Privacy Policy

Information We Collect

We collect only the information necessary to provide our car dealership management service. Here is a breakdown of what we collect and why:

We do not collect location data, contacts from your phone, microphone recordings, or any data beyond what is listed above.

How We Use Your Data

We use the information we collect strictly to operate and improve the PyxAuto service:

• To authenticate your identity and manage your login sessions securely
• To provide car inventory management, payment tracking, and reporting features
• To enforce company-level data isolation — your data is visible only to users within your company account
• To enforce subscription limits and manage billing
• To generate promotional car videos using photos you upload (only when you explicitly request this feature)
• To respond to your support requests and inquiries
• To monitor system health, detect abuse, and prevent unauthorized access
• To send you important service notifications (not marketing)

We do not use your data for advertising, profiling, or sell it to any third party.

Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Within your company: Data you enter is accessible to other authorized users within your company account on PyxAuto.
• Video generation service: When you request a promotional car video, car details and selected car photos are sent to our internal video processing service. No personal contact information is shared.
• Legal obligations: We may disclose data if required by applicable law, regulation, or a valid legal process (e.g., court order).
• Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you beforehand.

Data Storage & Security

All data is stored on secured servers. We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Passwords are hashed using bcrypt (never stored in plain text)
• API authentication via secure Bearer tokens (Laravel Sanctum)
• Session tokens stored in encrypted secure storage on your device (not in plain cookies or AsyncStorage)
• Company-level data isolation — each company's data is strictly separated
• Role-based access control — users only see data their role permits

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We encourage you to keep your login credentials private and log out from shared devices.

Data Retention

We retain your data for as long as your account is active or as needed to provide you with the service. Specifically:

• Account data: Retained until you delete your account or request deletion
• Car & business records: Retained for the lifetime of your company account
• Session tokens: Expire after 30 days of inactivity per device
• Uploaded files: Retained until you delete them or your account is closed
• Logs & audit data: Retained for up to 90 days for security and debugging purposes

After account deletion, all personal data is permanently removed within 30 days, except where retention is required by law.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct your personal information via the Profile screen in the app
• Deletion: Request deletion of your account and all associated data (see Section 7)
• Portability: Request an export of your business data (cars, contacts, payments) in CSV format — available directly in the app under Reports
• Restriction: Request that we stop processing your data in certain circumstances
• Objection: Object to our processing of your data where we rely on legitimate interests

To exercise any of these rights, contact us at support@kpyxal.com. We will respond within 30 days.

Account & Data Deletion

You can request deletion of your account and all associated data at any time. Here is how:

By email: Send a deletion request to support@kpyxal.com with the subject line "Account Deletion Request" and include your registered phone number. We will process the request within 30 days and confirm via email.

On deletion, the following data is permanently removed:

• Your user profile, name, phone number, and email
• Your profile photo
• All session tokens and active devices

Business records (cars, payments, contacts) that you created within a company account may be retained by the company administrator as they form part of the company's business records. If you are the company owner and wish to delete all company data, please state this explicitly in your deletion request.

Children's Privacy

PyxAuto is a business tool intended for use by adults (18 years and older). We do not knowingly collect personal information from anyone under the age of 18. If you believe a child under 18 has provided us with personal data, please contact us immediately at support@kpyxal.com and we will delete the information promptly.

Third-Party Services

PyxAuto integrates with or relies on the following third-party services. Each has its own privacy policy:

We do not integrate with Facebook, Google Analytics, Firebase Analytics, or any other advertising or analytics platform.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via the app or email if the changes are significant

Continued use of PyxAuto after changes are posted means you accept the updated policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: