Privacy Policy

Raiz Auto operates the platform at raizauto.com (the "Service"). We act as the data controller for personal data collected through the Service. If you have questions about this policy, contact us at privacy@raizauto.com.

We collect:

• Identity data: Full name, date of birth, government-issued ID number, nationality, and selfie/photo for KYC purposes.
• Contact data: Email address, phone number, and physical address.
• Business data: Company name, registration number, directors, and certificate of incorporation (for business accounts).
• Financial data: Wallet transactions, funding history, order amounts, and FX conversion records. We do not store full payment card numbers.
• Usage data: Pages visited, search queries, device type, IP address, and browser user-agent for security and analytics purposes.
• Communications: Messages sent to our support team.

• To verify your identity and comply with anti-money laundering (AML) regulations.
• To operate your wallet, process orders, and coordinate shipments.
• To send you transaction confirmations, order updates, and security alerts.
• To detect and prevent fraud, account takeover, and abuse.
• To improve the platform through aggregated, anonymised analytics.
• To comply with legal obligations and respond to lawful requests from regulators.

• Contract performance: Processing necessary to execute your orders and manage your wallet.
• Legal obligation: KYC/AML compliance, tax reporting, and regulatory requirements.
• Legitimate interests: Fraud prevention, platform security, and service improvement.
• Consent: Marketing communications (you may withdraw consent at any time).

We share your data with:

• KYC providers: Third-party identity verification services that process your documents under their own privacy policies.
• Payment processors: Our payment gateway partners for wallet funding and settlement.
• Auction platforms: IAAI and Copart receive your member ID and purchase details when you wire or execute through a linked account.
• Shipping agents: Logistics partners receive the minimum data needed to coordinate inland pickup and international shipping.
• Cloud infrastructure: AWS (hosting, email, document storage) — data is stored in regions with adequate protection standards.
• Regulators: We will disclose data to law enforcement or regulatory authorities when required by law.

We do not sell your personal data to third parties.

We retain your account data for the duration of your relationship with us and for a minimum of 5 years after account closure to satisfy AML and tax record-keeping obligations. Transaction records may be retained for longer periods where required by law.

We implement industry-standard security controls including TLS encryption in transit, AES-256 encryption for sensitive fields at rest, bcrypt hashing for passwords and PINs, and role-based access controls. See our Security Disclosure for details.

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your data (subject to legal retention obligations).
• Restrict or object to processing for marketing purposes.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, email privacy@raizauto.com. We will respond within 30 days.

We use strictly necessary cookies for session management and authentication. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect platform functionality.

The Service is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before the changes take effect.

Data protection inquiries: privacy@raizauto.com