Privacy Policy

AutoWiz, based in Tel Aviv, Israel, operates this website (autowiz.app), the AutoWiz web application, and the AutoWiz API. This policy explains how we handle personal information across all three. We are the controller of that information.

Our Hebrew site, he.autowiz.app, has its own Hebrew privacy policy.

• Pilot and contact requests: your name, company, email, phone number, message, and any part numbers you send us.
• Accounts: name, email, company, and a password, which we store only as a salted hash. Accounts are set up for business customers.
• Product and API usage: the searches you run (such as OEM part numbers, VINs, and license plates), API requests, and the account and IP address each one came from.
• Visit attribution: the page you landed on, the referring site, and campaign parameters in the link (such as utm_source, gclid, and fbclid). This stays in your browser for the visit and reaches us only with a form you submit.
• Analytics: if you browse from Israel, or accept analytics cookies elsewhere, Google Analytics collects the pages you view, visit duration, device and browser type, and approximate location. See the Cookie Policy.

• To provide the service: run searches and API calls, and manage your account.
• To answer pilot and contact requests and follow up on them.
• To secure the service: authenticate users, detect abuse, and rate limit traffic.
• To understand usage and improve the website and product.
• To meet legal obligations.

If you are in the European Economic Area or the UK, we rely on the following legal bases: performing our contract with you or your company (the service), our legitimate interests (answering requests, security, and improvement), your consent (analytics cookies), and legal obligations.

We do not sell personal information or share it for advertising. We share it only with providers that run parts of the service for us, and only as far as they need it:

• Vercel: hosting for the website and application.
• Supabase: our database.
• A managed Redis service: caching and rate limiting.
• Resend: email delivery.
• Google Analytics: usage statistics, unless you turn analytics cookies off.

We may also disclose information when the law requires it, or to protect our rights and prevent fraud.

We are based in Israel, and our providers process data in the European Union and the United States. Israel holds an adequacy decision from the European Commission. For transfers to other countries, we rely on the safeguards our providers offer, such as the EU Standard Contractual Clauses.

• Account data: while the account is active. We delete it when you ask us to, unless the law requires us to keep it.
• Pilot and contact requests: as long as they are relevant to our business relationship with you.
• Usage and API logs: as long as needed for security, billing, and support.
• Analytics data: under the retention period set in Google Analytics.

We encrypt traffic with HTTPS, store passwords only as hashes, limit access to personal information to the people who need it, and rate limit our public endpoints. No system is completely secure, however, and we cannot guarantee absolute security.

Depending on where you live (including under Israel's Privacy Protection Law and the GDPR), you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Request deletion of your information
• Object to or restrict certain processing
• Receive your information in a portable format
• Turn analytics cookies off at any time, using Cookie Settings in the site footer

To make a request, email [email protected]. We answer within 30 days. You can also complain to Israel's Privacy Protection Authority or to the data protection authority where you live.

We use cookies that the site needs in order to work, such as for signing in. Outside Israel, we set analytics cookies only if you accept them. The Cookie Policy lists every cookie we use.

AutoWiz is a business service and is not directed to minors. We do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. The current version is always on this page, with its “Last updated” date. We will also post a notice on the site when we make a material change.

For privacy questions or requests, email [email protected].