These Terms & Conditions govern your use of CarFinder, a Zimbabwe-focused marketplace that helps people discover vehicles and contact sellers. By browsing the site, creating an account, saving a listing, or submitting a listing, you agree to these terms. If you do not agree, do not use the service.

1. What CarFinder does

CarFinder provides search, listing, messaging and moderation tools. CarFinder is not the seller, buyer, owner, broker, insurer, financier, mechanic, transporter or agent for any vehicle unless we expressly say so in writing. A listing is an advertisement supplied by a user and is not an offer or guarantee from CarFinder.

2. Accounts and accurate information

You must provide information that is accurate, current and not misleading. Keep your password private, use a unique password, and tell us promptly if you suspect unauthorised access. You are responsible for activity performed through your account. We may require confirmation, suspend access, or remove content where information is false, unsafe, unlawful or breaches these terms.

3. Listings and transactions

Sellers must have the right to advertise the vehicle and must describe its condition, ownership, mileage, import or clearance status, price, rental terms and photographs honestly. Sellers must not upload another person’s personal information, forged documents, stolen images, malware, or content that infringes another person’s rights.

CarFinder does not verify title, roadworthiness, mileage, identity, availability, ownership, pricing, import status or the truth of every statement in a listing. Before paying or signing anything, independently inspect the vehicle, verify the seller and documents, confirm the total cost, and obtain professional or official advice where appropriate. Never send money, a password, a one-time code or identity documents merely because a message appears to come from CarFinder.

4. Rental listings

Rental rates and periods are supplied by the rental provider. Confirm deposits, insurance, mileage limits, fuel rules, driver requirements, cancellation rules, damage responsibility and collection arrangements directly with the provider before committing. CarFinder is not a party to the rental agreement.

5. Acceptable use

You must not scrape the service, probe or bypass access controls, upload harmful code, impersonate another person, harass users, manipulate reviews, send spam, use the service for fraud, or use contact details for unrelated marketing. We may moderate, reject, hide or remove content and may preserve information where necessary for safety, legal compliance or dispute handling.

6. User content

You retain ownership of content you submit. You give CarFinder a non-exclusive, worldwide, royalty-free licence to host, reproduce, resize, display and distribute that content for operating, moderating and promoting the service. You confirm that you have the rights needed to grant this licence. We may remove content when required by law, a rights-holder request, or a safety decision.

7. External services

Links and buttons may open services such as WhatsApp, email, Supabase-hosted resources or other third-party websites. Those services have their own terms and privacy practices. CarFinder does not control or guarantee third-party availability, security or content.

8. Availability and liability

We aim to keep CarFinder available and secure, but the service may be changed, interrupted or unavailable. To the maximum extent allowed by law, CarFinder is provided without guarantees that listings are accurate, complete, current, safe or suitable for a particular purpose. Nothing in these terms excludes liability that cannot lawfully be excluded, including liability for fraud or deliberate misconduct.

9. Changes and termination

We may update these terms as the service or law changes. The latest version will appear on this page with a new effective date. We may suspend or close accounts and remove listings when reasonably necessary for security, legal compliance, abuse prevention or protection of users.

10. Governing law and contact

These terms are governed by the laws of Zimbabwe, subject to any mandatory rights you have under applicable law. Questions or complaints can be sent to hello@carfinder.co.zw. This document is a practical website draft and should be reviewed by a Zimbabwe-qualified lawyer before being relied on as the business's final legal contract.

This Privacy Policy applies to CarFinder’s website, accounts, vehicle listings, saved listings, seller dashboard and related communications. CarFinder is the data controller for information it decides how and why to process. We process information lawfully, fairly and transparently and limit it to what is needed for the purposes described here.

1. Information we collect

Depending on how you use the service, we may collect your name, email address, WhatsApp or telephone number, city, account identifiers, seller type, vehicle details, listing photographs, messages or enquiries you choose to send, favourites and saved searches. We also receive technical information needed to operate the site, such as browser, device, security events and approximate usage information. We do not ask you to submit passwords, national ID numbers, payment-card details, health information or other sensitive information in a listing.

