Privacy Policy

When you create an account we store your email, display name, and any contact details you add (phone number, WhatsApp, Telegram, Viber) — either entered directly or provided by Google or Apple if you sign in with them. When you publish a listing we store the car details, photos, and price you provide. We record which listings you open and when you reveal a seller's contacts, so sellers can see how their listings perform. If you enable notifications, we store a push token for your device. If you upgrade a listing, Stripe processes your payment on our behalf — we never see or store your card details. If you allow usage statistics, Firebase Analytics collects anonymous usage events and a device identifier generated by Google. Our services are not directed at children under 16 and we do not knowingly collect their data.

Your contact details are shown to other users only on listings you publish, so buyers can reach you. We use your account information to operate the marketplace — authentication, displaying your listings, keeping your saved cars in sync across devices, and sending the push notifications you've opted into. We use crash and performance diagnostics to find and fix bugs.

We process your account, listing and payment data to perform our contract with you (Art. 6(1)(b) GDPR). Listing statistics, content moderation and crash diagnostics rest on our legitimate interest in running a safe and working marketplace (Art. 6(1)(f) GDPR). Push notifications and usage statistics rest on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the app.

We keep your data for as long as it is needed for the purposes it was collected for, including to meet our legal, tax and accounting obligations. In practice: your profile, listings and their photos stay until you delete them or delete your account; records of listing views and contact reveals last as long as the listing; push tokens go when you turn notifications off or delete your account; payment records are kept for as long as accounting and tax law requires. Account and listing data are stored on servers in the EEA — currently Supabase, in Amazon Web Services' Ireland region.

We do not sell your personal information. Listing photos and the contact details you choose to publish are visible to anyone using the app, by design — that is how buyers and sellers connect. We also share data with the providers that run the app on our behalf: Stripe (payments), Cloudflare (photo storage), Sentry (crash diagnostics), Google and Apple (sign-in), Google Firebase (push delivery and, with your consent, usage statistics), and OpenAI (generating and translating listing descriptions from the vehicle details you enter — never your contact details or VIN). Stripe, Sentry, Google, Apple and OpenAI process data outside the EU/EEA; those transfers are covered by the European Commission's Standard Contractual Clauses.

You have the right to access your data, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given without affecting processing already carried out. Contact support@autoho.me to exercise these rights. If you feel we've fallen short, you can lodge a complaint with the data protection authority in your country, or directly with the Polish authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

You can edit your profile and contact details at any time from the Profile tab, manage notifications and usage statistics from Settings, and remove a listing whenever you like. Deleting your account permanently removes your profile, listings, and saved cars.

Best Family Sp. z o.o., ul. Komandorska 66 lok. 106-107, 50-158 Wrocław, Poland is the data controller responsible for the personal data described in this policy. You can reach us at support@autoho.me.