Privacy policy

1. Who processes your data

Keturi.lt is a vehicle classifieds website. We process data in accordance with the General Data Protection Regulation (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

This policy applies when you use the keturi.lt website: browsing, creating an account, posting listings, writing messages and receiving notifications.

2. What data we collect

• Account data: email address, name, phone number (if you provide it), password (stored only in encrypted form), registration and last sign-in time.
• Seller profile: type (private person or company), company name, city, phone, website, description, logo – if you fill them in.
• Listings: vehicle details, photos, price, description, contacts, VIN and registration certificate (SDK) codes, listing price changes; an unfinished listing is saved as a draft.
• Messages: conversations between buyers and sellers, the automatic reply if you set one.
• Your choices: saved listings, saved searches, followed dealers, your vehicles and their reminder dates (e.g. roadworthiness test, insurance), notification and appearance settings.
• Reports of violations: if you report a listing or a conversation – the reason, comment and contact (if you provide it).
• Ordered services: the service, amount, invoice details.
• Technical data: for counting listing views – a random browser identifier (not your name or IP address); in the logs of the server and service providers – IP address, browser type and request time.

3. What we use data for and on what legal basis

• Providing the service (performance of a contract): account, publishing and displaying listings, messages, saved listings, searches, reminders.
• Email notifications (performance of a contract; you can turn them off in the settings): new listings for searches and followed dealers, price drops on saved listings, new messages, listing expiry, the weekly views summary for sellers, vehicle reminders.
• News and offers – only with your consent (in the settings); you can withdraw your consent at any time.
• Security and compliance with the rules (legitimate interest): preventing fraud and abuse, handling reports, blocking listings or accounts. An administrator can read only the conversation that was reported; every such review is logged.
• Statistics (legitimate interest): the number of listing views for the seller; website traffic (how many visitors, which pages, which website they came from, phone or computer) – without cookies: a visitor is recognised only for that day by an encrypted marker that changes daily, the IP address is not stored. Automated browsers and search robots are not counted.
• Legal obligations: accounting documents for ordered services.

We do not sell data and do not use it for automated decisions that have legal effects on you.

4. Who sees your data

Publicly visible is what you publish in a listing and in your seller profile: vehicle details, photos, price, the seller’s name or company name, phone, city, SDK code. The VIN is shown partially (the last 6 characters are hidden). The email address is not shown publicly.

Messages are seen only by the participants of the conversation. Other account data (saved listings, searches, vehicles, settings) is seen only by you.

Service providers who process data on our behalf and according to our instructions:

• Supabase – database, sign-in and photo storage (data location: Ireland, EU);
• DigitalOcean – website server (Frankfurt, Germany);
• Zoho Mail (Zoho Corporation) – sending email notifications (data may be processed in the USA);
• OpenStreetMap – the map on the “Contacts” page (loaded from their servers, so they see your IP address).

If data is transferred outside the European Economic Area, this is done applying the safeguards provided for in the GDPR (e.g. standard contractual clauses approved by the European Commission). We provide data to public authorities only when required by law.

5. Cookies and browser storage

We do not use advertising or tracking cookies and have no third-party analytics. In browser storage (localStorage) we keep only what the website needs to work:

• the sign-in session (so that you do not have to sign in every time);
• the selected colour mode, listings added for comparison, list display settings;
• a random identifier for counting listing views (one view per visitor per day).

You can delete this data by clearing the website data in your browser; you will then need to sign in again.

6. How long we keep data

• Account data, listings, messages and your other records – as long as you have an account. When the account is deleted, they are deleted, and the photos are removed from storage within a few hours.
• A listing is valid for 60 days; once expired, you can renew or delete it in “My listings”.
• Unfinished listings (drafts) – 30 days from the last change; photos not used anywhere – a few days.
• View identifiers – up to 2 days; after that only the total number of views remains, without identifiers.
• Daily traffic markers – until the end of the day; after that only total numbers remain.
• Accounting documents – as long as required by law.
• Records of blocked accounts and administrator actions – as long as needed to prevent abuse.

7. How we protect data

The connection to the website is encrypted (HTTPS). Access to data is restricted at the database level: each user can access only their own data, and administrator actions are logged. Passwords are stored only in encrypted form – not even we can see them.

8. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, object to processing based on legitimate interest, receive your data in a portable format and withdraw your consent.

• You can correct your data in the account settings and in your seller profile.
• You can download a copy of all your data in the settings (the “Personal details” section).
• You can delete your account with all its data in the same place.
• You can turn off email notifications in the settings (the “Notifications” section).

In other cases, write to us – we will reply within one month at the latest. If you believe your rights have been violated, you can contact the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

9. Contacts and changes

email .

We may update this policy; the date of changes is shown at the top of the page. We will announce material changes on the website or by email.

For questions about personal data, write to .