Privacy policy

Autaro (“Autaro”, “we”, “us”) runs a directory that helps people in Palestine find car rental offices and contact them directly. This policy explains what personal data we collect through our website, web app and mobile apps (together, the “Service”), why we collect it, and the choices you have.

Autaro is a directory only. We do not take bookings or payments, and we never receive your card or bank details. Any rental agreement is made directly between you and the rental office.

Data we collect

Rental office (seller) accounts

When you register a rental office we collect:

• your full name, email address, phone number and preferred language;
• your password, which is handled by our authentication provider and stored only as a one-way hash;
• your account status and review history (for example, when your office was approved).

Office and car listings

The information you publish about your business is public by design: office name, description, address, city, map location, phone and WhatsApp numbers, business email, working hours, logo and cover photos, and car details such as photos, prices, plate type, availability and rental conditions.

Optional client accounts

You can browse and contact offices without an account. If you choose to create one, we collect your name, email address, optional phone number, preferred language, and the cars and offices you save as favourites.

Engagement analytics

To show offices how their listings perform, we record events such as a listing being viewed or a Call or WhatsApp button being tapped. Each event stores the car and office involved, the platform (web, iOS or Android), a timestamp, your account ID if you are signed in, and a hashed version of your IP address. We do not store your raw IP address with these events, and offices only see aggregated counts, never who tapped.

Technical data

Our servers and hosting providers keep short-lived logs (IP address, device and browser type, pages requested, errors) to operate the Service, prevent abuse and fix problems.

We do not use advertising cookies and we do not sell data to advertisers. We only use the storage strictly needed to keep you signed in and remember your language.

How we use data

• to provide the Service: show listings, let you contact offices and manage your account;
• to review offices before they are published and keep the directory trustworthy;
• to send service emails such as verification codes, password resets and office review decisions;
• to give offices aggregated statistics about their listings;
• to secure the Service, prevent spam and fraud, and comply with the law.

When we share data

• Publicly: office and car listings are visible to everyone.
• With offices: when you call or message an office, you share your phone number or WhatsApp profile with that office directly, outside Autaro. The office’s own privacy practices then apply.
• With service providers that host and run the Service for us, such as cloud hosting, authentication, database, file storage and email delivery providers. They process data only on our instructions.
• When required by law, or to protect the rights and safety of our users and the public.

We never sell personal data.

How long we keep data

We keep account and listing data for as long as your account is active. When you delete your account, we delete your profile and remove your offices and cars from the directory; backups are overwritten within 30 days. Engagement events are kept for up to 24 months, after which they are deleted or kept only as anonymous totals. Server logs are kept for up to 30 days.

Your choices and rights

• You can view and update your account details at any time in the app.
• You can delete your account from the account settings in the web or mobile app. This permanently removes your profile, your favourites and, for offices, your listings.
• You can ask us for a copy of your data, or ask us to correct or delete it, by contacting us.
• You can choose the language of the Service and of our emails.

Security

We use encrypted connections (HTTPS), hashed passwords, access controls and regular updates to protect your data. No system is perfectly secure, so please use a strong password that you do not reuse elsewhere.

Children

The Service is intended for people aged 18 and over. We do not knowingly collect data from children.

International transfers

Our service providers may process data on servers outside Palestine. We choose providers that apply appropriate safeguards to protect your data.

Changes to this policy

We may update this policy as the Service evolves. We will change the date at the top of this page and, for significant changes, notify registered users by email or in the app.

Contact us

For any question about this document or to exercise your rights, email us at support@autaro.sawalhacorp.com.