Terms and conditions.

Who we are

Carvaly is owned and operated by XPO8 Limited. In these Terms, "Carvaly", "we", "us", and "our" refer to XPO8 Limited and the Carvaly product, website, app, valuation tools, dealer workspace, support channels, and related services.

These Terms apply to carvaly.com, app.carvaly.com, and any other Carvaly-controlled website, application, product module, API, checkout path, support flow, or feature that links to these Terms. If a signed written agreement with XPO8 Limited covers the same subject matter, that written agreement controls for the conflicting part.

Carvaly is a software and information service. We are not a vehicle seller, buyer, dealer, auction house, broker, inspection centre, finance company, insurer, escrow agent, logistics provider, legal adviser, tax adviser, or government authority unless we expressly agree to a separate role in a signed written agreement.

Definitions

In these Terms, "Service" means the Carvaly website, app, valuation tools, dealer workspace, billing flows, support channels, documentation, and related product modules. "Output" means valuations, price ranges, comparable listing context, reports, confidence signals, market maps, trends, stock metrics, margin estimates, alerts, summaries, and other content generated or displayed by the Service.

"User Content" means information, files, photos, notes, listings, offers, vehicle inputs, organization records, feedback, and other material that you or your organization submit to Carvaly. "Organization" means a dealership, company, partnership, group, or workspace account that uses Carvaly through one or more authorized users.

"Credits" means usage units shown in the product that may be consumed by valuations or other paid actions. Credits are not money, stored value, e-money, gift cards, securities, or transferable property, and they have no cash value unless applicable law requires otherwise.

Acceptance of these Terms

By visiting the website, creating an account, running a valuation, joining a dealer organization, purchasing credits, starting a subscription, contacting support, or otherwise using Carvaly, you agree to these Terms and our Privacy Policy.

If you use Carvaly for a dealership, company, partnership, or other organization, you represent that you have authority to bind that organization. In that case, "you" includes both you personally and that organization.

You must be at least 18 years old and capable of forming a legally binding contract to use Carvaly. You must not use Carvaly if you are prohibited from doing so under applicable law, sanctions rules, export controls, or a prior suspension by us.

If you do not agree to these Terms, you must not access or use Carvaly. If you continue to use Carvaly after we publish or notify you of updated Terms, your continued use means you accept the updated Terms from the effective date stated in the update.

What Carvaly provides

Carvaly provides decision-support software for Malaysian used-car market analysis. The service may include public product information, valuation workflows, saved valuation results, comparable listing context, market maps, trend views, fleet records, dealer organization tools, billing and credit management, and support channels.

Carvaly may be used by individual buyers and sellers for personal valuation checks and by authorized dealer teams for internal commercial pricing, stock, fleet, and transaction workflows. Your permitted use depends on the plan, role, credits, organization permissions, and feature availability shown in the product.

We may add, remove, rename, suspend, limit, or change features, data sources, workflows, pricing paths, geographic coverage, usage limits, and technical requirements as the product evolves.

Carvaly may produce different results over time for the same vehicle because market data, comparable listings, internal normalization, data-source availability, user inputs, product logic, and confidence thresholds can change. Historical output should not be treated as a promise that the same result will be available later.

Limited access license

Subject to these Terms and your continued compliance, XPO8 Limited grants you a limited, revocable, non-exclusive, non-transferable right to access and use Carvaly for your own personal vehicle-pricing checks or your organization's internal dealer workflows.

Carvaly is licensed, not sold. We and our licensors retain all rights, title, and interest in the software, website, designs, databases, workflows, models, reports, brand assets, documentation, and other materials that make up the service.

You may use Output internally for ordinary vehicle-pricing, stock, fleet, and transaction decisions. You may not present Output as an official appraisal, certified inspection, guaranteed sale price, guaranteed purchase price, lender-approved value, insurer-approved value, or XPO8 Limited endorsement.

