Legal
Privacy policy
How AutoViz handles personal data, and how to contact the business about a privacy request.
This Privacy Policy explains how AutoViz handles personal data and how to contact us about your information.
Data controller
- Business name
- BEDZTECH s.p.
- Trading name
- AutoViz
- Address
- Vojvode Mišića 54/P-10, 74000 Doboj, Bosnia and Herzegovina
- JIB
4512976870005- contact@autoviz.pro
For all privacy-related questions, including requests to access, correct, or delete your data, contact us at contact@autoviz.pro.
What we collect
2.1 Data you provide directly
- Account data: email and password (stored as a one-way password hash).
- Search preferences: the criteria you set up to receive notifications, such as make, model, year range, price range, mileage, fuel type, transmission, body type, drivetrain and colour.
- Notification preferences: language and currency settings.
- Subscription data: the plan you have chosen.
- Enquiries and support: your name, email and the optional company, source, market, contact-preference and message details you submit.
- Saved work: saved vehicles, notes and follow-up information you enter in your account.
2.2 Data collected automatically
- Technical data: IP address, browser, device, operating system and time zone — used for security and abuse prevention.
- Usage data: the searches you create, the listings you open and your login times.
- Cookies and local storage: a session token to keep you logged in, plus minor preferences (language, currency, last-active selection). Advertising cookies are only ever set if you accept them in the cookie banner — see Cookies & storage for the full list and what each one does.
2.3 Data about the listings we display
AutoViz monitors publicly available vehicle listings published by sellers on third-party marketplaces and shows you the ones that match your saved searches. The information we display is data the seller has already published publicly. We do not collect data about the buyers or visitors of those marketplaces — only about the listings themselves. During a free trial, marketplaces outside the Basic tier are checked every 60 minutes and Basic marketplaces every 30 minutes.
2.4 Payment and account email data
The payment provider identified at checkout processes payment details. AutoViz uses transaction references and subscription status to manage access and support. Use the provider information on your receipt for questions about that provider’s processing.
We use an email delivery provider for account and security messages. This requires the recipient address and message content. Account recovery requests are processed by the service without disclosing whether an address has an account.
Why we process your data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and operating your account | Performance of contract 6(1)(b) |
| Showing matching listings and requested notifications | Performance of contract 6(1)(b) |
| Processing your subscription payment | Performance of contract 6(1)(b) |
| Preventing abuse, fraud, and protecting the Service | Legitimate interest 6(1)(f) |
| Tax and accounting compliance | Legal obligation 6(1)(c) |
| Product updates and security notices | Legitimate interest 6(1)(f) |
| Marketing emails (optional) | Consent 6(1)(a) · opt-in only |
How long we keep data
| Data | Retention |
|---|---|
| Account email and password | Until you delete your account, plus 30 days for backup recovery |
| Saved searches and matched listings | While your account is active; deleted within 30 days of account deletion |
| Subscription and billing records | 7 years (BiH tax law requirement) |
| Technical logs (IP, login times) | 90 days |
| Advertising consent and event delivery records | Until account deletion; matching identifiers are cleared on withdrawal |
| Vehicle listings we display | Up to 90 days after they expire on the source marketplace |
Who we share data with
We share data with the following recipients to operate AutoViz and, only with your permission, measure advertising:
- The payment provider identified at checkout handles payment processing under the terms shown for that purchase.
- Cloud hosting providers — to operate the servers and database where the Service runs. Contact us for the current provider details and applicable data-processing arrangements.
- Email delivery providers — to send account, security and service messages using the recipient and message data needed for delivery.
- Google and Meta — optional advertising measurement only with your permission, as described below. These providers may process data outside the European Economic Area.
- Tax authorities and auditors — only when required by Bosnian, EU or other applicable law.
We do not sell or rent your personal data to anyone.
5.1 International data transfers
The providers involved in operating your account may process information in different jurisdictions. Contact contact@autoviz.pro for current provider locations and the safeguards applicable to your information.
Your rights
Under GDPR and Bosnian data protection law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data, subject to legal retention obligations.
- Restriction — ask us to limit processing in certain cases.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — for any processing based on consent.
- Lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba) or your national EU supervisory authority.
Email contact@autoviz.pro to exercise any of these rights. We respond within 30 days.
How we protect your data
- All traffic between your device and our servers is encrypted in transit.
- Passwords are stored using strong one-way hashing — we cannot read or recover your password, even if our database were compromised.
- Database access is restricted to a private network behind a firewall.
- Regular security updates and dependency patching.
- Minimum-privilege access controls — only authorised personnel can access production systems.
Contact us if you suspect a security issue affecting your account. We will handle incident notifications in accordance with applicable requirements.
Cookies & storage
We use storage for essential account functions and preferences. Optional advertising and campaign storage requires your permission:
| Item | Purpose | Duration |
|---|---|---|
auth_token | Keeps you logged in | 30 days |
lang | Stores your language preference | Persistent until cleared |
currency | Stores your preferred display currency | Persistent until cleared |
av_consent, av_advertising_consent, av_advertising_withdrawal_pending | Remember your optional advertising choice and the disclosure version you accepted | Until you change your choice or clear site data |
av_attribution | Optional campaign attribution, stored only after advertising consent | Up to 24 hours in session storage |
Analytics. We use Umami, which we host ourselves on our own servers in Europe. It counts page views and which links get clicked. It sets no cookies, stores nothing on your device, does not track you across websites, and never builds a profile of you. It runs independently of the optional advertising-consent setting.
Optional advertising measurement. When enabled, we use Google Ads and Meta (Facebook and Instagram) to measure and improve our advertising. Google advertising code loads only after Google advertising consent. Meta additionally requires acceptance of the current disclosure; an older Google-only choice does not enable Meta. Google can set _gcl_* cookies; Meta can set _fbp and _fbc cookies, normally lasting up to 90 days. Refusing advertising does not prevent you from using AutoViz.
Meta Pixel and Conversions API. With your permission, the browser Pixel may report public page views, successful account creation and activated trials. Our server may report account creation, trial activation and confirmed positive payments, including payment amount and currency. Account creation does not mean email verification or payment; starting a free trial is not a purchase. Measurement may include advertising click/browser identifiers, event time, a safe page address, browser information, a hashed account identifier and a hashed email for matching. Hashing does not make these identifiers anonymous. We do not send passwords, saved-search text, notes, seller details or card data. Meta receives this information to match advertising activity and measure and improve ads; its own privacy policy explains its processing and retention: Meta Privacy Policy.
Your choice. Use the Cookie preferences button on this site to accept or withdraw advertising permission. Withdrawal stops new browser advertising events immediately and removes Meta cookies set by this integration. While signed in, we also save the choice to your account and suppress pending and future server events. If a connection fails, the saved browser withdrawal is retried on your next authenticated visit; open AutoViz to synchronize an account choice made while signed out. Withdrawal does not undo events already sent. You can also contact contact@autoviz.pro about your account data. Consent and advertising event records remain until account deletion so we can apply your choice, avoid duplicate events and audit delivery. Withdrawal clears matching identifiers and suppresses unsent events; it does not erase delivery records. Optional measurement records are separate from required subscription and billing records.
We do not use Google Analytics. Self-hosted product analytics remains separate from optional Google and Meta advertising measurement.
Children
The Service is not directed at persons under 18. We do not knowingly collect personal data from minors.
Changes to this policy
Material changes are notified by email at least 14 days before they take effect.
Get in touch
- contact@autoviz.pro
- Postal
- Bedztech, Vojvode Mišića 54/P-10, 74000 Doboj, BiH