Privacy policy

Last updated: 18 July 2026 · AutoSweep is in beta

This policy explains what personal data AutoSweep collects, why, and what rights you have over it. It covers information about you — not the car listings themselves, which are public marketplace data about vehicles.

Who we are (data controller)

AutoSweep is operated by AutoSweep Ltd, a company registered in England & Wales (company number 17297450), registered office 82a James Carter Road, Mildenhall, IP28 7DE, United Kingdom (“we”, “us”). We are the data controller for the personal data described below.

Contact us about privacy or your data at info@autosweep.co.uk.

We are registered with the UK Information Commissioner’s Office (ICO), registration number 00014830852.

What we collect

• Account data: your email address and a password (stored hashed by our authentication provider — we never see it in plain text).
• Feature data: the searches you save, the alerts you set, and your subscription status.
• Technical data: basic logs (such as IP address, browser type and timestamps) that we keep to run, secure and troubleshoot the service.

We do not collect your card details — payments are handled entirely by Stripe. AutoSweep is not intended for anyone under 18, and we do not knowingly collect data from children.

How we use your data, and our lawful basis

Under UK data protection law we must have a lawful basis for each use of your data. Ours are:

• Signing you in, saving your searches, and running your account — to perform our contract with you.
• Sending the alerts you asked for — to perform our contract with you / with your consent, which you can withdraw at any time.
• Account emails (verification, welcome, service and billing notices) — to perform our contract with you and to meet our legal obligations.
• Taking payment and managing your subscription — to perform our contract with you.
• Keeping the service secure, preventing abuse and fraud, and fixing problems — our legitimate interests in running a safe, reliable service.

We do not sell your personal data, and we do not send marketing emails you haven’t asked for. AutoSweep ranks cars to help you find good value; this ranking is about vehicles, not about you, and we do not make automated decisions that produce legal or similarly significant effects about you.

Cookies

We use essential cookies only: your login session, and a counter for the free anonymous search. These are strictly necessary to run the service, so they don’t require consent under the Privacy and Electronic Communications Regulations (PECR). We do not use advertising or analytics cookies. If that ever changes, we’ll ask for your consent first.

Who processes your data

We rely on a small set of trusted providers to operate AutoSweep. Each acts as our processor and only handles your data on our instructions:

• Supabase — accounts and database.
• Stripe — payments.
• Resend — email delivery.
• Vercel — hosting.
• Anthropic — AI processing of your search text to power search and matching. Your search text is used only to provide this feature; it is not used to train AI models, and no decision with legal or similarly significant effect about you is made by it.
• MarketCheck — the car-listing data source. It supplies us with public data about vehicles and does not receive your personal data.

Where your data is processed (international transfers)

Some of our providers process data outside the UK (for example in the United States). Where your personal data is transferred outside the UK, we make sure an appropriate safeguard recognised under UK law is in place. The safeguards our providers rely on are:

• Supabase — the EU Standard Contractual Clauses together with the UK Addendum (data hosted in a UK/EU region where available).
• Stripe — the UK Extension to the EU–US Data Privacy Framework, backed by the UK International Data Transfer Addendum.
• Resend — the EU Standard Contractual Clauses together with the UK Addendum.
• Vercel — the EU–US Data Privacy Framework (with UK extension), backed by the EU Standard Contractual Clauses and UK Addendum.
• Anthropic — the EU–US Data Privacy Framework, backed by the UK International Data Transfer Addendum (IDTA).
• MarketCheck — not applicable; MarketCheck provides public vehicle data to us and does not receive your personal data.

How long we keep it

• Account, saved searches and alerts — kept while your account exists. Deleting your account removes your saved searches and alerts.
• Technical and security logs — kept for up to 12 months, then deleted.
• Billing records — kept for 6 years, to meet our legal and tax obligations.
• Backups — deleted data may persist in routine backups for up to 30 days before being overwritten.

Security

We take reasonable technical and organisational measures to protect your data, including hashing of passwords, access controls, and using reputable providers. No service can be completely secure, but we work to keep your data safe and will notify you and the ICO of a personal data breach where the law requires.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format; and
• withdraw any consent you have given, at any time.

To exercise any of these, contact us at info@autosweep.co.uk and we’ll respond within one month.

Complaints

If you’re unhappy with how we’ve handled your data, please contact us first at info@autosweep.co.uk — we’ll acknowledge your complaint within 30 days and investigate it. You also have the right to complain to the ICO at any time: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy

If this policy changes materially, we’ll update this page and the date at the top, and where appropriate we’ll let you know by email.