1. Overview (plain language)
Auto_Indexd is a read-only information and comparison service. We use limited information to:
- Operate the Service
- Understand usage (analytics)
- Improve performance and reliability
- Maintain security and prevent abuse
- Respond to legal and privacy requests
We do not run third-party ad networks in the MVP and we do not sell personal data.
2. Information we collect
A) Usage and analytics data (MVP)
We may collect anonymous or pseudonymous usage data such as:
- Pages viewed, searches performed, filters used
- Clicks (including outbound clicks to third-party sources)
- Session activity, approximate engagement metrics
- Referring/landing pages (where available)
B) Device and technical data
We may collect:
- IP address (often processed in logs and/or security systems)
- Device type, browser type, operating system
- Approximate location derived from IP (city/region level)
- Language, time zone
- Diagnostic and performance data (e.g., errors, load times)
C) Public listing data
We collect and display data from publicly accessible web pages, such as:
- Vehicle information (price, make/model, year, mileage, specs)
- Listing descriptions and attributes visible publicly
- Public photos or thumbnails (where displayed publicly at the source)
- Source name and link to the original listing
Important: Some public listings may include personal data (e.g., a seller name or phone number) if the source displays it publicly. If present, we may process and display it only as part of presenting the listing and linking to the source, and we support removal requests as described below.
3. Information we do not collect (MVP)
We do not collect:
- User accounts or profiles (MVP)
- Payment or financial information
- Messages between buyers and sellers
- Private contact details beyond what is publicly visible on source pages
- Sensitive personal data (unless it appears in public pages; if it does, you should contact us for removal)
4. Cookies and similar technologies
We use cookies or similar technologies for:
- Essential purposes: site functionality, security, load balancing, preferences
- Analytics purposes: understanding usage and improving the Service
We do not use cross-site behavioral advertising cookies for the MVP.
You can control cookies through your browser settings. If required by applicable law, we will provide a cookie consent mechanism for non-essential cookies.
5. How we use information (purposes)
We use the information described above to:
- Provide, operate, and maintain the Service
- Monitor usage trends and improve features and content
- Measure performance, diagnose errors, and improve reliability
- Detect and prevent fraud, abuse, scraping, and security incidents
- Comply with legal obligations and respond to lawful requests
- Process opt-out/takedown and privacy requests
6. Legal basis (Sri Lanka PDPA and similar standards)
Where applicable, we process personal data based on one or more of the following:
- Your consent (e.g., where required for analytics cookies)
- Our legitimate interests (e.g., operating, securing, and improving the Service)
- Compliance with legal obligations
- Other lawful grounds permitted by applicable law
7. Sharing of information
We may share information:
- With service providers/processors that help us operate the Service (e.g., hosting, analytics, monitoring, security), under contractual obligations to protect data
- For legal reasons if required by law, court order, or to protect rights, safety, and security
- Business transfers: if we undergo a merger, acquisition, or asset sale, information may be transferred as part of that transaction (with appropriate protections)
We do not sell personal data.
8. International transfers
Our service providers may store or process data outside Sri Lanka. Where this occurs, we use reasonable safeguards (such as contractual protections and security measures) consistent with applicable law.
9. Data retention
We keep information only as long as needed for the purposes described:
- Analytics data: typically retained for a limited period (e.g., 12–24 months), depending on configuration
- Security logs: typically retained for a limited period (e.g., 30–180 days), unless needed longer for investigations or legal compliance
- Indexed listing data: retained as needed to operate the Service and may be refreshed or removed when listings change or upon valid takedown requests
10. Security
We use reasonable technical and organizational measures to protect data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Your rights and choices
Depending on applicable law (including Sri Lanka's PDPA), you may have rights such as:
- Request access to personal data we hold about you
- Request correction of inaccurate personal data
- Request deletion/removal in certain situations
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent (e.g., analytics cookies, where applicable)
You can also request removal of publicly displayed personal data that appears in listings indexed by the Service.
12. Opt-out and removal requests (websites and individuals)
We provide mechanisms for:
- Website/domain exclusion requests (where feasible)
- Removal of specific listings from Auto_Indexd
- Removal of personal data that appears in publicly visible listing pages and is shown through the Service
To request removal, contact us (Section 15) with:
- The Auto_Indexd page URL(s) and/or original source URL(s)
- What you want removed and why
- Proof of authority (if requesting on behalf of a business or another person)
We will process valid requests promptly and may request additional verification to prevent misuse.
13. Third-party sites
When you click links to third-party websites, their privacy practices apply. We are not responsible for third-party privacy policies, content, or practices.
14. Children's privacy
The Service is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.
15. Contact
For privacy inquiries, opt-out/takedown requests, or exercising rights:
Email: support@autoindexd.com
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. If we introduce optional user accounts or other new features that materially change data collection, we will update this policy before launch.
