Who we are
GoSouq (gosouq.me) is a showcase for vehicles from GCC showrooms, operated by Codecraft Innovations W.L.L, Commercial Registration No. 179283-1, Kingdom of Bahrain ("we", "us" or "our"). We are the data controller for the personal data described in this policy, except on showroom domains, where we act for the showroom (see below).
Privacy questions and requests: connect@codecraftbase.com. Help with GoSouq: support@gosouq.me.
In short
You can browse GoSouq without an account. We use an anonymous device ID, not your name or phone number, to remember the vehicles you like and to count views and taps.
We do not sell personal data, we do not use advertising trackers or third party advertising cookies, and we do not build advertising profiles of visitors.
Calls and WhatsApp messages go straight to the showroom. We do not see their content.
When you browse
To remember your liked vehicles and to count views, likes, shares and contact taps, we set an anonymous device ID in a cookie named gs_did. It is a random identifier, lasts up to 400 days and is renewed when you visit. A copy is kept in your browser's storage so that your liked vehicles survive if the cookie is cleared.
Two more cookies remember your language (gs_locale) and country (gs_country) for up to one year. Your browser also stores small settings on your device, such as whether you closed a notice, your Discover filters and the vehicles you passed on in Discover, which are kept for 30 days.
Usage events, such as a view or a contact tap, record the vehicle, the showroom, your country and language and a code derived from your device ID with a secret key. They do not record your IP address.
Your IP address is used to choose a default country and to protect the service from abuse. Our logs keep it only in shortened form.
If you use Near me, your browser asks for your location. We use it, rounded to about 1 km, only to sort vehicles by distance.
We measure how fast our pages load with Cloudflare Web Analytics. It sets no cookies and does not identify you.
Showroom accounts
For showrooms we keep the business details they provide, such as the showroom name, contact numbers, location, opening hours, listings, photos and Instagram handle, plus each user's name, email address, sign in history, devices and security settings.
When a showroom submits or authorizes its Instagram handle, we read the account's public posts through the official Instagram API to prepare its listings. An automated service reads the post text and photos to fill in the vehicle details. As GoSouq sets for each showroom, listings are published directly or reviewed by GoSouq staff first, including in a private Telegram chat that shows the public post content but no showroom contact details.
For paid services we keep offers, requests for a paid service, invoices and payment records.
GoSouq staff can sign in to a showroom account to give support. Each session needs a recorded reason, ends after 30 minutes and is logged.
The console uses strictly necessary cookies for the sign in session and, if the user chooses, to trust a device for 30 days.
When a showroom asks to join
The For showrooms form collects the showroom name, your name, your mobile or WhatsApp number, your email, the country and city, the approximate number of vehicles and, if you add them, the Instagram handle and a message. Only GoSouq staff can see it, and we use it only to contact you about listing on GoSouq.
To stop abuse of the form, we keep a code derived from your IP address with a secret key, which cannot be turned back into the address. We never store the IP address itself.
Showroom websites on their own domain
Some showrooms show their GoSouq pages on their own web address. On those pages GoSouq serves the content and sets an anonymous device cookie for that domain, separate from the one on gosouq.me and not linked to it. For that traffic we act as the showroom's processor, on its behalf. Each of those pages links to this policy.
When you contact us
If you message us on WhatsApp or by email, we use your message and contact details only to reply to you.
How we use data and why
To run GoSouq and show listings, storefronts and your liked vehicles: our legitimate interest in providing the service you use.
To provide showroom accounts, the console and paid services: performance of our agreement with the showroom.
To give showrooms statistics about their vehicles: our legitimate interest. Showrooms see totals such as views and contact taps, never who you are.
To keep GoSouq secure, prevent abuse and fraud and fix errors: our legitimate interest.
To keep invoices and payment records and meet our legal duties: legal obligation.
To reply when you contact us or ask to join: your request and our legitimate interest.
What we do not do
We do not sell or rent personal data.
We do not use advertising trackers, third party advertising cookies or browser fingerprinting.
We do not tell showrooms who views their vehicles.
We do not record calls or read WhatsApp messages between you and a showroom.
Vehicle brands and logos
Vehicle brand names and make logos are shown only to describe the listed vehicles. They do not mean that any brand endorses GoSouq or a showroom.
Service providers and where data is processed
Cloudflare hosts GoSouq and stores its data and photos, sends and receives our email, runs the check that protects our forms (Turnstile), translates listing text automatically and draws share card images. Our main database is located in Europe.
Resend sends our email when Cloudflare email is unavailable.
Oracle Cloud in France hosts the server that runs the Instagram import. Google Gemini reads the text and photos of public Instagram posts to fill in vehicle details.
We use private Telegram chats where GoSouq staff review draft listings, which show public post content only, and receive service alerts.
Sentry, in the European Union, receives error reports from our servers and consoles, with names, contact details, addresses and full links removed.
GitHub runs the nightly job that copies our database backup to our own storage. Better Stack checks that our pages are up and receives no personal data.
International transfers
Your data, including showroom contact details, is processed outside the GCC, mainly in Europe, and some providers may process it in other countries. We send data only to the providers listed above, and only what each needs for its part of the service. Each provider handles it under its own published data protection terms.
Security
All connections to GoSouq use HTTPS. Passwords are never stored as typed, only as secure hashes. Sign in is protected by limits on attempts, verification codes and optional authenticator apps and passkeys, and staff access is logged. Keep your sign in details private, and tell us at support@gosouq.me if you think someone else used your account.
How long we keep data
Raw usage events are kept for 3 months, after which only daily totals remain. A device that has liked vehicles is kept for 400 days after its last visit.
Showroom sign in history is kept for 90 days, email delivery records without the message text for 180 days, and security and staff access logs for at least 2 years.
A deleted showroom account can be restored for 30 days. After that its personal data and media are removed, and backups are overwritten within 90 days. Invoices, payment records, total statistics and username history are kept as records.
Requests to join that we decline are deleted after one year.
Your rights
Under the Bahrain Personal Data Protection Law (Law No. 30 of 2018) you can ask to access, correct or delete your personal data, or object to how it is used. Send your request to connect@codecraftbase.com. You can also complain to the data protection authority in Bahrain.
You can reset your device ID at any time by clearing the site data, both cookies and storage, for gosouq.me in your browser.
Showrooms can ask us for a copy of their data or to delete their account. We confirm the request with the account email before we act on it.
Requests about traffic on a showroom's own domain are decided by that showroom. We help it answer them.
Children
GoSouq is meant for adults, and showroom users must be at least 18. We do not knowingly collect personal data from children. If you think a child has given us personal data, contact us and we will delete it.
Changes to this policy
We update this policy when our practices change. The version and effective date are shown at the top of this page. For a material change we tell showrooms by email.
Contact
Codecraft Innovations W.L.L, Commercial Registration No. 179283-1, Kingdom of Bahrain.
Privacy questions and requests: connect@codecraftbase.com. Help with GoSouq: support@gosouq.me.