Privacy Policy

Last Updated: November 10, 2026

1. Introduction

Welcome to Anorak Platform ("we," "our," or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our automotive enthusiast social platform.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• First and last name
• Username and display name
• Email address
• Password (encrypted)
• Profile picture and bio

Car Information:

• Details about cars you own or admire
• Car specifications (make, model, year, trim, etc.)
• Photos and videos of vehicles
• Ownership status and history

Content You Share:

• Posts, comments, and stories
• Images and videos
• Messages and communications
• Group and channel interactions
• Collections and favorites

Profile Preferences:

• Privacy settings
• Notification preferences
• Display preferences

2.2 Information We Collect Automatically

Usage Information:

• Pages visited and features used
• Time spent on the platform
• Click patterns and navigation paths
• Search queries and results

Device Information:

• Device type, model, and operating system
• Browser type and version
• IP address and general location
• Screen resolution and device settings

Technical Information:

• Cookies and similar tracking technologies
• Log files and error reports
• Performance and diagnostic data

2.3 Information from Third Parties

Sign in with Google or Apple:

• If you sign in with Google or Apple, we receive your name and email address from that account, and your profile picture from Google

Car Data Services:

• Vehicle specifications from automotive databases
• Market values and historical data

3. How We Use Your Information

3.1 Core Platform Features

• Create and maintain your account
• Enable content sharing and social interactions
• Display your profile and content to other users
• Facilitate messaging and communications
• Provide search and discovery features

3.2 Personalization and Recommendations

• Customize your feed and recommendations
• Suggest relevant content, users, and groups
• Tailor advertisements and promotions
• Measure and target our own ads on Facebook and Instagram (see section 7.2)
• Improve user experience based on preferences

3.3 Platform Security and Safety

• Verify identity and prevent fraud
• Detect and prevent spam and abuse
• Monitor for prohibited content and activities
• Investigate violations of our Terms of Service

3.4 Communication

• Send important account notifications
• Provide customer support
• Share platform updates and new features
• Send promotional emails (with your consent)

3.5 Analytics and Improvement

• Analyze platform usage and performance
• Conduct research and testing
• Develop new features and services
• Generate aggregate, non-identifying statistics

4. Information Sharing and Disclosure

4.1 Public Information

The following information is public by default:

• Username and display name
• Profile picture and bio
• Public posts, comments, and stories
• Car collection and ownership information
• Group and channel memberships (unless private)

4.2 With Other Users

• Direct messages with recipients
• Content shared in private groups
• Profile information with connections

4.3 With Service Providers

We may share information with trusted third parties who help us operate the platform:

• Cloud hosting and storage providers
• Email and push notification services
• Advertising measurement services (Meta, see section 7.2)
• AI image generation (Google, see section 8.2)
• Customer support tools

Section 6.4 lists the providers that store or process information overseas.

4.4 Legal Requirements

We may disclose information when required by law:

• In response to valid legal requests
• To protect our rights and property
• To ensure user safety and platform security
• In connection with legal proceedings

4.5 Business Transfers

In the event of a merger, acquisition, or sale, user information may be transferred as part of the business assets.

5. Your Privacy Controls

5.1 Account Settings

• Update your profile information
• Change your username and display name
• Modify privacy preferences
• Control notification settings

5.2 Content Controls

• Choose who can see your posts
• Set car collection visibility
• Control message permissions
• Manage group and channel participation

5.3 Data Access and Portability

• Request a copy of your data
• Download your content and information
• Export your car collection data

5.4 Account Deletion

• Delete your account permanently
• Remove your content from the platform
• Retain minimal data for legal compliance

6. Data Security

6.1 Security Measures

• Encryption of sensitive data in transit and at rest
• Regular security audits and monitoring
• Access controls and authentication systems
• Employee training on data protection

6.2 Data Retention

• Account data: Retained while your account is active
• Content: Retained according to your privacy settings
• Legal compliance: Retained as required by law

6.3 Australian Privacy Principles Compliance

We comply with the 13 Australian Privacy Principles (APPs) including:

• APP 1: Open and transparent management of personal information
• APP 3: Collection of solicited personal information
• APP 5: Notification of collection of personal information
• APP 6: Use or disclosure of personal information
• APP 8: Cross-border disclosure of personal information
• APP 11: Security of personal information
• APP 12: Access to personal information
• APP 13: Correction of personal information

6.4 Cross-Border Data Transfers

This is where our main service providers store or process personal information:

• Meta: advertising measurement (section 7.2). United States and Ireland.
• Google: Sign in with Google, and AI image generation from car photos (section 8.2). United States and other countries.
• Apple: Sign in with Apple. United States.
• Vercel: website hosting. United States and global edge locations.
• Expo: push notifications to our mobile apps. United States.
• Amazon Web Services: servers, file storage and account emails. Australia (Sydney).

Countries outside Australia may not have privacy protections substantially similar to Australia's. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles, and we remain accountable for it under the Privacy Act.