• You may not copy, resell, sublicense, lease, host, publish, mirror, or commercially exploit Carvaly output outside the product unless we have expressly permitted it in writing.
• You may not reverse engineer, decompile, disassemble, scrape, crawl, bulk export, benchmark, model-train from, or build a competing service from Carvaly, except where applicable law gives you a non-waivable right.
• You may not remove or obscure proprietary notices, security notices, source labels, disclaimers, or attribution displayed by Carvaly.
• You may not use screenshots, exports, or reports to imply that Carvaly has inspected a vehicle, approved a transaction, verified ownership, certified mileage, or guaranteed a buyer or seller.

Accounts, organizations, and access control

You are responsible for maintaining accurate account information, protecting your login credentials, and all activity that occurs through your account unless caused by Carvaly's breach of these Terms or our security obligations.

Dealer organization owners and admins are responsible for inviting the right users, removing users who no longer need access, assigning roles, monitoring workspace activity, and ensuring that team members use Carvaly lawfully.

If you believe an account, invite, API key, device session, organization role, or workspace has been compromised, you must notify us promptly and take reasonable steps to secure your systems.

Organization admins may be able to view, export, manage, retain, or delete records created by users in that organization. If you join an organization with a work email or invitation, your use may be controlled by that organization and not only by you personally.

We may require email verification, additional authentication, fraud checks, role confirmation, payment verification, or other access controls before allowing access to certain features. We may refuse, suspend, or limit access where account details appear inaccurate, risky, abusive, or unauthorized.

Dealer organization responsibility

Each organization is responsible for its own business decisions, user management, internal policies, staff training, permissions, customer communications, advertisements, vehicle disclosures, transaction documents, and compliance with laws that apply to its operations.

If an organization admin adds a user, that organization is responsible for the user's access to organization records until the user is removed or access is otherwise disabled. If a user leaves the dealership or changes role, the organization should remove or adjust access promptly.

Carvaly may provide audit events, role labels, billing state, or workspace activity, but these tools do not replace the organization's own compliance, HR, accounting, customer-record, or operational controls.

Vehicle inputs, market data, and data quality

Carvaly relies on vehicle information you provide, account and organization records, third-party and public marketplace signals, historical listing context, and internal calculation methods. Inputs such as make, model, year, variant, mileage, condition, location, ownership history, service history, accident history, financing status, and listing details can materially affect output.

Market data may be incomplete, delayed, stale, inaccurate, duplicated, withdrawn, incorrectly categorized, or affected by seller behavior, marketplace presentation, geographic imbalance, taxes, fees, promotions, demand shifts, and macroeconomic conditions. Carvaly may filter, normalize, enrich, or exclude data, but we do not guarantee that every listing or comparable is captured or correct.

You must not upload, submit, or rely on information that you know or should know is false, misleading, unlawful, confidential without authorization, infringing, malicious, or harmful to another person or business.

A listed asking price is not necessarily a sale price, transaction price, final negotiated price, trade-in price, wholesale price, financing-approved value, or insurance value. Marketplace listings may reflect seller expectations, promotional tactics, dealer stock strategies, stale listings, duplicate listings, withdrawn listings, or incomplete vehicle condition information.

Carvaly may use reasonable normalization to compare vehicles across variants, locations, mileage bands, ages, and listing quality. Normalization is an estimation process and may not capture every trim difference, accessory, repair, modification, import detail, ownership detail, warranty, or local demand factor.

Market data and valuation disclaimer

Carvaly valuations, ranges, comparable listings, confidence signals, market maps, trend lines, margin estimates, aging-stock cues, and other outputs are decision-support information only. They are not guaranteed prices, binding purchase offers, sale offers, appraisals, insurance valuations, financing advice, investment advice, tax advice, legal advice, or mechanical inspection reports.

You remain responsible for checking vehicle condition, ownership, title and registration status, encumbrances, theft or police records, roadworthiness, mileage accuracy, flood or accident history, service records, import status, warranty status, taxes, financing terms, buyer and seller identity, and the final commercial terms of any transaction.

