Legal
Privacy Policy
Effective date: 27 May 2026
This Privacy Policy explains how AutoMate collects, uses, shares and protects personal data when you use the AutoMate mobile application, website and related services (the “Platform”), whether as a vehicle owner (“Customer”) or as a workshop, mechanic or service professional (“Mechanic”).
AutoMate operates from the Republic of Cyprus and acts as a data controller for the personal data described below. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Cyprus Processing of Personal Data Law of 2018 (Law 125(I)/2018).
1. Who We Are
Controller: AutoMate
Registered office: Republic of Cyprus
Contact for privacy matters: contact@automateonline.app
2. Personal Data We Collect
2.1 Information You Provide
- Account data: name, email, phone number, password, profile photo, language.
- Customer data: vehicle details (make, model, year, VIN, registration plate, mileage), service preferences, location of the vehicle.
- Mechanic data: business name, trade licence, VAT registration, workshop address, certifications, insurance details, bank/payout details, identity verification documents.
- Job data: descriptions of faults, photos, audio notes, AI-diagnostic responses, quotes, invoices, parts used, warranty terms.
- Communications: messages exchanged through the in-app chat, reviews, ratings, support requests.
2.2 Information Collected Automatically
- Device and technical data: IP address, device identifiers, operating system, app version, crash logs, language settings.
- Usage data: pages viewed, features used, search terms, click-through events, session duration.
- Location data: approximate or precise location (with your permission) to match you with nearby Mechanics or to route jobs.
- Cookies and similar technologies on our website (see Section 9).
2.3 Information from Third Parties
- Identity and licence verification providers.
- Payment processors (transaction status, last 4 digits of card, payout confirmations).
- Fleet, insurance and corporate partners who refer jobs to the Platform.
3. How and Why We Use Personal Data
We process personal data on the following GDPR legal bases:
- Performance of a contract (Art. 6(1)(b)): to create your account, match Customers and Mechanics, manage bookings, issue invoices, process payments and provide warranty support.
- Legal obligation (Art. 6(1)(c)): to comply with VAT, invoicing, accounting, anti-money-laundering and consumer-protection rules in Cyprus and the EU.
- Legitimate interests (Art. 6(1)(f)): to operate the Quality Vetting programme, prevent fraud and abuse, secure the Platform, improve our services, and develop the AI Diagnostic Match and Car Health File features.
- Consent (Art. 6(1)(a)): for precise location, push notifications, marketing communications and optional analytics. You may withdraw consent at any time.
4. The Car Health File
Each vehicle serviced on AutoMate is linked to a structured Car Health File keyed by VIN. The file contains service dates, parts used, warranty terms and mileage trajectories. The Customer controls visibility of the file and may export or delete it at any time, subject to legal retention obligations for tax and warranty records.
6. International Transfers
Where personal data is transferred outside the European Economic Area, we rely on adequacy decisions of the European Commission or on Standard Contractual Clauses together with supplementary technical and organisational measures.
7. Retention
We keep personal data only for as long as necessary for the purposes set out in this Policy, including to comply with Cyprus tax law (currently 6 years for invoicing records), to resolve disputes, to enforce our agreements and to honour warranty terms. When data is no longer needed, it is deleted or irreversibly anonymised.
8. Your Rights
Subject to GDPR conditions, you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, contact us at contact@automateonline.app. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, audit logging, vetting of staff and processors, and incident-response procedures. No system is perfectly secure; please use a strong password and protect your device.
11. Children
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified through the app or by email at least 14 days before they take effect.
13. Contact
For any questions about this Policy or your personal data, please contact us at contact@automateonline.app.