Privacy

Privacy Policy

Last Updated: October 20, 2026

1. Data Governance Architecture

AutoFiti treats the protection of automotive business information and private contact parameters with extreme structural gravity. This Privacy Policy details how we aggregate, store, encrypt, and process personal records across autofiti.africa and its associated country channels. All central server databases, user metadata tables, and system backup archives are managed, secured, and legally regulated under the framework of the Kenya Data Protection Act. Our cross-border data pipeline is designed to strictly meet the compliance mandates enforced by the Office of the Data Protection Commissioner (ODPC) in Nairobi.

2. The Precise Categories of Data We Gather

  • Authenticated Identity Information: When establishing a private seller profile or a commercial vehicle yard storefront space, our system saves your full name, physical business locations, authorized country phone numbers, secondary WhatsApp connection links, and direct email addresses.
  • Automotive Asset Parameters: We log every detail input into your vehicle listings, including custom field parameters like vehicle identification profiles, registration codes, engine sizes, price quotes, and structural asset descriptions.
  • Technical Infrastructure Metadata: Our system dynamically tracks user session parameters, including device IP addresses, network operator routings, device hardware models, geographic domain mapping track paths, and browser cookie profiles.

3. Detailed Processing Methods and Data Distribution Triggers

AutoFiti utilizes your personal details strictly to drive our automotive classifieds engine. We will never sell, lease, or rent your private profile records to global third-party advertising brokers. Data transmission only occurs under these secure conditions:

  • Public Marketplace Interface: To allow buyers to coordinate vehicle inspections, your designated phone numbers, dealer location maps, and WhatsApp chat icons are rendered openly on our listing screens.
  • Financial Gateway API Integrations: To securely process paid features and monthly store plans, relevant identity metrics are transmitted via encrypted pipelines to your chosen gateway provider (M-Pesa, Flutterwave, Paystack, Stripe, PayPal).
  • Statutory and Law Enforcement Mandates: We will release comprehensive account tracking history, IP logs, and seller verification records to judicial or police authorities in Nairobi, Kenya, if required by a formal court order or anti-car-theft enforcement directive.

4. Data Encryption and Long-Term Security Standards

All personal profile parameters are transmitted using secure HTTPS protocols and stored behind hardened firewalls. We retain user profile data for as long as your account remains active. If an account is closed or deleted, we permanently wipe all matching database rows within 30 days, save for records we are legally required to retain under Kenyan corporate tax or fraud-tracking laws.

5. Data Subject Entitlements and Deletion Requests

Under the Kenya Data Protection Act, you possess explicit rights to request a complete copy of your stored records, correct inaccurate fields, or object to specific processing features. You can demand the absolute permanent erasure of your personal data at any time by sending a message to [email protected]. We verify account ownership before processing data deletion requests.