Carvaly does not guarantee that a vehicle will sell, buy, trade, finance, insure, or appraise at any number shown in the product. You should use professional judgment and independent checks before making pricing, stocking, purchasing, lending, insurance, or sale decisions.

Output may be less reliable for rare vehicles, heavily modified vehicles, imported units, commercial vehicles, vehicles with unusual mileage, vehicles with missing trim data, accident-damaged vehicles, flood-damaged vehicles, repossessed vehicles, write-offs, vehicles with incomplete documentation, or vehicles in thin market segments.

Any confidence indicator, sample count, comparable listing count, or market signal is a product aid. It is not a warranty that the underlying data is complete, representative, current, independently verified, or suitable for your specific transaction.

Billing, subscriptions, and credits

Paid features, subscriptions, credit packs, top-ups, checkout pages, invoices, renewal terms, and plan limits are presented in the product or in written order terms. You authorize us and our payment processors to charge the payment method you provide for confirmed purchases, renewals, taxes, and applicable fees.

Unless stated otherwise in the product, a successful valuation may consume one credit. Subscription credits may expire at the end of the relevant billing period. Top-up credits are intended to remain available until used, subject to account standing, fraud controls, service availability, and any plan-specific terms shown at purchase.

Fees are non-refundable except where required by law or expressly approved by XPO8 Limited. We may suspend or limit paid features if payment fails, a subscription lapses, credits run out, a charge is disputed, we detect misuse, or we reasonably need to protect the service.

Payment processing may be handled by third parties such as Stripe. Those providers may present their own terms and privacy notices. Carvaly does not store full card numbers where a payment processor tokenizes or stores the payment instrument.

Unless the checkout page or written order says otherwise, subscriptions renew automatically for the billing period selected until cancelled. Cancellation normally stops future renewal; it does not automatically refund past charges, unused time, consumed credits, or unused credits unless required by law or expressly approved by us.

Prices may be shown in Malaysian ringgit or another currency depending on the product path. Taxes, duties, withholding, bank fees, currency conversion fees, card issuer charges, and payment processor fees may be added or handled separately. You are responsible for taxes and fees that apply to your purchase or use of the Service unless we are legally required to collect and remit them.

If you dispute a payment, reverse a charge, misuse credits, create duplicate accounts, bypass plan limits, or use automated activity to consume credits unfairly, we may suspend access, reverse credits, require payment verification, or terminate the relevant account or organization.

Plan limits, fair use, and product controls

Plans may include limits on users, organizations, valuations, saved records, credits, searches, exports, API access, support level, storage, or other usage. We may enforce limits through technical controls, billing controls, throttling, manual review, or account restrictions.

A plan described as unlimited, high-volume, or similar remains subject to fair use, security controls, infrastructure limits, product integrity controls, and these Terms. We may restrict usage that materially exceeds normal use, degrades the Service, creates data-source risk, or appears automated, abusive, or resale-oriented.

We may provide pilots, discounts, coupons, credits, or promotional pricing. These may be withdrawn, corrected, limited, or ended according to their stated terms or if we detect misuse, eligibility issues, or error.

Acceptable use

You must use Carvaly lawfully, responsibly, and in a way that does not harm the service, other users, marketplaces, data providers, or XPO8 Limited. You are responsible for ensuring that your use complies with vehicle, consumer protection, advertising, privacy, intellectual property, competition, anti-bribery, anti-fraud, export, tax, and other applicable laws.

