Privacy Policy

Information you provide

• When you create an account: your name, email or phone number, and city.
• When you register a showroom: business name, address, WhatsApp number, business hours, and description.
• When you create a listing: vehicle or part details (brand, model, year, price, mileage, condition), and uploaded photos.
• When you submit a trade-in or price-check form: details about your current vehicle.
• Messages sent to buyers or sellers through chat or inquiries.

Information collected automatically

• Technical device and browser details (browser name, screen size, and operating system).
• IP address, used only for security, fraud prevention, and estimating your general city.
• Your activity on the site: listings viewed, searches made, and items added to your wishlist.
• Login sessions, so you do not have to enter your password repeatedly.

Payment information

• We never store your complete card or bank number in our database.
• During payment, we retain only the transaction ID, amount, date, and status.
• Proof of a bank transfer or Easypaisa payment is retained only until verification.

• To operate your account and publish listings.
• To connect buyers and sellers through chat, inquiries, and phone-number reveals.
• To confirm payments and track showroom subscriptions or listing fees.
• To detect fake listings, scams, and duplicate accounts.
• To send essential notices about listing decisions, payments, and showroom expiry.
• To improve the site by learning which features are useful.
• When legally required by a valid request from a court or authority.

What is public

• Your listing details, including vehicle or part information and photos, because they are the core of the marketplace.
• Showroom name, city, address, and business hours when you register a showroom.
• Your phone number remains masked until a visitor chooses “Show Number”.

What is not public

• Your email address.
• Your password, which is securely hashed and cannot be read by us.
• Payment details and transaction history.
• Your wishlist and search history.

Service partners

• Cloudinary, to host and optimise photos.
• Email and SMS providers, to send verification codes and essential notices.
• Payment gateways or banks, only to verify transactions.
• Each partner can access only the data needed for its service.

• A login token, so you do not have to log in on every page.
• Your light or dark theme choice, saved in your browser and not sent to our server.
• Your language choice (English, Roman Urdu, or Urdu), stored under the key autopk_lang.
• Wishlist and recent-search cache, stored only in your browser.
• You can clear these through your browser settings; the site will still work, but you will be logged out.

• Passwords are hashed and never stored as plain text.
• Connections to the server use HTTPS.
• Every dashboard route requires a login.
• Uploaded photos are kept in separate secure storage, not on the application server.
• Only a limited number of people can access the administration panel.
• Please use a strong password and never share it with anyone.

• Active-account data remains while you use your account.
• A deleted listing remains recoverable for 30 days, then is permanently removed.
• Chat messages are kept for 12 months and then archived.
• Payment records may be retained longer for legal accounting requirements.
• When you close your account, personal information is removed; only records required by law remain.

• Update or delete your profile and listing details at any time.
• Close your showroom and remove all linked listings.
• Request a copy of your data.
• Stop marketing emails; essential transactional notices will still arrive.
• Request complete account deletion by emailing support; we act within seven business days.

• This platform is not intended for anyone under 18.
• We do not knowingly collect children’s data.
• If we learn of such an account, we remove it.

• Some listings or blog posts may contain links to other websites.
• Those websites have their own privacy policies, and we are not responsible for them.
• Read their policy before sharing personal information through an external link.

• The person who creates a listing is responsible for the accuracy of its information.
• We may remove fake or misleading listings without prior notice.
• Uploaded photos must belong to you; using someone else’s photo is prohibited.
• Use the Report button to flag a suspicious listing.

• We update this policy when necessary.
• For major changes, we update the “Last updated” date and notify you by email or on the site.
• Continuing to use the site after a change means you accept the new policy.

• Email: pakautozone.inc@gmail.com
• We usually reply within two to three business days.
• Data-deletion requests are handled within seven business days.