Skip to main content

Privacy Policy

1. General Information

The Yoauto.md platform, managed by the company S.R.L. "YOAUTO" (IDNO: 1026607000352), attaches particular importance to the protection of your personal data, processing it in strict compliance with the Personal Data Protection Law of the Republic of Moldova No. 195/2024 and European standards (GDPR).

2. What Data We Collect and Who We Share It With

  • Identification Data: First name, last name, phone number, email address (provided upon registration).
  • Crypto-shredding of personal data (PIIVault): All sensitive personally identifiable information (PII) is stored encrypted inside a dedicated, isolated PIIVault container. The encryption keys are generated individually for each account and permanently deleted ("crypto-shredding") upon account removal or storage expiry, guaranteeing total physical impossibility of recovering personal data.
  • Technical Data: IP address, browser type, device used.
  • Transaction Data: Purchase history of "Energy" units. Note: Yoauto.md DOES NOT store bank card data. All payments are securely processed by authorized payment partners.
  • Imported Data: Information taken from third-party platforms at the initiative of the User.
  • VIN Data: Vehicle identification numbers (VIN) entered for verification and the technical history generated based on them.

Data Sharing & Connected APIs (Integrations): To provide our services, we integrate with the following third-party systems, sharing only strictly necessary data:

  • OpenAI API: For semantic searching, automated optimization, and processing of textual listing descriptions.
  • InfoCar API: Used to verify vehicle specifications and technical conditions. To perform these checks and generate vehicle history logs, we transfer the vehicle's VIN (Vehicle Identification Number) to InfoCar.
  • Paynet API: Used as our authorized payment processor to perform secure purchases of "Energy" packages. Financial details are sent directly using high-grade encryption.
  • B2B TerraRent: For automated synchronization of rental offers and listing routing via secure webhooks (webhook data routing).

Data Storage (Hosting): Your data is safely stored on our hosting partner's servers, physically located within the European Union (Germany). According to the legislation of the Republic of Moldova, the member states of the European Union ensure and guarantee an adequate level of personal data protection.

3. Purpose of Processing and Data Retention

The data is collected for: creating and securing the account, providing listing publication services, processing payments for "Energy" packages, preventing fraud, and complying with financial-accounting obligations. Additionally, the data is used to automate form filling through the import tool at the user's request and to generate technical reports based on the VIN code.

Data Retention & Pruning: In compliance with the Moldova Personal Data Protection Law No. 195/2024, inactive accounts are automatically pruned and deleted after 4 years (48 months) of continuous inactivity. The deletion workflow initiates crypto-shredding of keys in PIIVault, anonymizes the primary user records, and removes all unique constraints to prevent re-identification.

4. Your Rights

As a data subject, you have the following rights:

  • Right to Information and Access: To know what data we process.
  • Right to Rectification: To correct inaccurate data directly from your account.
  • Right to Erasure ("Right to be Forgotten"): You can request the deletion of your account and associated data at any time. Note: deleting the account results in the permanent cancellation of the "Energy" balance, according to the validity rules set out in the Terms and Conditions.

To exercise these rights or for any other questions regarding data protection, you can contact us at any time via email: info@yoauto.md.