• Do not attempt unauthorized access, credential stuffing, session hijacking, security testing without written permission, rate-limit bypassing, or interference with Carvaly's systems.
• Do not scrape, harvest, copy, cache, resell, publish, or redistribute protected Carvaly output or workspace data at scale.
• Do not upload malicious code, spam, false listings, fake offers, manipulated mileage or condition data, misleading photos, or content that infringes another person's rights.
• Do not use Carvaly to discriminate unlawfully, facilitate fraud, evade sanctions, launder money, misrepresent a vehicle, or mislead buyers, sellers, dealers, lenders, insurers, regulators, or consumers.
• Do not impersonate another person, misstate your dealership or organization authority, or access another organization's records without permission.
• Do not probe, scan, stress test, load test, vulnerability test, or security test Carvaly without our prior written permission.
• Do not use bots, scripts, browser automation, shared credential pools, or account farms to bypass usage limits, consume credits, scrape data, or simulate product activity.
• Do not submit personal data, government identifiers, financial documents, or sensitive details unless the product specifically asks for that information and you have a lawful basis to provide it.

Your content and permissions

You retain ownership of User Content that you or your organization submit to Carvaly, subject to the rights you grant us in these Terms and the rights your organization may have in its workspace records.

You grant XPO8 Limited a worldwide, non-exclusive, royalty-free license to host, store, copy, process, transmit, display, analyze, transform, and otherwise use User Content as reasonably needed to provide, secure, support, maintain, improve, and enforce Carvaly.

You represent that you have all rights and permissions needed to submit User Content and allow Carvaly to process it. This includes permissions for vehicle photos, listing descriptions, customer or seller details, organization records, and any third-party information included in notes or files.

We may remove or restrict User Content if we reasonably believe it violates these Terms, infringes rights, creates legal risk, exposes personal data unnecessarily, threatens security, misleads users, or harms the Service.

Third-party services, links, and providers

Carvaly may interact with or link to third-party websites, marketplaces, payment processors, authentication services, hosting providers, analytics tools, communication systems, mapping services, support tools, and data sources. Those third parties are independent from XPO8 Limited unless expressly stated otherwise.

Third-party availability, accuracy, terms, pricing, privacy practices, API changes, outages, or data restrictions may affect the Carvaly experience. We are not responsible for third-party websites or services that we do not control.

If a third-party provider changes its terms, pricing, technical requirements, data access, API, website structure, anti-abuse rules, or availability, Carvaly features that depend on that provider may change or stop working. We are not liable for those third-party changes, even if they reduce the usefulness of a feature.

You must comply with any third-party terms that apply to services you choose to use with Carvaly, including payment processor terms, authentication provider terms, marketplace terms, and any communication tool terms.

Cookies and similar technologies

Carvaly may use cookies, local storage, session tokens, device identifiers, pixels, and similar technologies for login, account security, routing, preference storage, analytics, fraud prevention, product diagnostics, and marketing measurement where enabled.

Some technologies are necessary for the service to work. You can control many browser-level cookies through your browser settings, but disabling necessary cookies may prevent login, checkout, workspace access, or saved preferences from working correctly.

Security, misuse reports, and vulnerability handling

We use technical and organizational measures intended to protect Carvaly, but no service can be perfectly secure. You must use reasonable security practices, including protecting devices, securing email accounts, using strong passwords, keeping access limited to authorized users, and promptly removing users who should no longer have access.

If you discover a vulnerability, suspected breach, account compromise, exposed workspace record, payment issue, or misuse of the Service, report it promptly to support@carvaly.com or the security contact we provide in the product. Do not publicly disclose vulnerabilities, access data that is not yours, or disrupt the Service.

We may investigate security reports, restrict accounts, rotate credentials, preserve logs, notify affected users where appropriate, and share information with service providers, law enforcement, regulators, or affected organizations where reasonably necessary.

Electronic communications and notices

You agree that Carvaly may communicate with you electronically through the product, email, support tools, account notices, billing notices, security notices, or postings on the website. Electronic communications satisfy any legal requirement that a communication be in writing to the extent permitted by law.

You are responsible for keeping your account email address current. Notices sent to the last account email address, organization admin email, or support address you provided may be treated as received even if that address is no longer valid.

We may send operational notices even if you opt out of marketing communications. Operational notices may include security alerts, billing notices, policy updates, account messages, product deprecation notices, and transaction workflow notifications.

