Privacy Policy

What personal information Swapt collects from sellers and dealerships, who gets it, and what you can do about it.

Effective November 6, 2026 · Version 2026-11-06

The short version

  • If you list a car, dealerships see its details and photos. A limited number of them can also get your name, phone and email, and they pay Swapt for that.
  • Dealerships sign up on their own and tell us they are registered with OMVIC. We do not verify that.
  • Some companies that help us run Swapt are outside Canada, so your information can leave Canada.
  • We use Google and Meta tools to measure visits and ads. They load when you open the site.
  • You can ask to see, correct or delete your information at admin@swapt.ca.

This is a summary. The full text below is what applies.

On this page
  1. Who we are
  2. If you list a car
  3. If you are a dealership
  4. Emails, texts and calls
  5. Companies that help us run Swapt
  6. How long we keep it
  7. Your choices and rights
  8. Keeping it safe
  9. Cookies and analytics
  10. Age
  11. Changes
  12. Contact us

Who we are

Swapt is run by ROCKETECH PTE. LTD., a Singapore company, UEN 201703811W. In this policy “Swapt”, “we” and “us” mean that company. Our registered address is 387 Joo Chiat Road, #02-11, 427623, Singapore. Our mailing address is 57 Spadina Ave., Toronto, ON M5V 0T9.

This policy covers swapt.ca and the emails, texts and calls we exchange with you. Canada’s private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), applies to how we handle personal information in this business.

Send questions and requests to admin@swapt.ca with “Privacy” in the subject line.

If you list a car

What we collect

  • Your car: plate or VIN, the year, make, model, trim and specs we look up from them, colour, mileage, condition, damage you report, notes you write and the photos you take.
  • Ownership: whether the car is owned, financed or leased, any balance you enter, and the name of anyone else on the title.
  • You: name, email, phone number and city.
  • Your plans, if you answer: why and when you want to sell, and your asking price.
  • Permissions: whether you authorized a CARFAX Canada report or a PPSA lien search, and the version of our terms you agreed to.
  • Your account: the estimate we showed you, the status of your listing, and our messages with you.

Why we use it

  • To look up your car and show you an estimate.
  • To confirm your phone number with a one-time code and run your account.
  • To show your car to dealerships and give your contact details to some of them, as this section describes.
  • To tell you what is happening with your listing, and to answer questions from you and from dealerships.
  • To keep Swapt working and secure, and to fix problems.
  • To measure our ads and see how people use the site.
  • To meet legal requirements.

Who sees what

What each group can see about you and your car, and when.
WhoWhat they getWhen
Anyone who signs up as a dealership and confirms a phone number, and dealerships we send cars to by email, Telegram or WhatsAppYear, make, model, trim and specs, VIN, mileage, condition, damage and your notes, photos, whether the car is owned, financed or leased, whether the title is shared, your city and province, and whether you authorized CARFAX or a lien searchOnce your car goes out to dealers. We hold a car back until it has at least 4 photos.
Dealerships we send cars to by email, Telegram or WhatsAppYour asking price, if you entered oneWith the car’s details
A limited number of dealershipsYour name, phone number and email, your city, your plate and your VINThrough the car feed as soon as your car goes out to dealers, when a dealership buys your contact on the car page, or when offers close
Swapt staffEverything you give usWhile running the service and helping you or a dealership
Companies that help us run SwaptWhat each one needs, listed under Companies that help us run SwaptWhile providing their service

Dealerships pay Swapt for access to your contact. That is how we make money. You pay us nothing.

We show you on the contact step how many dealerships can get your contact. That number is a setting on our side and it applies to every live car, so it can go up or down after you list. We can also send a car to more dealerships on our car feed after it has closed, and we do not always tell you when that happens.

We do not verify dealerships. A dealership signs up on its own, gives us an OMVIC registration number and confirms it is registered. We do not verify the number or check the dealership. You can look up a dealer on the OMVIC website.

