Privacy Policy

Clockwork Auto is based in Brampton, Ontario. This Privacy Policy explains how we collect, use, store, and protect personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

When you register for a dealer account, we collect:

• Business registration information: business name, OMVIC registration number, dealer license number, HST number
• Contact information: primary contact name, email address, phone number, business address
• Identity verification documents: government-issued photo ID
• Account credentials: email address and hashed password (passwords are never stored in plain text)

When you use the platform, we collect:

• Auction activity: listings created, bids placed, auctions won
• Transaction records: payment amounts, Stripe transaction identifiers
• Usage data: platform activity logs for security and compliance purposes

We use the information collected to:

• Verify dealer eligibility and process account applications
• Facilitate auction listings and bidding on the platform
• Process payments through Stripe
• Send transactional notifications (bid updates, auction results, payment confirmations)
• Comply with OMVIC requirements and Ontario motor vehicle dealer regulations
• Investigate disputes and enforce platform terms

Dealer account data, auction records, bid history, and payment records are stored in Supabase, a cloud database service. Data is stored in Supabase's infrastructure. Identity documents are stored in a private, access-controlled storage bucket and are accessible only to platform administrators.

Supabase operates with industry-standard encryption at rest and in transit. Access to data is controlled through row-level security policies that restrict each dealer to only their own records.

Payment processing is handled by Stripe, Inc. Clockwork Auto does not store full card numbers, CVV codes, or complete payment credentials. We store only Stripe payment intent identifiers and transaction status information.

Stripe's privacy practices are governed by their own privacy policy. By using the payment features of this platform, you acknowledge Stripe's data handling practices.

Transactional emails are sent through Resend, an email delivery service. Email addresses are transmitted to Resend solely for the purpose of delivering transactional notifications you have opted into by creating an account.

We do not sell, rent, or share dealer personal information with third parties except:

• With your explicit consent (e.g., sharing contact information with a winning bidder)
• As required by law, regulation, or a valid legal process
• With our service providers (Supabase, Stripe, Resend) solely for service delivery purposes

Dealer business names and OMVIC numbers are visible to other approved dealers on the platform for the purpose of evaluating sellers. Personal contact information is shared only with a winning bidder after a successful auction close.

Account information is retained for the duration of your active account. If your account is closed, we retain transaction records for seven years to comply with tax and business record requirements under Ontario and federal law.

Identity documents uploaded during registration are retained for the duration of the account and for two years following account closure.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent to non-essential data use
• Request deletion of your account data (subject to legal retention obligations)

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (TLS), row-level database security, private access-controlled storage for identity documents, and role-based access controls for platform administrators.

For privacy inquiries, contact Clockwork Auto at [email protected]. We are located in Brampton, Ontario.