Intellectual property, feedback, and brand use

Carvaly, the Carvaly name and logo, product designs, workflows, report layouts, software, models, databases, and documentation are owned by XPO8 Limited or its licensors. Third-party names, logos, data, and marketplaces remain the property of their respective owners.

If you send us ideas, suggestions, bug reports, feature requests, improvements, or other feedback, you grant XPO8 Limited a perpetual, worldwide, royalty-free right to use that feedback without restriction or compensation, while we will continue to handle personal data according to the Privacy Policy.

You may not use Carvaly's name, logo, screenshots, badges, or product output in public marketing, press releases, training material, resale offerings, or endorsements without our prior written permission.

If you believe content in Carvaly infringes your intellectual property rights, send a notice to legal@carvaly.com with enough detail for us to identify the allegedly infringing content, the rights you claim, your contact details, and a statement that the information in your notice is accurate. We may remove or restrict content while we review the notice.

Confidentiality and workspace records

Your organization may store commercially sensitive records in Carvaly, including vehicle costs, target margins, inventory notes, offers, transaction statuses, and team activity. You are responsible for configuring access so that only authorized users can view or change those records.

You must not disclose another user's non-public information, another organization's workspace records, or Carvaly's non-public technical, commercial, or security information unless you have authority to do so.

Confidentiality obligations do not prevent disclosure required by law, court order, regulator request, or professional adviser duties, provided the disclosing party gives notice where legally permitted and takes reasonable steps to limit unnecessary disclosure.

Availability, maintenance, and beta features

We aim to operate Carvaly reliably, but the service may be interrupted, delayed, degraded, or unavailable because of maintenance, deployments, provider outages, security incidents, network failures, legal restrictions, data-source changes, force majeure events, or other causes.

Some features may be labeled or treated as beta, preview, experimental, pilot, or early access. Those features may be less reliable, change more frequently, produce incomplete output, or be removed without notice.

Unless a separate written service-level agreement applies, Carvaly does not commit to any minimum uptime, support response time, recovery time, data-source refresh interval, feature availability, or error-correction timeline.

We may perform planned or emergency maintenance without notice where needed to protect security, reliability, legal compliance, or product integrity.

Exports, records, and backups

Carvaly may allow exports, reports, screenshots, or downloaded records in some plans. Exports may omit internal metadata, security logs, deleted records, proprietary calculations, data-source details, or information that we cannot provide for legal, security, contractual, or privacy reasons.

You are responsible for keeping your own business records, accounting records, transaction documents, customer communications, inspection records, and backups outside Carvaly where required for your operations or legal obligations.

Backups are designed for disaster recovery and service continuity, not for user-directed archival retrieval. We do not guarantee that deleted records, previous versions, expired credits, or historical output can be restored.

Suspension and termination

You may stop using Carvaly at any time. Organization admins may remove users from their organization. We may suspend, limit, or terminate access if we reasonably believe that you violated these Terms, created legal or security risk, failed to pay, abused credits, submitted misleading data, infringed rights, or used the service in a way that harms Carvaly or others.

After termination, your right to use Carvaly stops immediately. We may retain or delete records according to the Privacy Policy, product settings, legal duties, backup cycles, fraud-prevention needs, financial record requirements, dispute-resolution needs, and organization admin instructions where applicable.

Suspension or termination does not remove obligations that arose before suspension or termination, including payment obligations, confidentiality obligations, restrictions on misuse, indemnity obligations, liability limits, and provisions that by their nature should survive.

Disclaimers

To the maximum extent permitted by law, Carvaly is provided on an "as is" and "as available" basis. XPO8 Limited disclaims all warranties, representations, conditions, and guarantees not expressly stated in these Terms, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, availability, and uninterrupted or error-free operation.

We do not warrant that Carvaly will meet every business need, that every data source will remain available, that every valuation will be accurate, that every comparable listing will be relevant, or that every error will be corrected.

