Privacy Policy

Your data is yours.
We just run the platform.

Last updated: May 2026

The short version

We collect only what we need to run the platform — your account details, car data, and usage patterns. We don't sell your data. We don't share it with advertisers. When escrow payments go live, payment processing is handled by regulated third-party providers (Paystack or Flutterwave) — your card details never touch our servers. If you close your account, you can ask us to delete your data and we will.

What we collect

Account data — Your email address, phone number (for OTP verification), and profile photo if you upload one.
Car data — Photos you upload, mileage information, VIN numbers, and any details you enter during a valuation or listing.
Valuation & listing history — Valuations you save and listings you publish — stored to your account so you can refer back to them.
Offer and haggle activity — Offers made, received, accepted, and declined. Used to run the transaction features and notify you.
Device & usage data — Standard web data — browser type, rough location (country/state, not precise GPS), pages visited, session duration. Used to improve the platform.
Communications — Messages you send through the platform, and any support emails or contact form submissions you send us.

How we use it

To run the platform — Valuations, listings, marketplace, offers, haggles, notifications — everything the product does.
To verify identity — Phone OTP and (in future phases) selfie-based identity checks for escrow-level features.
To send notifications — Alerts for new offers, haggle responses, listing activity, and system updates. You can manage these in your profile.
To improve the product — Aggregate usage data helps us understand what works and what doesn't. We don't profile individuals for advertising.
To prevent fraud — Listing and transaction data is used to detect and act on suspicious activity, fake listings, and bad actors.

Where your data is stored

Your data is stored in Supabase — a hosted PostgreSQL database built on AWS infrastructure. Car photos and documents are stored in Supabase Storage (S3-compatible). All data is encrypted at rest and in transit. We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain it (e.g. transaction records).

Who we share your data with

No one, for advertising — We do not sell, rent, or share your personal data with advertisers, data brokers, or marketing platforms.
Payment processors — When escrow goes live, payments are handled by Paystack or Flutterwave. They receive the minimum data required to process the transaction, under their own privacy policies.
SMS/OTP providers — Your phone number is shared with our OTP provider (Termii or Twilio) for verification purposes only.
Law enforcement — We may disclose data if required by Nigerian law or a valid court order. We will tell you where legally permitted.

Your rights

Access — You can request a copy of the personal data we hold on you.
Correction — You can update most of your data directly in your profile. For anything else, contact us.
Deletion — You can request deletion of your account and personal data. We process deletion requests within 30 days.
Withdrawal — You can withdraw consent for non-essential data use at any time by contacting us.

Cookies

We use minimal cookies — session authentication (so you stay logged in) and basic analytics. We don't use third-party tracking cookies. We don't run retargeting ads. You can block cookies in your browser settings, but some platform features may stop working if you do.

Changes to this policy

If we make material changes to how we handle your data, we'll notify you by email and update the "Last updated" date at the top of this page. Continued use of the platform after a policy update means you accept the updated terms.

Questions about your privacy?

Use the contact form at autovaluenigeria.com/contact and we'll respond within 48 hours.