Privacy Policy

Introduction

Welcome to Automagma ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vehicle marketplace platform, including our website, mobile applications, and related services (collectively, the "Services").

By using Automagma, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

Personal Information You Provide

When you register, create listings, or use our Services, we collect:

• Account Information: Full name, email address, phone number, WhatsApp number, city, password, and profile picture
• Business Information (Dealers): Business name, business address, business license/registration, tax identification
• Listing Information: Vehicle details, photos, descriptions, pricing, location, and contact preferences
• Payment Information: Payment method details, transaction history, Zaps balance, and voucher redemptions
• Communications: Messages sent through our in-app chat system, customer support inquiries, and feedback
• Verification Data: Phone verification OTPs, email verification tokens, identity documents (for dealers)

Information Automatically Collected

• Device Information: IP address, browser type, device type, operating system, and unique device identifiers
• Usage Information: Pages viewed, search queries, time spent on pages, listing views, click patterns, and feature usage
• Location Data: Approximate location based on IP address (with your consent)
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to enhance your experience

How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: Create and manage accounts, facilitate buying and selling, process payments, deliver in-app messaging
• Verification & Security: Verify phone numbers via WhatsApp OTP, prevent fraud, detect suspicious activity, enforce our Terms of Service
• Communications: Send transactional emails (account verification, password reset, listing status), system notifications, promotional offers (with consent)
• Personalization: Show relevant listings based on search history and preferences, recommend new cars and comparisons
• Analytics & Improvement: Analyze usage patterns, improve platform performance, develop new features
• Customer Support: Respond to inquiries, resolve disputes, provide technical assistance
• Legal Compliance: Comply with legal obligations, respond to lawful requests from authorities

WhatsApp Integration & Phone Verification

We use WhatsApp Business API to send verification codes (OTPs) to your phone number. When you request phone verification or update your phone number:

• You must first message our WhatsApp Business number from the phone you're verifying
• We send a 6-digit OTP code to your WhatsApp number
• OTP codes expire after 10 minutes
• We store verification records for security and audit purposes
• We do not read or store your WhatsApp chat history or contacts

Note: WhatsApp is owned and operated by Meta Platforms, Inc. Their privacy policy applies to data processed through WhatsApp. We only use WhatsApp for OTP delivery and system notifications.

How We Share Your Information

We may share your information in the following circumstances:

• With Other Users: Your public profile (name, city, listings) is visible to other users. Your phone number is only shared with verified users after mutual consent via in-app messaging
• With Dealers: When you inquire about a listing, your name and contact details are shared with the seller/dealer
• Service Providers: Payment processors, cloud hosting providers (for data storage), SMS/WhatsApp API providers, email services, analytics tools
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• Legal Requirements: When required by law, court order, or government request, or to protect our rights and safety
• With Your Consent: We may share information with third parties when you explicitly authorize us to do so

Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Encrypted password storage using bcrypt hashing
• Secure authentication using JWT tokens for API access
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Regular backups and disaster recovery procedures

Important: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. Never share your OTP, password, or banking credentials with anyone.

Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, session management, and core platform functionality
• Analytics Cookies: Help us understand how users interact with our platform (Google Analytics, etc.)
• Functional Cookies: Remember your preferences, search filters, and location settings
• Advertising Cookies: Used to show relevant ads based on your interests (if applicable)

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your account settings
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Data Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing emails, disable push notifications
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise these rights, contact us at [email protected] or through your account settings.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal obligations (tax records, transaction history)
• Resolve disputes and enforce our agreements
• Prevent fraud and ensure platform security

Inactive listings are automatically archived after 60 days. Deleted accounts may be retained in backup systems for up to 90 days before permanent deletion.

Children's Privacy

Automagma is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will delete it.

International Data Transfers

Your information may be transferred to and processed in countries outside Pakistan, including servers located in data centers with robust security standards. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Third-Party Links

Our platform may contain links to external websites (social media, payment gateways, dealer websites). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our platform or sending an email. The "Last Updated" date at the top indicates when the policy was last revised. Your continued use of Automagma after changes constitutes acceptance of the updated policy.