Privacy Policy

Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how Buy MyCar株式会社 (Buy MyCar Co. Ltd.) (“BuyMyCar,” “we,” “us,” or “our”) collects, uses, stores, protects, and shares information when you use:

  • the BuyMyCar mobile application for Android and iOS (the “App”);
  • the Android application identified by package name com.buymycar.app;
  • the BuyMyCar website at https://buymycar.co.jp; and
  • related vehicle-search, favorites, enquiry, messaging, notification, and support services (together, the “Services”).

The Google Play developer profile may display the developer name “webordersjp.” The App and Services are operated by Buy MyCar株式会社.

1. Who We Are

Operator and data controller: Buy MyCar株式会社 (Buy MyCar Co. Ltd.)
Address: Shiba Daimon 1-3-17, Tamaya Bldg. 4F, Minato-ku, Tokyo, Japan
Email: info@buymycar.co.jp
Phone: +81 3 6452 9956
Website: https://buymycar.co.jp

2. Information We Collect

We collect or process the following categories of information, depending on how you use the Services.

2.1 Information you provide

You may provide:

  • your name, email address, telephone number, WhatsApp number, language, and other profile or contact details;
  • your email address and password when you sign in to an existing BuyMyCar account;
  • vehicle enquiries, conversation messages, message subjects, and other content you send to BuyMyCar;
  • favorites and vehicle selections;
  • information submitted through website contact, quotation, support, or newsletter forms, such as your name, email address, phone or WhatsApp number, subject, message, destination, or estimated budget; and
  • any other information you voluntarily send to us.

Passwords are used to authenticate your account. Authentication tokens may be stored securely on your device so that you can remain signed in. Please do not send payment-card numbers, bank credentials, identity documents, or other highly sensitive information through the App’s message feature.

2.2 Guest-use information

You can browse vehicles, save favorites, and use messages without signing in. To provide these guest features, the App creates and uses:

  • a random guest token;
  • an app-generated device identifier;
  • device platform information, such as Android or iOS;
  • App version information; and
  • guest-session activity needed to associate favorites, messages, and notification preferences with the same App installation.

These identifiers are not your Android advertising ID and are not used for advertising. If you later sign in, eligible guest favorites and conversations may be linked or merged with your account so that you can continue using them.

2.3 Vehicle search and App activity

When you browse inventory, we process information such as:

  • search terms and selected filters, including make, model, country, city, year, mileage, price, currency, and sort order;
  • vehicles viewed, favorited, added to the Hot list by authorized administrators, or used to start an enquiry;
  • selected language, selected currency, notification preference, and similar App settings; and
  • message read status and conversation status.

Search values are used to return matching vehicles. They may also be present temporarily in standard server request logs used for security, troubleshooting, and reliable operation.

2.4 Push-notification information

If you enable notifications, we process:

  • a Firebase Cloud Messaging registration token;
  • device platform and App version;
  • whether notifications are enabled; and
  • information needed to deliver and route message notifications, such as a conversation identifier or vehicle identifier.

Notification content may include a sender name, a short message preview, and vehicle-related context. You can disable notifications in the App’s Profile page or in your device settings. A notification token that is disabled, invalid, or no longer needed may be revoked or deleted.

Push notifications are delivered using Google Firebase Cloud Messaging. Google may process technical information necessary to provide that service under Google’s own privacy terms.

2.5 Technical and security information

Our servers and service providers may automatically process:

  • Internet Protocol (IP) address;
  • request date and time;
  • device platform, App version, browser type, and basic device or network information;
  • API requests, response status, security events, and error-reference information; and
  • information required to detect abuse, prevent unauthorized access, diagnose errors, and maintain service availability.

The App requests internet access and, on supported Android versions, permission to display notifications. The App does not request access to your precise location, contacts, camera, photo library, microphone, or Android advertising ID.

2.6 Local storage on your device

The App may store authentication tokens and the guest token in secure device storage. It may also store the app-generated device identifier, selected language, selected currency, notification preference, and other basic settings locally. Removing the App or clearing its storage may remove this local information, but it does not automatically delete information already stored on our servers.

The website may use cookies or similar local-storage technologies that are necessary for security, sessions, preferences, and core website functions.

3. How We Use Information

We use information to:

  • provide vehicle search, filters, inventory, images, details, favorites, Hot list, and messaging;
  • maintain guest sessions and signed-in sessions;
  • authenticate users and protect accounts;
  • connect enquiries and conversations to the relevant vehicle;
  • reply to vehicle, quotation, shipping, purchase, and support enquiries;
  • deliver push notifications that you have enabled;
  • remember language, currency, and other preferences;
  • operate administrative tools for authorized BuyMyCar staff;
  • maintain, troubleshoot, secure, and improve the Services;
  • detect fraud, spam, abuse, unauthorized access, and technical problems;
  • comply with legal, accounting, regulatory, and law-enforcement obligations; and
  • establish, exercise, or defend legal claims.

