AutosGalaxy – Data Retention & Deletion Policy

Last Updated: 5/15/2026

AutosGalaxy ("AutosGalaxy," "we," "our," or "us") maintains this Data Retention & Deletion Policy to ensure that personal information is stored, archived, and deleted in accordance with applicable laws, industry standards, and internal governance requirements. This policy applies to all users of our website, mobile applications, and related services (collectively, the "Platform").

1. Purpose of This Policy

This policy outlines:

  • What data AutosGalaxy retains
  • How long we retain it
  • Why retention is necessary
  • How users may request deletion
  • How AutosGalaxy securely disposes of data

This policy aligns with global privacy frameworks, including GDPR, CCPA/CPRA, CAN-SPAM, and other applicable regulations.

2. Categories of Data We Retain

AutosGalaxy retains the following categories of data for operational, legal, and security purposes:

2.1 Account & Authentication Data

  • Name
  • Email Address
  • Phone Number
  • Name
  • Authentication provider IDs (Apple, Google, Facebook)
  • Encrypted passwords (for email login)

2.2 Usage & Activity Data

  • Search history, saved vehicles, and alerts
  • Browsing behavior
  • Device identifiers
  • Session logs and timestamps

2.3 Communication Data

  • Messages sent to dealers, sellers, or renters
  • Lead submissions
  • Support inquiries

2.4 Listing & Transaction Data

  • Vehicle listings
  • Photos, descriptions, and metadata
  • Dealer inventory feeds
  • Rental or service requests

2.5 Technical & Security Data

  • IP addresses
  • Device information
  • Crash logs
  • Fraud detection signals
  • Authentication logs

3. Data Retention Periods

AutosGalaxy retains data only as long as necessary for operational, legal, and security purposes.

3.1 Active Account Data

Retained as long as the user maintains an active account.

3.2 Inactive Accounts

If an account is inactive for 24 months, AutosGalaxy may archive the account, anonymize personal identifiers, or delete non-essential data.

  • Archive the account
  • Anonymize personal identifiers
  • Delete non-essential data

3.3 Communications & Leads

Dealer/seller communications and lead submissions are retained for 24–36 months for:

  • Compliance
  • Fraud prevention
  • Customer support
  • Audit requirements

3.4 Technical Logs

Security, diagnostic, and performance logs are retained for 12–24 months

3.5 Legal & Compliance Data

Certain data may be retained longer if required by:

  • Law enforcement
  • Regulatory obligations
  • Fraud investigations
  • Contractual requirements

3.6 Anonymized Data

AutosGalaxy may retain anonymized or aggregated data indefinitely for:

  • Analytics
  • Market insights
  • Platform improvement
  • This data cannot identify individual users.

4. Data Deletion Requests

Users may request deletion of their personal data at any time.

4.1 How to Submit a Deletion Request

Users may request deletion through:

  • In-app account deletion tools
  • Emailing AutosGalaxy Privacy Office
  • Web-based privacy request forms

4.2 Verification Requirements

AutosGalaxy may require identity verification to prevent unauthorized deletion.

4.3 What Happens After Deletion

Upon deletion:

  • Account credentials are removed
  • Personal identifiers are erased or anonymized
  • Communications with dealers may remain with those third parties
  • Certain data may be retained for legal or security reasons

4.4 Dealer & Third-Party Data

AutosGalaxy cannot delete data stored by:

  • Dealers
  • Private sellers
  • Rental owners
  • Third-party service providers

Users must contact those parties directly.

5. Exceptions to Deletion

AutosGalaxy may retain certain data even after a deletion request when required for:

  • Fraud detection
  • Security investigations
  • Legal compliance
  • Transactional Record keeping
  • Dispute resolution

Such data is restricted and used only for the required purpose.

6. Data Storage & Security

AutosGalaxy uses enterprise-grade security controls, including:

  • Encrypted data storage
  • Access controls and audit logs
  • Secure cloud infrastructure
  • Regular security assessments
  • Data minimization practices

7. International Data Storage

Data may be stored or processed in:

  • The United States
  • Regions where AutosGalaxy operates
  • Regions where service providers maintain infrastructure
  • AutosGalaxy uses safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)
  • Vendor security reviews

8. Updates to This Policy

AutosGalaxy may update this policy periodically. Continued use of the Platform constitutes acceptance of the updated policy.

9. Contact Information

AutosGalaxy Privacy Office

Email: privacy@autosgalaxy.com

Website: