Privacy Policy
AutoKub respects your personal data privacy. This policy explains what data we collect, how we use it, and what your rights are.
Data Controller
AutoKub is the data controller for the personal information we collect. Contact: [email protected].
What Data We Collect
When you create an account and authenticate, we collect:
- Email address — used for authentication and communication
- Your name — for personalizing the experience
- Authentication data — for securing your account
Legal Basis
We process your personal data based on:
- Your consent — when you create an account
- Contract performance — to provide our services
- Legitimate interests — for security and service improvement
How We Use Data
We use your personal data for:
- Authentication and session management
- Providing auto services
- Communication related to our services
- Security and fraud prevention
- Improving our services
Data Storage
Your data is stored securely:
- ✓Encrypted in transit and at rest
- ✓Stored in encrypted JWT tokens
- ✓On secure servers in the European Union
Third-Party Services
We use Ory Kratos and Hydra for identity management and OAuth2/OIDC authentication. These services are GDPR compliant and process data in accordance with EU data protection standards.
Retention Period
We retain your personal data:
- As long as your account is active
- Sessions expire after 30 days of inactivity
- After account deletion, data is permanently removed within 30 days
Your GDPR Rights
Under GDPR, you have the following rights:
Right of access — request a copy of your personal data
Right to rectification — correct inaccurate data
Right to erasure — "right to be forgotten"
Right to restriction — limit processing of your data
Right to data portability — receive your data in a structured format
Right to object — object to processing of your data
Withdraw consent — at any time
Exercising Your Rights
To exercise your rights, contact us at [email protected]. We will respond to your request within 30 days.
Right to Lodge a Complaint
If you believe the processing of your personal data violates GDPR, you have the right to lodge a complaint with the appropriate national data protection authority.