No employee, contractor, support representative, sales representative, website copy, demo, chat message, or product message creates a warranty or guarantee unless it is expressly included in a signed written agreement by XPO8 Limited.

Limitation of liability

To the maximum extent permitted by law, XPO8 Limited and its directors, officers, employees, contractors, affiliates, licensors, and service providers will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or loss-of-profit damages, loss of revenue, loss of goodwill, loss of data, vehicle transaction losses, missed deals, overpayment, underpricing, financing losses, or market movement, even if advised that those losses may occur.

To the maximum extent permitted by law, XPO8 Limited's total aggregate liability for claims relating to Carvaly will not exceed the greater of the fees you paid to XPO8 Limited for the affected Carvaly service in the six months before the event giving rise to the claim or RM 500. This limit does not exclude liability that cannot be excluded or limited under applicable law.

The limitations in this section apply regardless of the legal theory of liability, including contract, tort, negligence, strict liability, statutory duty, misrepresentation, restitution, or otherwise, and regardless of whether a remedy fails its essential purpose.

Indemnity

You agree to defend, indemnify, and hold harmless XPO8 Limited and its directors, officers, employees, contractors, affiliates, licensors, and service providers from claims, losses, liabilities, damages, penalties, costs, and expenses arising from your misuse of Carvaly, your violation of these Terms, your workspace content, your vehicle listings or offers, your transaction decisions, your violation of law, or your infringement of another person's rights.

We may control the defence of any indemnified claim or require your reasonable cooperation. You must not settle a claim in a way that admits fault by XPO8 Limited, imposes obligations on XPO8 Limited, or affects the Service without our prior written consent.

Force majeure

XPO8 Limited is not responsible for delay or failure to perform caused by events outside our reasonable control, including natural disasters, epidemics, war, terrorism, civil unrest, government action, legal restrictions, labour disputes, internet or telecommunications failures, cloud provider incidents, payment network failures, marketplace blocking, data-source disruption, power failures, cyberattacks, or security emergencies.

Changes to these Terms

We may update these Terms from time to time. If changes are material, we may provide notice through the website, product, email, or another reasonable channel. The updated Terms will apply from the effective date stated in the updated version or, if no date is stated, from publication.

Your continued use of Carvaly after an update takes effect means you accept the updated Terms. If you do not agree to the updated Terms, you must stop using Carvaly before the update applies to you.

We may also change product-specific terms, plan terms, pricing pages, credit rules, checkout terms, support terms, or feature documentation. Where those materials conflict with these Terms, the more specific product or order terms apply to that feature or purchase unless prohibited by law.

Governing law and disputes

Unless a separate written agreement states otherwise, these Terms are governed by the laws of Hong Kong, without regard to conflict-of-law rules. The courts of Hong Kong will have non-exclusive jurisdiction over disputes relating to these Terms or Carvaly, except where applicable consumer law gives you mandatory rights in another forum.

Before starting formal proceedings, each party should make a reasonable good-faith effort to resolve the dispute by written notice and discussion. This does not prevent either party from seeking urgent injunctive or equitable relief where needed to protect rights, data, security, or confidential information.

Claims must be brought individually and not as a class, representative, or collective proceeding to the maximum extent permitted by law. Nothing in this section limits non-waivable consumer rights or regulatory rights that apply to you.

General terms

These Terms, together with the Privacy Policy and any written order terms or product-specific terms that apply to you, form the agreement between you and XPO8 Limited for Carvaly. If any provision is invalid or unenforceable, the remaining provisions remain in effect and the invalid provision will be modified to the minimum extent necessary to make it enforceable where possible.

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. XPO8 Limited may assign these Terms in connection with a merger, acquisition, restructuring, financing, sale of assets, or transfer of the Carvaly business. No waiver is effective unless in writing, and a delay in enforcement is not a waiver.

Headings are for convenience only. The words "including" and "such as" mean "including without limitation". If these Terms are translated, the English version controls unless applicable law requires otherwise.