Privacy Policy

1. Who is responsible for your data?

The data controller for the WeBuyCars MZ platform is the operator of the WeBuyCars MZ service. If you have questions about this policy or your personal data, contact us using the details in Section 15.

2. Scope of this policy

This policy covers personal data processed when you:

• Install or use the We Buy Cars mobile app;
• Create or manage an account as a buyer, private seller, or dealer;
• Browse listings, save favourites, or create vehicle advertisements;
• Make or receive payments related to listings or dealer subscriptions;
• Use the dealer or administration web portal;
• Contact us for support.

3. Information we collect

We collect only the information needed to operate the marketplace, authenticate users, publish listings, and process payments. The categories below may apply depending on how you use the service.

3.1 Account and identity information

• Mobile phone number (required for buyer accounts; used for sign-in and SMS verification codes);
• Email address (required for dealer portal accounts; optional for some buyer accounts);
• Password (stored in hashed form — we never store plain-text passwords);
• Full name and province (profile information);
• User role (e.g. buyer, private seller, dealer staff, administrator).

3.2 Listing and marketplace content

• Vehicle details you provide (make, model, year, mileage, price, fuel type, transmission, condition, colour, body type, description);
• Province or general location you choose for a listing (we do not collect precise GPS coordinates);
• Photos and images you upload for listings or dealer branding;
• Listing status (draft, published, pending payment, etc.).

3.3 Dealer and business information

• Business or dealer name, address, province, logo, and public contact details shown to buyers;
• Dealer staff accounts and invitation records;
• Subscription package, listing allowance usage, and billing status.

3.4 Payment information

Listing publication fees and dealer subscription payments are processed by our payment partner (PaySuite). We receive transaction references, amounts, currency, payment status, and payment method type (such as M-Pesa, E-Mola, or card). We do not store full card numbers or mobile-money PINs on our servers. Payment processing is subject to the payment provider’s own privacy and security practices.

3.5 Usage and preference data

• Saved listings (favourites) and saved search filters;
• In-app actions necessary to provide the service (e.g. listings you create or manage);
• Support requests and communications with us.

3.6 Technical and device information

We do not use your data for cross-app advertising profiles. We do not sell your personal information.

• Internet connection (the app requires network access);
• Device permissions you grant for camera and photo library access when uploading listing images;
• Standard server and security logs (such as IP address, browser or app version, timestamps, and error diagnostics) used to keep the service secure and reliable.

4. How we use your information

• Create and manage your account and authenticate you (including SMS one-time codes);
• Publish, display, moderate, and manage vehicle listings on the marketplace;
• Enable buyers to contact sellers and dealers through details shown on listings;
• Process payments for listing publication and dealer subscriptions;
• Provide customer support and respond to your requests;
• Enforce our terms, prevent fraud, and protect the security of the platform;
• Comply with applicable legal obligations;
• Improve reliability and fix errors (using aggregated or technical diagnostics where possible).

5. Legal bases for processing

Where applicable, we rely on one or more of the following legal bases:

• Performance of a contract — to provide the marketplace, accounts, listings, and payments you request;
• Consent — where you voluntarily provide optional information or agree to specific processing (you may withdraw consent where applicable);
• Legitimate interests — to secure our platform, prevent abuse, and improve the service, balanced against your rights;
• Legal obligation — where we must retain or disclose information to comply with law.

6. How we share information

We share personal data only as described below. We do not sell personal data.

• Other users — listing information you choose to publish (including photos, price, vehicle details, and contact options) is visible to marketplace visitors;
• Service providers — trusted processors that help us run the platform, including Supabase (authentication, database, and file storage) and PaySuite (payment processing);
• Google Play — if you install the app from Google Play, Google’s terms and policies apply to that distribution channel;
• Legal and safety — regulators, courts, or law enforcement when required by law or to protect rights, safety, and security;
• Business transfers — if our business is reorganised, merged, or sold, data may transfer subject to equivalent protections.

7. International data transfers

Our infrastructure providers may process data in data centres outside Mozambique, including in the European Union or United States. Where data is transferred internationally, we rely on appropriate safeguards offered by our providers (such as standard contractual clauses or equivalent mechanisms) and limit transfers to what is necessary to operate the service.

8. Data retention

We keep personal data only as long as necessary for the purposes described in this policy:

• Account data — while your account is active and for a reasonable period after deletion to resolve disputes, enforce terms, and meet legal obligations;
• Listings — while published or until you delete them; backup copies may persist for a limited technical retention period;
• Payment records — as required for accounting, tax, and anti-fraud purposes;
• Security logs — typically for a limited period unless needed for an investigation.

9. Your rights and choices

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data (many fields can be updated in the app or by contacting us);
• Request deletion of your account and associated data, subject to legal retention requirements;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a data protection authority.

10. Account and data deletion

You may request account deletion or removal of specific listings by contacting us at the email below. We will verify your identity before processing deletion requests. Some information may be retained where required by law, for fraud prevention, or to resolve outstanding payment or dispute matters.

11. Children’s privacy

WeBuyCars MZ is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us and we will take steps to delete it.

12. Security

We use technical and organisational measures appropriate to the nature of the data, including encrypted connections (HTTPS/TLS), access controls, authenticated APIs, and secure password handling through our authentication provider. No method of transmission or storage is 100% secure; please use a strong password and keep your verification codes confidential.

13. Cookies and similar technologies (web portal)

The dealer and administration web portal uses essential cookies and local storage to maintain your sign-in session, remember language preferences, and protect the service. We do not use third-party advertising cookies on the portal. You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the “Effective date” above. Continued use of the app or portal after changes take effect constitutes acceptance of the updated policy where permitted by law.

15. Contact us

For privacy questions, data access requests, or account deletion requests, contact: