Privacy policy
Last updated 16 August 2026
Operational draft for launch in Tallinn. An Estonian lawyer should review it before we register the OÜ and go fully public.
Carvo is a request marketplace for car repair in Tallinn, Estonia. This policy explains what personal data we process and why.
Controller
The controller is the operator of carvo.ee in Tallinn, Estonia. The company will be an Estonian private limited company (OÜ); the registry code will be published here when it is registered. Privacy: privacy@carvo.ee. General: hello@carvo.ee.
What we collect
Clients: Google account name and email (if Google shares it), email you type if missing, phone, locale, plate number, vehicle make/model/year, request text, photos, chosen shop and messages. Shops: login email, profile, services, address, website, logo, balance and lead history. Applicants: workshop name, contact, phone, address, services and comment.
Legal basis
We process data to perform the service you ask for (GDPR Art. 6(1)(b)), to run the marketplace and prevent abuse (Art. 6(1)(f)), and where we show a checkbox — on consent (Art. 6(1)(a)), for example storing a shop application or recording GDPR consent on first publish.
How we use it
To create and moderate requests, show them to workshops in Tallinn, send emails about offers, rejections and messages, keep shop balances, and improve the product. We do not sell personal data and we do not use it for unrelated advertising.
Processors
Hosting and database: Supabase. Sign-in: Google. Emails: Resend, if configured. The site may run on Vercel. They process data on our instructions. Vehicle lookup may use a registry provider (currently RegCheck) with the plate number only.
Who sees the request
After an admin approves a request, logged-in workshops see the job, vehicle and photos — not your phone. Your contact and chat open only after you choose a shop. Admins see requests to moderate them.
How long we keep it
Account and request data stay while the account is open and as long as we need them for disputes, accounting and legal duties. You can close a request before a shop is chosen. To delete an account, write to privacy@carvo.ee.
Your rights
You can ask for access, correction, erasure, restriction or a copy of your data, and object to processing based on legitimate interest. You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
Cookies
We use a session cookie to keep you signed in, NEXT_LOCALE for language, and a theme preference. The request draft is stored in your browser, not on our server, until you publish.
Contact
privacy@carvo.ee · Carvo, Tallinn, Estonia.