2. Why we use it

We use information to create and secure accounts, publish and moderate listings, show seller contact details where a listing is publicly visible, respond to enquiries, provide favourites and saved searches, prevent fraud and abuse, maintain records, improve reliability, and comply with legal obligations. We use consent where we ask for it, perform the service you request, comply with law, and pursue legitimate operational and safety interests that do not override your rights.

3. What is public

An approved active listing may display vehicle details, photographs, city, price and selected seller information such as display name, seller type and a WhatsApp contact link. Pending, rejected and removed listings are not public through the marketplace. Do not place information in a listing that you expect to remain private.

4. Sharing and service providers

We do not sell personal information. We share information only when needed to provide the service, protect users, enforce our terms, respond to lawful requests or comply with law. CarFinder uses Supabase for authentication, database and private image storage, GitHub Pages for static website hosting, and user-selected communication services such as WhatsApp or email. These providers may process information outside Zimbabwe. We seek appropriate security and legal safeguards for processors and cross-border transfers.

5. Retention

We keep account, listing, moderation and security records only for as long as reasonably necessary for the purposes collected, legal compliance, safety, dispute resolution and legitimate operational records. Public listings may remain in backups or audit records after removal for a limited period. We periodically review and delete or anonymise information that is no longer needed.

6. Your rights

Subject to applicable law and reasonable verification, you may ask what personal information we hold about you, request correction of inaccurate or misleading information, object to or request deletion of information where applicable, withdraw consent where processing relies on consent, or complain about our handling of your information. Send requests to hello@carfinder.co.zw. We may need to keep certain records where the law permits or requires it.

7. Security and incidents

We use HTTPS, Supabase row-level security, private image storage, signed image URLs, access controls, moderation, upload limits and input validation. No internet service is risk-free, and we cannot promise that it can never be attacked. If we become aware of a personal-data breach, we will investigate, contain it and make notifications required by applicable law, including the applicable notification to the Zimbabwe Data Protection Authority.

8. Cookies and local storage

CarFinder uses browser local storage for optional features such as saved searches and comparison selections. We do not use those features to store passwords. Your browser may also store essential authentication data required by Supabase. You can clear local storage and browser data at any time, although saved features or sign-in may stop working.

9. Children and policy changes

The service is not directed to children. Do not create an account or submit another person’s information without authority. We may update this policy when our practices, providers or legal duties change. The effective date at the top of this page will change when a material update is published.

10. Contact

For privacy questions, access, correction, deletion or security concerns, contact hello@carfinder.co.zw. This policy is a practical website draft based on the Zimbabwe Cyber and Data Protection Act and should be reviewed by a Zimbabwe-qualified privacy lawyer or data-protection professional before final adoption.

Security controls

CarFinder uses HTTPS, a publishable Supabase client key only in browser code, row-level security and database triggers for access decisions, private listing-photo storage, signed photo URLs, restricted upload types and sizes, admin moderation, bounded form fields, HTML escaping and safe external-link handling. Private service-role credentials are not stored in the website.

Safe use

Use a unique password, enable email confirmation when offered, do not share one-time codes, avoid sending identity or payment documents through listing descriptions, and verify a vehicle and seller independently. CarFinder will not ask for your password or a one-time authentication code by WhatsApp.

Report a vulnerability

If you find a suspected security issue, email hello@carfinder.co.zw with the affected page, a short description, safe reproduction steps and the date and time. Do not access, download, alter or disclose other users’ information. We will acknowledge a credible report, investigate, contain the issue and communicate material updates where appropriate.

Limits

These measures reduce risk but cannot guarantee that a public internet service will never be attacked or that every third-party service will remain available. Security is a shared responsibility between CarFinder, its providers and users.