Privacy policy

Last updated: 2 November 2026

This page is a courtesy translation; only the French version is legally binding. Read the French version

Data controller: SARL MOTOROOM, 447 route de Fauville, 76640 Yébleron, France. Contact for any question about your data: contact.busmarket@gmail.com.

Data collected

• Sellers: email address, display name, phone number and, for professionals, company name and SIRET number; listing content and photos.
• Buyers who contact a seller: name, email, optional phone number and message, passed on to the seller concerned.
• Alert subscribers: email address, search filters, frequency, date and text of the consent, and a hash of the IP address at the time of consent (proof of agreement, kept until unsubscription).
• Reports: reason, message and optional email.
• Security: a hash of the IP address (never the address itself), to limit abuse.

The fields marked as mandatory in the forms are necessary to publish a listing, contact a seller or receive an alert; without them, the requested service cannot be provided.

Purposes and legal bases

• Creating your account, publishing and moderating listings, putting buyers and sellers in touch: performance of the service you request.
• Sending alerts: your consent, which you can withdraw at any time using the link in each email.
• Preventing fraud and abuse, securing the forms: legitimate interest of the publisher in protecting the site and its users.
• Handling reports and keeping a record of moderation decisions: legal obligations (European Digital Services Act).

No automated decision-making or profiling is carried out: moderation is done by people.

Recipients

Your data is accessible to the moderation team and to the processors listed below, each for its own task only. A buyer’s message is passed on to the seller of the listing. A seller’s public contact details (display name, phone number, company name) are visible on their listings. No data is sold or transferred for advertising purposes.

Retention periods

• Anti-abuse logs: 2 days.
• Unconfirmed alert subscription: 7 days; confirmed subscription: until unsubscription, which deletes all alert data.
• Contact requests: one year, then automatic deletion.
• Processed reports: one year after they were processed.
• Account and listings: as long as the account exists; deletion on simple request.

Processors

• Supabase: database and photos, servers located in Paris (France).
• Vercel Inc.: hosting of the site.
• Brevo (France): sending of emails.
• Telegram: internal alerts for the team (listings put online, new tailored search requests with the customer’s name and company, and a link to message them on WhatsApp that contains their phone number, never their e-mail).
• WhatsApp (Meta): messages from the team to customers who requested a tailored search, sent from the team member’s own app.
• Cloudflare Turnstile: protection of the forms against bots.
• Anthropic (United States): automated review of coach listings before publication (see below).

Transfers outside the European Union

Supabase, Vercel Inc. and Cloudflare are US companies. Supabase data remains stored in Paris, but these companies may access it from the United States (maintenance, support), and some technical data (notably the connection IP address) may be processed there. These transfers are governed by the EU–US Data Privacy Framework for companies that adhere to it, and in all cases by the standard contractual clauses of the European Commission. Telegram and WhatsApp also process data outside the European Union: for Telegram, information about listings and needs, and for a tailored search the customer’s name, company and number; for WhatsApp, your number and our messages, when you have given us this number so that we can get back to you.

Security

Encrypted connection (HTTPS), data access limited by strict rules, passwords stored only in encrypted form, IP addresses never stored in clear, protection of the forms against bots and anti-abuse limits.

Cookies

No advertising cookies and no audience measurement. Only technical cookies are used: the login session, the page to return to after login, and access to your alerts on this device. They are essential to the service and do not require consent.

Tailored search requests

When you request a tailored search, we record your full name, phone number, email address and, if provided, your company and its SIRET or VAT number, together with the description of the vehicle you are looking for (criteria, timeframe, number of vehicles, details) and your replies to our team’s suggestions. A hash of your IP address is used for the anti-abuse limits and is deleted after 2 days.

• Purpose: searching for vehicles for you, suggesting them to you and getting back to you by phone, email or WhatsApp.
• Legal basis: pre-contractual measures taken at your request.
• Recipients: the Bus Market team; your contact details are not passed on to a seller without your consent.
• Retention period: for the duration of the request, then 2 years after the last activity.

Searches of public listings by our team

To respond to tailored search requests, our team looks for vehicles for sale in the public listings of other websites. It does so itself or with a tool that, at the request of a team member, runs searches on the web and reads public listing pages (the Claude API from Anthropic, a US company: only the search criteria and the address of the pages are sent to it, never our customers’ contact details).

• What is kept: facts about the vehicle (make, model, year, category, number of seats, price, mileage, Euro emission standard, fuel, country), the title of the listing, the name of the website and the link. Never a description or photo, nor the seller’s name, phone number, email or address.
• Why: to suggest to our customers vehicles that match their request. Legal basis: legitimate interest of the publisher in providing this service. These listings are never published on Bus Market; a customer only receives a selection chosen by a person on the team.
• Retention period: 2 years after the listing was spotted; a listing suggested to a customer is kept with their request (2 years after the last activity).
• Limits: websites that prohibit the reuse of their listings are not consulted, and the number of listings kept per website is limited.
• Removal: a seller or a website may request the removal of their listings, or object to this processing, by writing to contact.busmarket@gmail.com. The listing is removed, and the website may be excluded from any future search.

Checking listings before publication

Before it is published, each coach listing is checked by an automated tool: checks of the information, then a review of the photos, the description and the specifications by the Claude API from Anthropic (a US company). Only these elements of the listing are sent to it, never the seller’s name, email or phone number. The tool can only publish the listing or pass it on to our team; it never rejects a listing. Legal basis: performance of the service requested by the seller and legitimate interest of the publisher in quickly publishing reliable listings. The tool’s verdict is kept with the listing for as long as it remains on the site.

Your rights

You may access your data, rectify it, erase it, restrict its processing, object to it, request its portability, withdraw your consent at any time and set directives on what happens to your data after your death, by writing to contact.busmarket@gmail.com. We reply within one month; proof of identity may be requested in case of doubt. If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).