Privacy policy

Last updated 1 November 2026.

Karsabi (karsabi.com and the Karsabi iPhone app) is a UAE site for car reviews and a marketplace for enthusiast cars and parts. This page explains, in plain English, what information we collect, why we collect it, who helps us process it, and what you can do about it. If anything is unclear, email hi@karsabi.com.

The short version

You can read Karsabi without an account. We don't sell your information and we don't show third-party advertising based on you.
If you create an account, list a car or part, or send us a form, we keep what you give us so we can run that service.
Sellers' phone numbers are never printed on listing pages; a buyer sees one only after tapping Call or WhatsApp.
Our analytics don't use cookies unless you agree, and never record your name, email, phone number or what you type.
You can delete your account, with your listings and photos, from your account settings on the website or in the app.

What we collect and why

Your account

When you sign up we store your name, email address and a password (handled by our login provider; we never see it in plain text). Your profile keeps your display name and, if you add them, your phone and WhatsApp numbers and the notification choices from your settings (listing updates, saved-search alerts, newsletter). We use this to sign you in, show your name on your listings, prefill your contact details when you sell, and send the emails you've chosen.

In the app you can also sign in with Apple. Apple tells us your name (the first time only) and either your email address or a private relay address that forwards to you, plus an identifier for your Apple Account that is unique to Karsabi, which we keep so we recognise you next time; we never see your Apple ID password. If you delete your account, we ask Apple to end the sign-in link with Karsabi.

If you had an account on the old Karsabi website, we imported your profile and listings, and they are linked back to you when you sign up and confirm the same email address.

Listings you post

For a car or part listing we store what you enter: the title, price, details such as make, model, year, mileage and condition, the description, the location, and your photos. These are shown publicly once our team approves the listing.

Some details are kept private and are never shown on the listing page: your phone and WhatsApp numbers, the car's full VIN (only the last few characters are shown), and any registration document you upload, which goes into private storage that only our team can open. A buyer gets your number only by tapping Call or WhatsApp on a live listing.

Contacting sellers

When someone taps Call or WhatsApp, we record that a number was revealed for that listing, with a scrambled (hashed) form of their internet address, so we can stop people collecting numbers in bulk. If you send a seller a message through Karsabi, we store your name, phone number and message so they can be passed on.

Forms you send us

The Contact Us form, the photographer request and the test-drive request ask for your name, email address and message, and for the two requests your phone number and details about the car. We store them, email them to our team at hi@karsabi.com so we can reply, and keep a hashed internet address and your browser's description (user agent) to limit spam.

Saved cars, searches and alerts

If you save a car or a search, or switch on an alert, we store it with your account so you can find it on any device and so we can tell you about new matching cars. Alerts you set up by email without an account store that email address and the search.

If you join the newsletter (from the site, the app, your settings, or by ticking the box on a guide), we store your email address and where you signed up. Every newsletter has an unsubscribe link, and you can switch it off in your settings.

Car Buying Guide and Pricing Guide

These guides use AI. We send your answers (for the buying guide: your priorities, passengers, body types and budget; for the pricing guide: the car's make, model, year, mileage and trim) to Anthropic, the company that makes the Claude AI model, to produce your results. Your email address is not sent to Anthropic. We store your answers, the result, the email address you gave us (to email you the result) and a hashed internet address (to limit how often the guides can be used).

Notifications in the app

If you allow notifications for saved-search alerts, the app sends us your device's push token, a code Apple gives the app so it can receive notifications. We store it with your account and use it, through Apple's push service, only to send the alerts you switched on. It is removed when you sign out, and Apple tells us when a token stops working so we can delete it.

Your Garage in the app

The app's Garage keeps your cars (nickname, make, model, year, plate) and their registration, insurance and service dates, so it can remind you before they're due. If you're signed in, your Garage is saved to your account so it follows you to a new phone and appears, read-only, under My garage on the website; if you're signed out, it stays only on your iPhone. Reminders are scheduled on the phone. An unfinished listing you're working on (its details and photos) is saved only on the phone until you send it or discard it, and the app keeps copies of articles and saved cars you've opened so you can read them offline.

Security and limits

To protect accounts and stop abuse, we record failed and successful log-ins and requests for account emails (sign-up, password reset, email change) with a hashed internet address and a hashed email address, and we count requests per address to apply limits. On the website, log-in, sign-up and password reset may use Cloudflare Turnstile, a check that tells people and bots apart without a puzzle.

When something goes wrong or a limit is hit often, our team gets an alert. These alerts carry the kind of event and, at most, a shortened email such as "ar…@example.com", never full messages or passwords.

Analytics

The website and the app use MonoLog, a privacy-focused analytics service, to count page and screen visits, clicks on links and buttons, and actions such as "listing submitted" or "car saved". Without your consent it sets no cookies and stores nothing on your device; your internet address is used only to work out a daily anonymous visitor count and is not stored. Global Privacy Control is respected as "no". In the app, analytics events are linked to a random identifier for the app on your phone and never used for advertising or tracking across other companies' apps. We never send your name, email, phone number, search words, or anything you type into a form. If you're signed in, events can be linked to your account's internal ID (never your email).

Who can see what

Anyone can see an approved listing: its title, price, details, description, photos, the city, and the seller's display name. Sellers' numbers are shared only as described above. Our team can see listings in review, private listing details and registration documents to check listings, and messages sent to us. We share information with authorities only if the law requires it.

How long we keep it

Your account, saved items and settings: until you delete your account.
Your listings and photos: until you delete them or your account. Sold and expired listings stay in your account until then.
Log-in attempt records: we delete these after about a week.
Messages, form submissions, guide requests, newsletter sign-ups and other abuse-prevention records are not yet deleted automatically on a schedule. Email hi@karsabi.com to ask us to remove yours.

Deleting your account

You can delete your account yourself: on the website under your Garage's account settings, or in the app under Settings, Delete account. This removes your profile, all your listings with their photos and documents, your saved cars, saved searches and settings, your app notification tokens, and your login. It can't be undone. In the app you can choose whether to keep your Garage cars on the phone. Staff accounts are removed by an admin.

Deleting your account also takes your email address off the newsletter. For anything else, such as removing a form you sent us, email hi@karsabi.com.

Your choices

See and change your details in your account settings.
Turn listing updates, alerts and the newsletter on or off in your settings, or unsubscribe from any email.
Turn app notifications off in your iPhone's Settings.
Ask us for a copy of your information, to correct it, or to delete it, by emailing hi@karsabi.com.

Children

Karsabi is meant for adults buying and selling cars. Please don't create an account if you're under 18.

The UAE

Karsabi is run from the United Arab Emirates. We aim to handle personal data in line with UAE law, including the UAE's Personal Data Protection Law, and the rules of the stores and services we use.

Changes and contact

If we change this policy we'll update the date at the top, and tell you by email or in the app if the change is significant. Questions or requests: hi@karsabi.com.