Last updated: 9 October 2026
Who we are
CarBidPro LLC (identification code 405698963), N118 Akaki Tsereteli Ave, Tbilisi, Georgia. We run carbidpro.com, the CarBidPro apps (Android, iPhone, Windows and Mac) and the CarBidPro browser extension. We decide how the personal data described here is used, under the Law of Georgia on Personal Data Protection. Questions: [email protected].
What we collect
- Your account: your name, company name, email, phone number, password and language. Passwords are stored hashed, so nobody at CarBidPro can read them. If you are a member of someone's team, your team leader can see the password set for your account on My Team; it is kept encrypted.
- Your identity: when you sign up, a photo or scan of your passport or ID card and your personal number. They are kept on private storage, and only staff who check accounts can open them.
- Cars and money: the vehicles you buy through us, your bids (the amount, the time and where you placed them), invoices, deposits, payments, refunds and credit, and the details of a car's owner that you give us for its documents (name, personal number, phone).
- What you send us: support chat messages, notes, insurance claims, photos and documents you upload.
- Devices and use: the device's name and operating system, an identifier for each app install, your IP address and browser, when you sign in, and the token that lets us send notifications to your phone. Every sign-in and every bid attempt is recorded.
- Cookies: only the ones that keep you signed in and remember your language and light or night mode. We use no advertising cookies and no third-party analytics.
If you unlock the app with your fingerprint or face, that stays on your phone. We never receive it.
Why we use it
- To run your account and our services: bidding, buying, transport, shipping and customs clearance (our contract with you).
- To take payments, refund deposits and keep accounting records (what the law requires of us).
- To confirm who you are, prevent fraud and keep accounts secure (our legitimate interest and our legal obligations).
- To keep you informed: notifications in the app and on your phone (you choose which kinds in Notification settings), and the emails and SMS your account needs, such as sign-up codes and a car you won.
We do not sell your data and we do not use it for advertising.
Who we share it with
Only what each of them needs for their part:
- Auction houses (Copart, IAAI): bids are placed through CarBidPro's own memberships. For a car you win, the auction's documents carry the buyer and owner details needed for it.
- Transport, shipping and customs: carriers, shipping lines, terminals, customs brokers and the Revenue Service of Georgia receive the vehicle details and the owner details needed to move and clear the car.
- Bank of Georgia: card payments. You enter your card on the bank's own page; we never see the full card number.
- Companies that work for us: our servers and hosting, Cloudflare (network and security), our email and SMS providers, Google Firebase (notifications to your phone) and CARFAX (vehicle history reports, by VIN).
- Your team: if you are in a team, the people above you see the team's cars, bids and balances, as the team pages show.
- Authorities: when the law requires it.
Some of these companies keep data outside Georgia, for example in the United States, and protect it under their own terms.
How long we keep it
- Everything is kept while your account is open.
- When your account is deleted, we erase your name, contact details, ID document, photo, notes, devices and sign-in records. Records of cars, invoices, payments and bids are kept for as long as Georgian accounting and tax law requires, without your contact details.
- A sign-up that is never finished is deleted when it expires.
Your rights
You can ask to see the data we hold about you, to correct it, to delete it, to limit how we use it, to object to its use, or to get a copy. Write to [email protected]. We answer within the time the law sets. You can also complain to the Personal Data Protection Service of Georgia (personaldata.ge).
Deleting your account
In the app: More, then Delete account. On the website: Settings, then Delete account. Or on carbidpro.com/delete-account, with your email and password.
Your account is locked at once: it can no longer sign in, and your phones stop getting notifications. We erase it as soon as nothing is owed either way, meaning your deposit has been refunded and your cars have reached you, usually within 30 days. If you change your mind before then, write to us and we will open it again.
Security
Everything travels over encrypted connections (HTTPS). Passwords are hashed, ID documents are on private storage, and staff see only what their role needs. An account is signed in on one device at a time, and every sign-in is recorded.
Children
CarBidPro is for businesses and adults. We do not open accounts for anyone under 18.
Changes
When this policy changes, we update it here with the new date. If a change matters to how your data is used, we also tell you in the app or by email.