A dealership that has your contact decides how to use your details and is responsible for that. Our Dealer Terms limit it to contacting you about that car and forbid reselling your details. Withdrawing your car stops new dealerships getting your details. It does not take them back from dealerships that already have them.

We store car photos at public web addresses. Anyone with the link can open them without signing in, and we send them in notices to dealerships. A photo can show your plate, your street or your home, so check what is in the frame.

We use some real listings as samples on our dealer pages, in emails and in sales material. We mask the seller’s name, phone, email and the end of the VIN, and blur the plate. The car’s details, city, photo and what the seller told us about condition, ownership, any balance owing, reason and timing can still appear.

If your contact step said “The winning dealer calls you”, your car is sold by dollar offers, which is a different process. Only the dealer whose offer you accept gets your name, phone and email, along with your plate, any co-owner’s name and your timing.

If you are a dealership

What we collect

  • Your dealership: name, short name, the OMVIC number you give us, city, province and postal code.
  • People: the name, email and phone number of the person who signs up and of your decision maker, that person’s role, and the best way and time to reach them. We store a scrambled copy of your password, never the password itself.
  • What you want to buy: body types, makes, years, mileage, monthly volume, saved searches and shortlisted cars.
  • What you do on Swapt: cars you view, offers, credits, contacts you receive and questions you ask about a car.
  • Payments: top-up amounts and status, Stripe payment references, and a card fingerprint, which is a code from Stripe that recognizes a card without showing its number. We do not receive or store your full card number.
  • Channels: your Telegram chat or WhatsApp number if you use them, and what you send us there or by email.
  • Sales notes: our notes on calls and conversations with your dealership.

Why we use it

  • To run your account, show you cars and send you cars that match your filters.
  • To hold and charge credits, give you sellers’ contacts and apply the first top-up rules.
  • To support you and to talk to you about Swapt.
  • To prevent abuse, keep Swapt secure and meet legal requirements.

Who sees it

A seller whose contact you get sees your dealership’s name and city. We do not show your offers or your name to other dealerships. Swapt staff and the companies listed under Companies that help us run Swapt can see what they need.

If you have not signed up

We may email a dealership’s business address about Swapt even if it has not signed up. These emails go through an outreach service and can come from other domains our company owns. To stop them, email admin@swapt.ca.

We may also add a dealership’s business contact details so that it can receive car notices by email, Telegram or WhatsApp.

Emails, texts and calls

We email and text you about your listing or account. These messages are part of the service.

Every email except sign-in codes and password links has an unsubscribe link. Unsubscribing stops all other email to that address, including updates about your car.

To stop texts to a number, reply STOP to a Swapt text. Reply START to turn them back on. While a number is stopped, we cannot text it a sign-in code.

Our team may call or text you from a Swapt number. Our phone service logs the number, time and length of each call, and the content of texts, and we keep those logs with your listing or dealership record. Our current phone plan does not record calls.

A dealership that has your contact can call, text or email you. Those messages come from the dealership, not from us, and Canada’s Anti-Spam Legislation (CASL) applies to it directly. Tell it if you want it to stop, and tell us if it does not.

Companies that help us run Swapt

These companies process information for us. This table shows what goes to each and where it goes.

Service providers by category, what they handle and where.
ServiceWhoWhat they handleWhere
Database and photo storageSupabaseAccount, listing and dealership records, and car photosCanada
Website and server hostingVercel, RailwayThe website, and every request to our server, including what you submitOutside Canada
EmailAmazon Web Services, ResendEmails we send you, through Amazon, and dealership replies to our emails, through ResendAmazon: Canada. Resend: outside Canada
Texts and callsTwilio, QuoPhone numbers, text content and sign-in codes, and call logsOutside Canada
Car notices to dealershipsTelegram, WhatsApp (Meta)Car details, and a seller’s name, phone, email, city, plate and VIN when a dealership on that channel gets the contactOutside Canada
Reading replies and answering questionsOpenRouter and the AI model companies it connects toThe text of dealership replies and questions, and the car’s details. We do not add a seller’s name, phone or email to what we send.Outside Canada
Car lookups and estimatesPlate and VIN lookup services and vehicle market-data suppliersPlate, VIN and mileageCanada and outside Canada
Card paymentsStripeA dealership’s card details, email and top-up amountOutside Canada
Analytics and advertisingGoogle Analytics, Meta, PostHogSee Cookies and analyticsOutside Canada
Team alertsTelegramAlerts to our team: new sign-ups with a phone or email, listing IDs, dealership names, and the text of messages we could not readOutside Canada
Email to dealerships that have not signed upAn email outreach serviceDealership business email addresses and namesOutside Canada

