Privacy policy

Last updated: May 23, 2026

1. Data controller

The data controller for personal data collected through the AutoPraca platform is:

  • Entity: Auto Praça SGPS, S.A.
  • Tax ID (NIF): 513 902 110
  • Address: Av. Infante D. Henrique 71, 9500-150 Ponta Delgada, Azores, Portugal
  • Email: info@autopraca.pt

2. What data we collect

We collect the following types of personal data:

  • Registration data: name, email, phone number, password (encrypted)
  • Profile data: account type (private or professional), location
  • Listing data: vehicle photographs, descriptions, prices, vehicle technical data
  • Usage data: IP addresses, browser type, pages visited, visit duration
  • Communication data: messages exchanged between users on the platform

3. Why we process your data

We use your personal data to:

  • Create and manage your user account
  • Publish and manage vehicle listings
  • Facilitate communication between buyers and sellers
  • Process photographs with artificial intelligence to extract vehicle details (see section 7)
  • Calculate tax estimates (ISV, IUC)
  • Improve and optimize the platform
  • Send service-related communications
  • Comply with legal obligations

4. Legal basis for processing

The processing of your data is based on:

  • Contract performance: necessary to provide the platform service (Art. 6(1)(b) GDPR)
  • Consent: for AI photo processing and marketing communications (Art. 6(1)(a) GDPR)
  • Legitimate interest: for platform improvement and fraud prevention (Art. 6(1)(f) GDPR)
  • Legal obligation: for compliance with tax and regulatory obligations (Art. 6(1)(c) GDPR)

5. Data retention

We retain your personal data for the period necessary for the purposes for which it was collected:

  • Account data: while the account is active, plus 12 months after deletion
  • Listing data: while the listing is active, plus 6 months after removal
  • Usage data: 24 months
  • Tax data: as required by law (minimum 10 years)

6. Your rights

Under the GDPR, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request the deletion of your data ("right to be forgotten")
  • Restriction: restrict the processing of your data
  • Portability: receive your data in a structured format
  • Object: object to the processing of your data
  • Withdraw consent: withdraw consent at any time

To exercise your rights, contact us at info@autopraca.pt. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).

7. AI photo processing disclosure

AutoPraca uses artificial intelligence technology to analyze vehicle photographs uploaded by users. This processing is intended to:

  • Automatically extract vehicle details (make, model, year, color, body type)
  • Improve the quality and completeness of listings
  • Reduce the time needed to create a listing

Legal basis: This processing is carried out based on your explicit consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time and choose to fill in listing details manually.

Data processed: Only vehicle photographs are sent to the AI service. No biometric data or photographs of people are processed. The AI service is provided by Anthropic (Claude), with processing in EU and US data centers.

Retention: Photographs processed by AI are deleted from the AI provider's servers immediately after processing. Original photographs are retained while the listing is active.

8. Cookies

AutoPraca uses cookies and similar technologies for:

  • Essential cookies: necessary for the platform to function (Supabase authentication session)
  • Analytics cookies: to understand how users use the platform (Web Vitals — self-hosted, no Google Analytics)
  • Preference cookies: to save your preferences (language, region)

9. Data Protection Officer (DPO)

For questions related to the protection of your personal data, you can contact our Data Protection Officer:

10. Changes to this policy

We may update this privacy policy from time to time. Any significant changes will be communicated through the platform or by email. The date of the last update is indicated at the top of this page.