Where applicable, we process information because it is necessary to provide the Services you request, to take steps at your request before a transaction, to comply with law, for our legitimate interests in operating and securing the Services, or with your consent.

4. How We Share Information

We do not sell personal information. The App does not display third-party advertising, and we do not share App data for cross-context behavioral advertising.

We may share or make information available only as follows:

4.1 BuyMyCar personnel

Authorized administrators, sales staff, support staff, and technical personnel may access information when necessary to respond to enquiries, manage conversations and users, maintain inventory, provide support, secure the Services, and perform their work.

4.2 Service providers

We may use hosting, database, email, security, maintenance, and other information-technology providers that process information on our behalf and under appropriate confidentiality or data-protection obligations.

For push notifications, we use Google Firebase Cloud Messaging. You can review Google’s privacy information at https://policies.google.com/privacy.

4.3 WhatsApp

The App includes an “Ask” via WhatsApp action. WhatsApp is not opened and enquiry information is not sent to WhatsApp unless you choose that action. When you do, the App opens WhatsApp or a WhatsApp web link with vehicle-related text prepared for you. Your use of WhatsApp is governed by WhatsApp’s and Meta’s own terms and privacy policies. Review and edit the prepared message before sending it.

We may disclose information when reasonably necessary to comply with law or a valid legal request; protect users, BuyMyCar, or the public; investigate fraud or security incidents; enforce agreements; or establish, exercise, or defend legal claims.

If BuyMyCar is involved in a merger, acquisition, reorganization, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

5. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These include HTTPS encryption in transit, secure device storage for authentication and guest tokens, access controls, role-based administrative access, restricted server access, and security monitoring.

No transmission or storage system is completely secure. You are responsible for protecting your sign-in credentials and device. Contact us promptly if you believe your account, device session, or messages have been accessed without authorization.

6. Data Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining business and transaction records, resolving disputes, preventing fraud and abuse, enforcing agreements, and complying with legal, tax, accounting, and regulatory requirements.

In general:

  • account and profile information is retained while the account or related customer relationship remains active and afterward only as necessary for legitimate business or legal purposes;
  • favorites, conversations, messages, and vehicle-enquiry records are retained while needed to provide the feature, continue customer support, document enquiries, or meet legal and business obligations;
  • guest-session identifiers and guest-associated favorites or messages are retained while needed to make guest features work on the same App installation, until a valid deletion request is completed, or until they are removed under our retention processes;
  • push-notification tokens are retained while needed to provide notifications and may be revoked or deleted when notifications are disabled, the token becomes invalid, or it is no longer needed;
  • local App settings remain on your device until changed, cleared, or the App is removed; and
  • server and security logs are retained only for the period reasonably necessary for security, troubleshooting, abuse prevention, and legal compliance.

You may request deletion of your BuyMyCar account or App-related personal information by emailing info@buymycar.co.jp with the subject “BuyMyCar App Data Deletion Request.” Include the email address associated with your account, or explain that you use the App as a guest, so we can verify and locate the relevant information. We may ask for reasonable verification before completing the request.

After verification, we will delete or de-identify information that is not required to be retained. We aim to complete valid requests within 30 days, unless applicable law permits or requires a longer period. Information may remain for a limited time in secured backups until the normal backup-rotation cycle completes. We may retain information when required for legal compliance, security, fraud prevention, dispute resolution, or the establishment, exercise, or defense of legal claims, and we will explain this when applicable.

Clearing App data or uninstalling the App removes local data but is not, by itself, a server-data deletion request.

7. Your Rights and Choices

Depending on your location, you may have rights to:

  • request access to personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion of information;
  • object to or request restriction of certain processing;
  • withdraw consent where processing is based on consent;
  • request a portable copy of certain information; and
  • complain to an applicable data-protection authority.

You may change App language, currency, and notification settings in the App. You may also disable notifications through Android or iOS settings. To exercise a privacy right, contact info@buymycar.co.jp. We may need to verify your identity or control of the relevant account or guest installation.

8. International Processing

BuyMyCar is based in Japan and serves users internationally. Information may be processed in Japan and in other countries where our service providers operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

9. Children’s Privacy

The Services are intended for adults seeking vehicle information, purchase, import, export, shipping, or related support. They are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so that we can review and delete it as appropriate.

The Services may contain links to external websites or open external applications, including WhatsApp. Third parties operate their own services and apply their own privacy policies. This Policy does not govern third-party services.

11. Changes to This Policy

We may update this Privacy Policy when the App, Services, data practices, or legal requirements change. We will publish the revised Policy at https://buymycar.co.jp/privacy-policy and update the “Last updated” date. If a change is material, we may provide an additional notice through the App, website, or another appropriate channel.

12. Contact Us

For privacy questions, rights requests, or deletion requests, contact:

Buy MyCar株式会社 (Buy MyCar Co. Ltd.)
Shiba Daimon 1-3-17, Tamaya Bldg. 4F
Minato-ku, Tokyo, Japan
Email: info@buymycar.co.jp
Phone: +81 3 6452 9956
Website: https://buymycar.co.jp