Privacy Policy

This Privacy Policy explains how Autozite ("Autozite", "we", "us") collects, uses and protects information when you use our website and mobile-optimized web app to buy, sell, rent or advertise vehicles, spare parts and related services in Sri Lanka. By using Autozite, you agree to the collection and use of information as described here.

We collect the following categories of information:

• Account information: your phone number, a hashed password, and the display name you choose when you register. Your phone number is verified with a one-time code (OTP) sent by SMS.
• Google account information (admin accounts only): if you sign in as an Autozite administrator, we receive your name and email address from Google Sign-In. Regular buyer/seller accounts do not use Google Sign-In.
• Listing content: anything you include in an ad, wanted post, business or shop listing - titles, descriptions, prices, photos, and the district/city you select.
• Contact preferences: the phone and WhatsApp number you choose to show on your listings, and whether you allow calls or WhatsApp messages from other users.
• Payment records: for paid membership plans, we store the bank transfer reference and receipt image you submit for manual review - we do not collect or store card numbers or online banking credentials.
• Usage and device information: IP address, browser/user-agent, and basic activity such as ad views, favorites and login sessions, used for security, fraud prevention and rate-limiting.
• Cookies: a small number of strictly necessary, httpOnly cookies that keep you signed in. We do not use third-party advertising or tracking cookies.

• To create and secure your account, and verify your phone number.
• To publish and display the listings you choose to post.
• To let other users contact you about a listing, using the contact details and preferences you set on that listing.
• To review and activate paid membership plans after a manual bank-transfer payment.
• To moderate content, investigate reports, and enforce our Terms of Service.
• To detect and prevent fraud, abuse, and security incidents.
• To send you account-related SMS messages (OTP codes, verification, important notices) - we do not send marketing SMS without your consent.

We do not sell your personal information. We share information only in these situations:

• With other users: the contact details and listing content you choose to make public are visible to anyone browsing that listing.
• With service providers: our SMS provider (for OTP delivery) and our cloud storage provider (for hosting uploaded photos) process data on our behalf, under contract, solely to provide those services.
• For legal reasons: if required by law, regulation, or a valid legal process, or to protect the rights, property or safety of Autozite, our users, or the public.

We keep account and listing information for as long as your account is active. Expired or removed listings, and their photos, may be retained for a limited period for moderation and dispute-resolution purposes before being permanently deleted. You may request deletion of your account at any time (see Section 7).

Passwords are stored using a strong, salted one-way hash (Argon2) - we cannot see or recover your password. Authentication uses secure, httpOnly session cookies. Access to administrator tools requires a verified Google account and is restricted to authorized staff. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your information.

You may access, correct, or request deletion of your personal information, or ask what information we hold about you, by contacting us at privacy@autozite.lk. If you are in Sri Lanka, you also have rights under the Personal Data Protection Act No. 9 of 2022.

Autozite is intended for users who are at least 18 years old. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page.

Questions about this policy can be sent to privacy@autozite.lk.