxes such as gmail.com and to give each company one trial. It also needs a payment card, added on Stripe's checkout page: nothing is charged during the trial, and the plan you chose is charged when it ends unless you cancel before. A few days before it ends we email you a reminder of the charge to come;
• for Data API keys and usage: which version of the API Terms you accepted and when, the first characters of each API key (the full key is shown to you once, and we keep only a one-way fingerprint of it), and a record of each API call with its time, the endpoint and what it asked for, such as the make, model, model year and date of a valuation. We use these records to count and limit your usage, to bill you and to investigate abuse.

Payments are made on Stripe's own checkout and billing pages: your card details go to Stripe and never reach our servers. Stripe tells us the status of the subscription and the email address used for billing.

Cookies and analytics

Signing in sets cookies that keep you signed in; your account does not work without them. They last up to 400 days, are renewed while you use the console, and are removed when you sign out. Starting a checkout sets a cookie that lasts 24 hours and lets only the browser that started the checkout see the new subscription's access or API key on the page after payment.

We use cookies — small files stored by your browser — to run the site and to measure aggregate usage. On the console's public pages (home, pricing, how it works, about, contact, sign-in, this policy and the terms), the free previews of the dashboard and the vehicle report, the pages after payment and the Data API pages (plans, free trial and dashboard) this includes Google Analytics, with the same cookies as gcccardeals.com; it records visits (the pages viewed and where visitors came from, never what you type into a search box), trial starts, checkouts and purchases, which we share with Google Ads to measure our advertising. When measurement is permitted, an ad or tagged campaign arrival on either public site is kept in the shared gcc_attr cookie. A checkout retains that click identifier and campaign tags, the click capture time and the consent policy, source and time with your Stripe subscription, so we can tell which ads lead to sales. Your choice on the main site is shared here in the preference cookie gcc_consent for up to 12 months. Visitors in the European Economic Area, the United Kingdom and Switzerland are measured without analytics cookies unless they have accepted there. Internal QA is excluded from advertising outcomes. On the sign-in, free-trial and checkout pages it also records which step of signing in, starting a free trial or checking out was reached or failed, never the address or the text you type. The Dealer Terminal itself, once you subscribe, is not measured. Google Analytics keeps event-level data for no more than 14 months. The dealer console shows no third-party advertising.

The consumer site at gcccardeals.com may show ads served by Google AdSense on its UAE and Saudi Arabia pages; its own Privacy Policy explains the advertising cookies used there and how to opt out (Google Ads Settings at https://www.google.com/settings/ads , https://www.aboutads.info/choices ).

To learn how Google handles data on sites that use its services, see https://policies.google.com/technologies/partner-sites .

How we use information

• To provide, operate and maintain the site;
• To run your account and subscriptions: sign-in, billing, API keys, usage limits and support;
• To understand aggregate usage and improve our analytics;
• To measure how well our own advertising works;
• To detect, prevent and address technical issues, abuse or fraud.

We do not sell your personal information, and we do not use it to show you advertising on the dealer console.

Data sources and outbound links

GCC Car Deals links to publicly available car listings on third-party websites and sends you to the original listing — we never mirror it. We do not control, and are not responsible for, the content or privacy practices of those external websites.

Third-party processors

We rely on third-party providers to host the site and its databases, to run sign-in, to take payments and to measure usage. Railway hosts the site and its databases, Cloudflare carries the site's traffic, Supabase runs account sign-in, Resend sends the sign-in code emails and the reminder before a free trial ends, Stripe handles payments and Google Analytics measures usage on the pages listed above. These providers process data on our behalf under their own privacy policies. We do not give your personal information to anyone else, except where the law requires it.

How long we keep information

We keep account, subscription and billing records for as long as your account exists, and afterwards for as long as we need them for accounting, tax and disputes. We keep the records of API calls for as long as we need them to count usage, bill it and investigate abuse. A free-trial record is kept so that the same company is not given a second trial. Google Analytics keeps event-level data for the period given above.

Your choices and rights

You can block or delete cookies in your browser settings, and stop Google Analytics from measuring your visits with Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout . Signing in needs cookies, so you cannot use your account without them, and some other features may not work correctly. To see, correct or delete the personal information we hold about you, or to close your account, email hello@gcccardeals.com. We will act on your request unless the law requires us to keep the information.

Children's privacy

GCC Car Deals is a business tool intended for car dealers and other businesses and is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact us

If you have any questions about this Privacy Policy, or want to use the choices above, email us at hello@gcccardeals.com.