Privacy Policy

How Karbeam collects, uses, shares and protects your information.

Effective date: 16 July 2026

This Privacy Policy explains how Karbeam, a service operated by TOURCRIB, a French société par actions simplifiée unipersonnelle (SASU) registered with the Trade and Companies Register of Fort-de-France under number 883 509 291 ("Karbeam", "we", "us" or "our"), collects, uses, shares and protects personal data when you visit our website, create an account, or use our services (the "Service"). Karbeam helps used-car dealerships and sellers turn vehicle listings into branded social media content and publish it to platforms such as Facebook and Instagram.

For the purposes of the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), TOURCRIB is the data controller for the personal data described below.

1. Who we are and how to contact us

TOURCRIB (SASU), 25 Avenue Catherine Klébert, 97233 Schœlcher, Martinique, France. For any privacy question or to exercise your rights, contact us at [email protected]. Our full company details are set out in our Legal Notice.

2. Personal data we collect

We collect the following categories of personal data:

  • Account and identity data: your name, email address, password (stored in hashed form), preferred language, and account settings.
  • Dealership and brand data: your business name, logo, colors, timezone and other branding information you provide.
  • Content you provide: vehicle photos you upload, vehicle listing URLs you submit, and any text, scripts or edits you create in the Service.
  • Publicly available listing data: when you submit a listing URL, we retrieve publicly available information about that vehicle (such as photos, price, make, model and description) in order to generate content.
  • Generated content: the video reels, voice-overs and branded visuals produced for you.
  • Meta (Facebook and Instagram) data: when you connect a Meta account, we access, with your authorization, your Facebook Pages and connected Instagram business accounts, the access tokens needed to publish on your behalf, page and profile information, and the performance metrics (insights) of the content you publish through Karbeam.
  • Payment data: subscription plan, billing status and a customer identifier held by our payment provider. We do not store your full card number; card details are processed directly by Stripe.
  • Usage and technical data: log data, device and browser information, IP address, pages viewed and actions taken, collected through cookies and similar technologies (see our Cookie Policy).

3. How and why we use your data, and our legal bases

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

  • To provide the Service (create and manage your account, generate reels and visuals, publish and schedule content to your connected platforms): performance of our contract with you.
  • To process payments and manage subscriptions: performance of our contract and compliance with a legal obligation.
  • To improve, secure and troubleshoot the Service, and to prevent fraud and abuse: our legitimate interests in operating and protecting the Service.
  • To communicate with you about your account, service updates and support: performance of our contract and our legitimate interests.
  • To send marketing communications where permitted: your consent, or our legitimate interests for business customers, and you can opt out at any time.
  • To use non-essential cookies and analytics: your consent.
  • To comply with legal, accounting and tax obligations: compliance with a legal obligation.

4. Use of Meta Platform data

Our use of data obtained through the Meta (Facebook and Instagram) platforms is limited to providing and improving the features you request, such as publishing content, scheduling posts and reporting on their performance. We use Meta data only in accordance with the Meta Platform Terms and Developer Policies. We do not sell Meta data, and we do not use it for advertising profiling or any purpose unrelated to the Service. When you disconnect a Meta account, or delete your Karbeam account, we stop using the associated tokens and delete or de-identify the related data as described in section 9.

5. Service providers and sharing

We do not sell your personal data. We share it only with trusted service providers (processors) who help us operate the Service, strictly as necessary and under appropriate contractual safeguards:

  • Amazon Web Services (cloud hosting and file storage).
  • Stripe (payment processing and subscription billing).
  • Meta Platforms (publishing to Facebook and Instagram at your request).
  • OpenAI and Anthropic (AI generation of scripts and marketing copy).
  • Replicate (AI generation and processing of images and video).
  • ElevenLabs (AI voice-over synthesis).
  • ScrapingBee (retrieval of publicly available vehicle-listing data).
  • PostHog (product analytics).

We may also disclose data where required by law, to enforce our terms, or in connection with a merger, acquisition or sale of assets.

6. International data transfers

Some of our service providers are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or an adequacy decision, to ensure your data receives an equivalent level of protection.

7. How long we keep your data

We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we erase your personal data following the process in section 9. We retain certain records for longer where required by law, in particular invoicing and accounting records, which French law requires us to keep for up to ten years. Backups are cycled out on a rolling basis.

8. Your rights

Subject to applicable law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with a supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr. To exercise your rights, contact us at [email protected]. We will respond within the timeframes required by law.

9. Deleting your account and data

You can delete your account at any time from Settings > Delete account. To protect you against accidental or unauthorized deletion, deletion is scheduled to take effect 7 days after your request. During this period you can cancel the deletion by signing in and choosing to cancel. After the 7-day period, we permanently erase your account and associated personal data, including your uploaded photos, generated content, dealership branding and connected-account tokens, and we revoke Karbeam's access permissions on your connected Meta accounts. You can also request deletion at any time by emailing [email protected]. As noted in section 7, records we are legally required to retain (such as invoices) are kept for the applicable statutory period even after account deletion.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time as explained there.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including encryption of sensitive credentials, access controls and secure hosting. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of any breach as required by law.

12. Children

The Service is intended for businesses and professionals and is not directed to individuals under 18. We do not knowingly collect personal data from minors.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. Where changes are material, we will take reasonable steps to notify you.

14. Contact

For any question about this Privacy Policy or your personal data, contact us at [email protected].