Privacy Policy

AutoZap (LS Tecnologias) is a SaaS platform for car dealerships and used-car resellers. We operate at autozap.digital.

• Account name, email address, and password (authentication via Supabase).
• Vehicle listings, lead records, and financial reports entered by the user.
• Integration credentials (WhatsApp Business API, Meta): stored encrypted and used exclusively to send messages on behalf of the tenant account.
• Access logs (IP address, user-agent) for security and audit purposes.

• To provide and improve the platform's services.
• To send operational notifications (no unsolicited marketing).
• To comply with legal and regulatory obligations.

We do not sell or rent your data. We share data only with essential technical sub-processors (Supabase, Vercel, Cloudflare, Meta Platforms) under appropriate data processing agreements.

Account data is retained while the subscription is active and for up to 90 days after cancellation, unless a longer retention period is required by law.

• Access, correction, or deletion of your personal data.
• Data portability.
• Withdrawal of consent at any time.

To exercise these rights, contact us at: autozap@autozap.digital

When a user connects their WhatsApp Business account or uses Meta Lead Ads, we receive and store lead data (name, phone number, email, and ad context) provided by Meta through the Leads Retrieval API and WhatsApp Business API. This data is used exclusively to notify the tenant and enable follow-up with the prospective customer.

Users can revoke access at any time in Settings → Meta Integration.

Data Deletion: If you want to delete all data we received from Meta, you can:

• Request deletion via email: autozap@autozap.digital
• Or use Meta's data deletion callback: https://app.autozap.digital/api/auth/meta/delete

We comply with Meta's data deletion requests as required by the platform within 30 days.

We use strictly necessary session cookies for authentication only. We do not use third-party tracking or advertising cookies.

We apply encryption in transit (TLS 1.2+) and at rest, per-tenant access control (row-level security in Supabase), and periodic security reviews.

We will notify active users by email at least 15 days in advance of any material changes to this policy.