Privacy Policy

Last updated: 6 November 2026

[Company Legal Name] ("we", "us", "AutoDealux") operates the AutoDealux marketplace and dealer platform. This policy explains what personal data we collect, why, and your rights over it. We act as a data controller for platform accounts and as a processor for the dealers who use AutoDealux to run their business.

Who we are

• Controller: [Company Legal Name], [Registered Address], [Country].
• Contact / Data Protection: [privacy@yourdomain.com].

Data we collect

• Account data: name, email, phone, password (hashed), dealership details.
• Security data: devices and sessions used to sign in, sign-in alerts, and records of important account changes.
• Usage data: pages viewed, device/browser, IP address, approximate location.
• Listing & enquiry data: vehicles, photos, messages, test-drive, booking and finance enquiries.
• Dealer customer records: details a dealer keeps about its customers, which can include name, contact details, address, national ID number (such as a CNIC), driving licence number, sales, payments and rentals.
• Payment data: plans, invoices and payment status. Any bank or wallet reference or receipt photo you send us. Card details, if taken online, are handled by a payment provider and are not stored by us.
• Connected accounts: if you connect a Facebook Page, we store the Page id, name, and an encrypted access token so we can post on your behalf. We do not post without your action and we do not access your personal profile, friends, or messages.

AI features

When you use AI features, your messages and photos are sent to our AI provider to produce a response. AI answers can be wrong, so please check them before relying on them. Website visitors are told when they are chatting with an AI assistant. We store conversations with the dealer assistant and website chat, and delete them after 12 months without activity. Customers, enquiries and other records created from a conversation are kept separately.

Usage records. We record how often AI features are used, including by which team member, for billing and to operate the service. A showroom's owner can see this for their own showroom. These records continue if a showroom opts out of service improvement, because billing depends on them.

Service improvement. Unless a showroom opts out, we also keep the first question of each dealer assistant conversation and records of where people have difficulty on screen. Before storing a question, we remove email addresses, long numbers such as phone and ID numbers, number plates, and names held in the showroom's account. Other details may remain if they are typed into a question. We delete these records after 90 days. Owners can opt out under Settings > AI access, which also deletes them.

AutoDealux Publisher (Chrome extension)

The Publisher fills a car-sale advert form on PakWheels, Facebook Marketplace or OLX with the details and photos of a car you chose in AutoDealux. It works only when you press "Fill on ..." in AutoDealux, and only on those sites. It never reads or stores your passwords for those sites and never submits a form for you. If a site has changed its form, the extension may send the names and labels of the form's fields, and the car detail being filled, but not anything you typed, to AutoDealux and our AI provider to find the right field, so we can keep the extension working. The extension keeps the current job in temporary browser memory, cleared when the tab closes.

How we use it

To provide the service, authenticate you, publish and manage listings, connect buyers and dealers, provide AI features, bill for the service, keep accounts secure, prevent fraud, improve the service, meet legal obligations, and — where you have connected them — publish content to your own social Pages at your request.

Legal bases (GDPR/UK-GDPR)

Performance of a contract, our legitimate interests (running, securing and improving the platform, which you can object to), your consent (e.g. marketing, non-essential cookies, connecting a social account), and compliance with law. Where other data-protection laws apply, we rely on the equivalent grounds under those laws.

Sharing

With the dealer you contact; other dealers, only for stock a dealer chooses to share on the dealer network; our infrastructure and communication providers (hosting, email/SMS); our payment provider; our AI provider when you use AI features; and, when you use them, third-party platforms such as Meta. We never sell your personal data.

International transfers

Our providers, including our AI provider, may process data outside your country. Where the law requires it, we use appropriate safeguards (e.g. Standard Contractual Clauses).

Retention

We keep data only as long as needed for the purposes above or as required by law, then delete or anonymise it. In particular:

• AI conversations: deleted after 12 months without activity.
• Service-improvement records: deleted after 90 days, or straight away if a showroom opts out.
• AI usage, billing, invoice and security records: kept as long as needed for accounting, tax, security and legal purposes.
• Account and dealer customer records: kept while the account is active, unless deleted sooner.

Your rights

Access, correction, deletion, portability, restriction, and objection. Where processing is based on consent, you can withdraw it at any time. You can send a request through our privacy request form or by contacting privacy@yourdomain.com]. If a dealer holds your details as its customer, we may pass your request to that dealer, as it decides how those records are used. To delete data associated with a connected Facebook account, see our [Data Deletion Instructions. You may also complain to your local data-protection authority.

Cookies

See our Cookie Policy.

Changes

We will post any changes here and update the date above.