Privacy policy

1. Who is responsible for your data

Monobid is a product of FOR CARS TECHNOLOGIES LTD, a company registered in England and Wales (company number 17264638, registered office: 95 Middlesex Street, Spitalfields, London E1 7DA, England). FOR CARS TECHNOLOGIES LTD (“Monobid”, “we”) is the controller of the personal data described in this policy. For anything related to your data, contact us at contact@monobid.io or via the contact page.

2. Data you provide

Contact and waitlist forms: name, email, company, the product you are interested in, your message and preferred language.

Account data: name, email, company details, and team members with their roles when a workspace is set up for you.

Auction credentials: sign-in details of the auction accounts you connect. They are stored in a separate encrypted vault and used only for automated sign-in; they are never shown to users of the system.

Correspondence: anything you send us in support or sales conversations.

3. Data created while you use the products

The Monobid App records activity in connected auction accounts to provide auditability: session logs, actions taken, screenshots of recorded actions, bids, purchases and won lots, attributed to team members with timestamps. Monobid Helper processes the lot pages you open — photos and listing details — to generate repair estimates.

Technical data: like most websites, we receive standard server logs (IP address, browser type, approximate country, requested pages) through our hosting and security provider (Cloudflare).

4. Cookies

The website sets a single functional cookie, NEXT_LOCALE, which remembers the language you chose. We currently use no advertising cookies and no third-party analytics. If that changes, we will update this policy first.

5. What happens to form submissions

When you submit the contact or waitlist form, your submission is delivered to our inbox as an email through our email provider (Resend). The website itself does not keep a database of submissions; the messages live in our mailbox like ordinary correspondence.

6. How and why we use data

To provide the Services under our contract with you: automated sign-in to auction platforms, activity recording and purchase attribution, repair estimates, billing and support.

For our legitimate interests: securing the Services, preventing fraud and abuse, improving features and the quality of estimates, and responding to your enquiries.

With your consent: contacting you about a waitlist product or product updates; you can withdraw consent at any time.

To comply with legal obligations, such as accounting and tax requirements. We do not sell personal data and we do not use it for third-party advertising.

7. Who we share data with

Service providers that help us run the Services: hosting and network security (Cloudflare), transactional email (Resend), payment processing, and the infrastructure used to run our AI estimation models. Providers process data under contracts and only on our instructions.

Auction platforms: automated sign-in necessarily transmits the credentials and actions of a connected account to the relevant platform — this happens whenever you use that account through Monobid.

Authorities and advisers: where the law requires it, or where reasonably necessary to protect our rights, we may share data with competent authorities or professional advisers.

8. International transfers

Our providers may process data in countries other than yours (including the United States and the EU). Where required, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Addendum, EU standard contractual clauses and the providers' own certifications.

9. How long we keep data

Account and activity data — for as long as your account is active and as needed for the audit purposes it serves. Auction credentials — until you remove them or close the account. Form submissions and correspondence — as long as needed to handle the enquiry and keep business records. Technical logs — for a limited period defined by our providers. When data is no longer needed we delete or anonymize it; billing records are kept for as long as accounting law requires.

10. How we protect data

Sign-in to Monobid runs through Zitadel (OIDC + PKCE) with multi-factor authentication — Monobid stores no user passwords, only short-lived tokens. Auction credentials are kept in a separate encrypted vault, encrypted at rest and in transit, and are released only for a single automated sign-in — they never reach the desktop, the browser or the screen.

Public traffic passes Cloudflare WAF, DDoS protection and TLS; internal services communicate over mTLS. Tokens are never written to logs. Access to production systems is restricted to authorized personnel and is logged.

11. Your rights

Depending on your location, you have the right to access your data and receive a copy, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these rights, email contact@monobid.io — we will respond within the time required by law.

You also have the right to complain to a data-protection authority: in the UK — the Information Commissioner's Office (ICO); in the EEA — your local supervisory authority; in Ukraine — the Ukrainian Parliament Commissioner for Human Rights.

12. Children

The Services are intended for business use by adults. We do not knowingly collect data from anyone under 18; if you believe a minor has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the Services evolve. The “updated” date above shows the current version; for material changes we will give notice on the website or by email.

14. Contact

Questions about privacy or your data? Write to us via the contact page or email contact@monobid.io.