Privacy Policy

Last updated: April 7, 2026

AutoX ("we", "our", "us") operates the AutoX mobile application and the website at autox.trade. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

1. Information We Collect

When you use AutoX, we may collect the following information:

• Phone Number — Required for account creation and OTP verification
• Name and Email — Optional, provided by you in your profile
• User Type — Whether you are an individual buyer, dealer, or importer
• Calculation Data — Vehicle selections, price inputs, and calculation results
• Device Information — Device type, operating system, and app version
• Usage Data — Activity logs including timestamps and IP addresses

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity via SMS OTP verification
• Provide vehicle import cost calculations
• Maintain your calculation history and activity logs
• Improve our services and user experience
• Communicate with you about service updates

3. SMS Verification

We use third-party SMS providers (FitSMS for Sri Lankan numbers, Textbelt for international numbers) to send OTP verification codes. Your phone number is shared with these providers solely for the purpose of delivering verification messages. We do not use your phone number for marketing purposes.

4. Data Storage and Security

Your data is stored securely on our servers. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted storage of sensitive credentials
• JWT token-based authentication
• Parameterized database queries to prevent injection attacks
• HTTPS encryption for all data transmission

5. Data Retention

We retain your personal information for as long as your account is active. Calculation history and activity logs are retained for service improvement purposes. You may request deletion of your account and associated data at any time by contacting us.

6. Third-Party Services

We use the following third-party services:

• FitSMS — SMS delivery for Sri Lankan phone numbers
• Textbelt — SMS delivery for international phone numbers

These services have their own privacy policies governing how they handle your data.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Update or correct your personal information via the app's Profile screen
• Request deletion of your account and data
• Withdraw consent for data processing

8. Children's Privacy

Our service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page.

10. Contact Us