Privacy Policy.

When you register an account, list a vehicle, or contact a dealer through cardeals, we collect information you voluntarily provide, including: • Full name, email address, and phone number • Profile photo and account preferences • Vehicle listing details (make, model, year, price, images, location) • Messages sent through our in-app messaging system • Payment information when purchasing premium listing features (processed securely via third-party payment processors — we do not store card numbers) • Identity documents submitted during dealer verification

When you use our platform, we automatically collect certain technical data to operate and improve our services: • Device type, operating system, and browser information • IP address and approximate geographic location (city/region level) • Pages visited, features used, and time spent on the platform • Search queries, filter selections, and listing interactions • Referring URLs and how you arrived at cardeals • Crash reports and performance data from our mobile application

If you choose to sign in using Google or other OAuth providers, we receive your name, email address, and profile picture from that provider in accordance with the permissions you granted. We do not receive your passwords from third-party services.

We use your information to provide and maintain our services: • Creating and managing your user account • Displaying vehicle listings and connecting buyers with sellers • Processing dealer verification and badge assignments • Enabling in-app messaging between buyers, sellers, and dealers • Sending transactional notifications (listing published, message received, etc.) • Processing payments for premium features

We analyze usage patterns to improve the platform and personalize your experience: • Recommending vehicles based on your search history and saved preferences • Optimizing search results and filter relevance • Improving our AI features including the chat assistant and auto-suggestions • Understanding which features are most valuable to our users • Detecting and preventing fraud, fake listings, and spam

With your consent, we may send: • Weekly digest of new listings matching your saved searches • Platform announcements and new feature updates • Tips and guides from our car buying and selling resources • Promotional offers for premium services You can opt out of marketing communications at any time through your account settings or by clicking "Unsubscribe" in any email we send.

cardeals does not sell, rent, or trade your personal information to third parties for their marketing purposes. Full stop.

By nature of a marketplace, some of your information is visible to other users: • Your display name and profile photo are visible to users you communicate with • Vehicle listing details, including location (at city/district level), are visible to all users browsing the platform • Your dealer profile, if applicable, is publicly visible to buyers • Private contact details (phone, full address) are only shared with users you explicitly choose to contact

We work with trusted third-party companies to operate our platform. These providers access your data only as needed to perform their specific service: • Cloud hosting and database services (data storage and processing) • Payment processors (handling secure transactions) • Analytics providers (understanding platform usage — data is aggregated/anonymized) • Email and SMS delivery services (sending notifications) • Map and location services (displaying vehicle and dealer locations) • AI/ML model providers powering our chat assistant features All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

We may disclose your information if required by law, court order, or government authority in Ethiopia or applicable international jurisdiction. We will notify you of such requests where legally permitted.

We implement industry-standard security measures to protect your information: • All data transmitted between your device and our servers is encrypted using TLS 1.3 • Passwords are hashed using bcrypt and never stored in plain text • Database access is restricted to authorized personnel on a need-to-know basis • Regular security audits and vulnerability assessments are conducted • Payment processing is handled by PCI-DSS compliant third-party processors • Our infrastructure is hosted on enterprise-grade cloud platforms with built-in security controls

While we take every reasonable precaution, no system is 100% secure. You should: • Use a strong, unique password for your cardeals account • Never share your login credentials with anyone • Log out of shared devices after use • Report any suspicious activity on your account immediately to hello@ptgr-cars.com

In the unlikely event of a data breach that may affect your personal information, we will notify affected users within 72 hours of discovery via the email address registered to your account, and take immediate steps to contain and mitigate the breach.

You have the following rights regarding your personal information: • Right to Access — Request a copy of all personal data we hold about you • Right to Correction — Update or correct inaccurate information in your account • Right to Deletion — Request deletion of your account and associated personal data • Right to Portability — Receive your data in a structured, machine-readable format • Right to Restriction — Request that we limit how we process your data in certain circumstances • Right to Object — Opt out of marketing communications and certain types of data processing • Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time

You can exercise most rights directly through your account settings. For requests that require our direct assistance: • Email us at hello@ptgr-cars.com with the subject line "Privacy Request" • Include your full name and registered email address • Specify which right you wish to exercise and any relevant details We will respond to all verified requests within 30 days. We may need to verify your identity before processing certain requests.

We use cookies and similar tracking technologies to operate and improve our platform: • Essential Cookies — Required for the platform to function (login sessions, security tokens). Cannot be disabled. • Functional Cookies — Remember your preferences such as saved filters, display settings, and recently viewed vehicles. • Analytics Cookies — Help us understand how users navigate the platform so we can improve it. Data is aggregated and anonymized. • Marketing Cookies — Used to show relevant cardeals promotions. You can opt out at any time.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality, such as keeping you logged in. You can also opt out of analytics tracking by adjusting your account privacy settings.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically: • Active account data: Retained for the duration of your account • Vehicle listing data: Retained for 2 years after a listing expires or is removed • Message history: Retained for 1 year to assist with dispute resolution • Transaction records: Retained for 7 years for financial and legal compliance • Analytics data: Retained in anonymized, aggregated form indefinitely

When you delete your account, we will permanently remove your profile, personal details, and associated data within 30 days, except where retention is required by law (e.g., financial records) or legitimate business interests (e.g., fraud prevention). Deleted data cannot be recovered.

If you have questions, concerns, or requests related to your privacy and personal data, please reach out: • Email: hello@ptgr-cars.com (subject: "Privacy") • Phone: +251 000-0000 • Address: cardeals, Kazanchis, Addis Ababa, Ethiopia We aim to respond to all privacy-related inquiries within 5 business days.

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the relevant data protection authority in Ethiopia. We encourage you to contact us first so we can address your concern directly.