AutosGalaxy – Data Retention & Deletion Policy
Last Updated: 5/15/2026
AutosGalaxy ("AutosGalaxy," "we," "our," or "us") maintains this Data Retention & Deletion Policy to ensure that personal information is stored, archived, and deleted in accordance with applicable laws, industry standards, and internal governance requirements. This policy applies to all users of our website, mobile applications, and related services (collectively, the "Platform").
1. Purpose of This Policy
This policy outlines:
- What data AutosGalaxy retains
- How long we retain it
- Why retention is necessary
- How users may request deletion
- How AutosGalaxy securely disposes of data
This policy aligns with global privacy frameworks, including GDPR, CCPA/CPRA, CAN-SPAM, and other applicable regulations.
2. Categories of Data We Retain
AutosGalaxy retains the following categories of data for operational, legal, and security purposes:
2.1 Account & Authentication Data
- Name
- Email Address
- Phone Number
- Name
- Authentication provider IDs (Apple, Google, Facebook)
- Encrypted passwords (for email login)
2.2 Usage & Activity Data
- Search history, saved vehicles, and alerts
- Browsing behavior
- Device identifiers
- Session logs and timestamps
2.3 Communication Data
- Messages sent to dealers, sellers, or renters
- Lead submissions
- Support inquiries
2.4 Listing & Transaction Data
- Vehicle listings
- Photos, descriptions, and metadata
- Dealer inventory feeds
- Rental or service requests
2.5 Technical & Security Data
- IP addresses
- Device information
- Crash logs
- Fraud detection signals
- Authentication logs
3. Data Retention Periods
AutosGalaxy retains data only as long as necessary for operational, legal, and security purposes.
3.1 Active Account Data
Retained as long as the user maintains an active account.
3.2 Inactive Accounts
If an account is inactive for 24 months, AutosGalaxy may archive the account, anonymize personal identifiers, or delete non-essential data.
- Archive the account
- Anonymize personal identifiers
- Delete non-essential data
3.3 Communications & Leads
Dealer/seller communications and lead submissions are retained for 24–36 months for:
- Compliance
- Fraud prevention
- Customer support
- Audit requirements
3.4 Technical Logs
Security, diagnostic, and performance logs are retained for 12–24 months
3.5 Legal & Compliance Data
Certain data may be retained longer if required by:
- Law enforcement
- Regulatory obligations
- Fraud investigations
- Contractual requirements
3.6 Anonymized Data
AutosGalaxy may retain anonymized or aggregated data indefinitely for:
- Analytics
- Market insights
- Platform improvement
This data cannot identify individual users.
4. Data Deletion Requests
Users may request deletion of their personal data at any time.
4.1 How to Submit a Deletion Request
Users may request deletion through:
- In-app account deletion tools
- Emailing AutosGalaxy Privacy Office
- Web-based privacy request forms
4.2 Verification Requirements
AutosGalaxy may require identity verification to prevent unauthorized deletion.
4.3 What Happens After Deletion
Upon deletion:
- Account credentials are removed
- Personal identifiers are erased or anonymized
- Communications with dealers may remain with those third parties
- Certain data may be retained for legal or security reasons
4.4 Dealer & Third-Party Data
AutosGalaxy cannot delete data stored by:
- Dealers
- Private sellers
- Rental owners
- Third-party service providers
Users must contact those parties directly.
5. Exceptions to Deletion
AutosGalaxy may retain certain data even after a deletion request when required for:
- Fraud detection
- Security investigations
- Legal compliance
- Transactional Record keeping
- Dispute resolution
Such data is restricted and used only for the required purpose.
6. Data Storage & Security
AutosGalaxy uses enterprise-grade security controls, including:
- Encrypted data storage
- Access controls and audit logs
- Secure cloud infrastructure
- Regular security assessments
- Data minimization practices
7. International Data Storage
Data may be stored or processed in:
- The United States
- Regions where AutosGalaxy operates
- Regions where service providers maintain infrastructure
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Vendor security reviews
AutosGalaxy uses safeguards such as:
8. Updates to This Policy
AutosGalaxy may update this policy periodically. Continued use of the Platform constitutes acceptance of the updated policy.
9. Contact Information
AutosGalaxy Privacy Office
Email: privacy@autosgalaxy.com