7. Cookies and Tracking Technologies

7.1 Types of Cookies

• Essential cookies: Required for platform functionality
• Performance cookies: Help us improve the platform
• Functionality cookies: Remember your preferences
• Advertising cookies: Deliver relevant advertisements

7.2 Advertising and the Meta Pixel

We use the Meta Pixel on our website, and Meta's Conversions API on our servers, to measure and improve our advertising on Facebook and Instagram. These tools are provided by Meta Platforms, Inc. and Meta Platforms Ireland Limited ("Meta").

What we share with Meta

• The pages you visit on our website and when, your IP address, and your browser and device type
• Identifiers stored in Meta's cookies on our website
• When you create an account or a car page on our website: that it happened, plus a hashed (irreversibly encoded) copy of your email address and of your account ID

We do not share your name, phone number, password, messages, posts or car details (such as registration, VIN or photos) with Meta through these tools. We do not use these tools in our mobile apps, or on pages that contain security links or codes, such as email verification and password reset.

Why we use them

• To see which of our ads lead to visits, sign-ups and new car pages
• To show our ads to people who have visited our website, and to avoid showing sign-up ads to people who already have an account
• To help Meta find people with similar interests to our visitors and members

Meta uses this information to match it to Facebook and Instagram accounts. Meta's handling of it is governed by the Meta Business Tools Terms and Meta's Privacy Policy. Meta may process it in the United States, Ireland and other countries where it operates (see section 6.4).

Your choices

• When you first visit our website, a notice explains this tracking. Tracking is on unless you choose Opt out.
• You can change your choice at any time using Cookie settings, found in the T's & C's menu, the mobile menu, and at the top of our legal pages. Opting out stops the Meta Pixel and stops our servers sending your sign-up and car page events to Meta from that point on.
• Your choice is saved in a cookie in that browser. If you clear your cookies, or use another browser or device, you will be asked again.
• You can also manage how Meta uses information for ads in your Facebook ad preferences.

You can also block or delete cookies in your browser settings, although some features of the platform may not work without essential cookies.

8. Third-Party Services

8.1 Integrated Services

Our platform may integrate with:

• Sign-in providers (Google and Apple)
• Car data providers
• Advertising measurement (Meta, see section 7.2)
• AI image generation (Google, see section 8.2)

8.2 AI Image Generation

When you use our banner generator, the car photos you choose are sent to Google's Gemini service, which creates banner images from them. We send the photos, your car's year, make and model, and a description of the image style. We do not send your name or contact details. Google may process them in the United States and other countries (see section 6.4).

8.3 External Links

We are not responsible for the privacy practices of external websites linked from our platform.

9. Children's Privacy

9.1 Age Requirements

• Users must be at least 16 years old to create an account
• We do not knowingly collect personal information from children under 16
• If we learn that an account belongs to someone under 16, we will close it and delete their personal information

9.2 Parental Rights

If you believe your child under 16 has an account, contact us (see section 12) and we will close it. Parents may also:

• Review their child's account information
• Request deletion of their child's account
• Control their child's privacy settings

10. Regional Privacy Rights

10.1 Australian Residents (Privacy Act 1988)

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), Australian residents have the right to:

• Know what personal information we collect and why
• Access your personal information we hold
• Correct inaccurate or out-of-date personal information
• Request deletion of personal information in certain circumstances
• Make a complaint about our handling of your personal information
• Opt-out of direct marketing communications
• Opt-out of targeted advertising, using Cookie settings (see section 7.2)
• Request details about overseas disclosure of your information

Notifiable Data Breaches: We comply with the Notifiable Data Breaches scheme and will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) of eligible data breaches.

10.2 California Residents (CCPA)

California residents have the right to:

• Know what personal information is collected
• Delete personal information
• Opt-out of the sale of personal information
• Non-discrimination for exercising privacy rights

10.3 European Union Residents (GDPR)

EU residents have the right to:

• Access personal data
• Rectify inaccurate data
• Erase personal data
• Restrict processing
• Data portability
• Object to processing

10.4 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

11. Changes to This Privacy Policy

We will notify you of material changes through:

• Email notification to your registered address
• Prominent notice on the platform
• Updated "Last Updated" date

12. Contact Us

12.1 Privacy Questions and Complaints

For questions about this Privacy Policy, to access or correct your information, or to make a privacy complaint, email us at info@agentanorak.com. We aim to respond within 30 days.

12.2 Australian Privacy Complaints

If you are not satisfied with our response, you may lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Post: GPO Box 5218, Sydney NSW 2001

12.3 Other Regulatory Authorities

Residents of other jurisdictions have the right to lodge complaints with their local data protection authorities.

13. Definitions (Australian Privacy Law Context)

• Personal Information: Information or an opinion about an identified individual, or an individual who is reasonably identifiable (as defined under the Privacy Act 1988)
• Sensitive Information: Personal information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, genetic/biometric information, criminal record, or sexual orientation
• Australian Privacy Principles (APPs): The 13 principles in the Privacy Act 1988 that govern how we collect, use, store and disclose personal information
• Aggregate Information: Information that has been combined and anonymized so individuals cannot be identified
• Cookies: Small files stored on your device to enhance platform functionality
• Processing: Any operation performed on personal information including collection, use, storage, and disclosure