Information held outside Canada is subject to the laws of the country it is in, and courts or authorities there may be able to get it. People who work on Swapt may also open it from outside Canada.

We may also share personal information when the law requires it, to protect people or our rights, or as part of selling or reorganizing the business.

How long we keep it

We keep personal information for as long as we need it for the purposes above and to meet legal requirements. A few specifics:

  • A one-time sign-in code works for 10 minutes, and we store only a scrambled copy of it.
  • The credit ledger cannot be edited. A dealership’s credit history stays as it was written.
  • Car photos stay at their web addresses until we remove them.
  • A dealership that received your contact keeps its own copy. We do not control that copy.

Your choices and rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it or delete it, or withdraw your consent. Email admin@swapt.ca. There is no self-serve delete button today. We may need to confirm who you are first, and under PIPEDA we generally have 30 days to answer.

We cannot take your details back from a dealership that already has them. We may keep what the law requires us to keep, what we need for a dispute, and the credit ledger. If you withdraw consent to sharing, we will take your car off Swapt.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Keeping it safe

Connections to swapt.ca and our server are encrypted. We store passwords and one-time codes only in scrambled form. The cookie that keeps you signed in cannot be read by scripts on the page.

No system is perfectly safe. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner, as the law requires.

Cookies and analytics

We do not show a cookie banner. The tools below load when you open the site. Our server also receives your IP address and browser details with each request.

Cookies, browser storage and analytics tools on swapt.ca.
ToolWhat it doesWhat it keeps or sends
Swapt sign-in cookie (aq_session)Keeps you signed inA cookie that lasts up to 400 days and renews when you use the site
Browser storageSaves an unfinished listing or dealer sign-up on your device, so you can come back to it, and remembers some of your settingsStays on your device. We clear the listing draft when you publish.
Google Analytics (_ga cookies)Counts visits, pages and stepsOnce you sign in, your Swapt account ID, your role and your dealership ID. Our server also sends Google key events such as a listing going live.
Meta Pixel (_fbp and _fbc cookies)Records page views, to measure and improve our ads on Meta’s servicesYour browser sends Meta each page view. Our server also sends Meta key events, such as starting a listing, publishing it or creating an account, with scrambled copies of your email, phone, city, postal code and account ID, plus your IP address and browser details.
PostHogProduct analytics. The code is in place. It is not running in the browser today.When on: pages and quiz steps, tied to your account ID once you sign in, and key events from our server. Session recording stays off.
Google FontsLoads one of our fontsYour browser contacts Google when a page opens

Your choices

  • You can block or delete cookies in your browser settings. If you block the sign-in cookie, you cannot stay signed in.
  • You can opt out of Google Analytics with Google’s browser add-on.
  • You can manage ads from Meta in your Meta account settings, and from many other companies through YourAdChoices.
  • Browser settings do not stop the events our server sends to Google and Meta. To ask about those, email admin@swapt.ca.

Age

Swapt is for adults. If you are under 18, do not use it.

Changes

If we change this policy, we post the new version here with a new date and version. We record on each listing the version its seller agreed to.

Contact us

ROCKETECH PTE. LTD., UEN 201703811W, 387 Joo Chiat Road, #02-11, 427623, Singapore. Mailing address: 57 Spadina Ave., Toronto, ON M5V 0T9. Email admin@swapt.ca.