1.Information we collect

We collect only the data needed to run your digital garage:

• Account information: Your name, email address and profile settings when you register, plus the Google or Apple identifiers used if you sign in with a social account. Passwords are stored only as salted one-way hashes.
• Vehicle and records data: Vehicle make, model, year, mileage logs, fuel and charging entries, maintenance and service history, expenses, insurance and registration details, and any photos or PDFs (receipts, invoices, policies) you attach to a vehicle.
• Shared and fleet data: Vehicles you share with other people, and — for organizations — vehicles, work orders, inspections and reports your organization manages. People you share with can see the records shared with them.
• Reminder preferences: The maintenance and renewal reminders you configure, by date or mileage.
• Technical and usage data: IP address, device type, app and operating system version, request timestamps, and crash or diagnostic logs — used for security, monitoring and error tracking.
• Payment details: Processed by our payment providers and the app stores. We do not store raw credit card numbers on our servers.

2.How we use your information

We process your data to operate and improve the Service, specifically to:

• Run your account: Identify you, store your records and sync them across your devices — the app works offline and keeps a local copy on your device that synchronises when you are online.
• Reminders: Deliver the maintenance and renewal notifications you configure.
• Billing: Process payments and manage active subscriptions.
• Support and improvement: Respond to requests, monitor and improve application performance, fix bugs and secure our systems.
• Legal compliance: Meet obligations required by applicable law.

3.How we share your information

We do not sell, rent or trade your personal data. We disclose it only to trusted vendors essential to running the Service:

• Cloud infrastructure: Microsoft Azure hosts the Service (Azure Container Apps, PostgreSQL database) and stores uploaded documents and photos (Azure Blob Storage).
• Payment providers: 2C2P, MyanmarPay, KBZPay, AYA Pay and Wave Money for MMK payments; Stripe for USD card payments; Google Play and Apple App Store billing for in-app subscriptions.
• Email delivery: Azure Communication Services sends service emails such as verification codes, password resets and invitations.
• People you share with: Other users you share a vehicle with, and members of your organization, can access the records shared with them.
• Legal compliance: If required by law, we may disclose information to comply with valid legal process or to protect the rights and safety of the Service and its users.

4.Data retention and deletion

We retain your personal data and vehicle records only as long as your account remains active or as needed to provide the Service. You can delete your account at any time from Settings → Profile → Edit Profile → Delete Account: this deactivates your account and archives your vehicles, and your records are retained so that the account can be restored — email us if you would prefer permanent erasure instead; the Account and Data Deletion page explains exactly what is deleted and what is retained. Data we are legally required to keep (for example, financial records) is retained only for as long as the law obliges.

5.Your data protection rights

Depending on where you live, applicable data protection laws may give you the right to access, correct, delete or export a copy of your personal data, to object to or restrict certain processing, and to withdraw consent at any time for features that rely on optional data. You can view, correct and export much of your data directly in the app, and delete your account in Settings. To exercise any other right, contact us at [email protected]

6.Cookies and local storage

The AutoX website stores a single cookie (dco_theme) to remember your light or dark theme preference; it contains no personal information. We do not use advertising or cross-site tracking cookies. Authenticated surfaces use session cookies to keep you signed in, and the mobile app keeps an offline copy of your data in local storage on your device.

7.Children's privacy

The Service is not directed at children under 16, and we do not knowingly collect personal information from them. If we learn that a child under 16 has provided us with personal information, we will take prompt steps to delete it.

8.Security

We protect your data with measures appropriate to the risk: HTTPS encryption in transit, bcrypt-hashed passwords, short-lived JWT sessions, role-based access control, and server-side authorisation so that each user can only access their own vehicles and organizations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.Updates to this privacy policy

We may periodically update this Privacy Policy to reflect product changes or regulatory requirements. Material changes will be announced in the app or by email. Your continued use of the Service after an update constitutes acceptance of the revised policy.

10.Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected]