Privacy Policy

Folex Auto Market ("we", "us", "the Platform") is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with, and your rights regarding your data. By using our Platform, you consent to the practices described in this policy. Folex Auto Market collects and uses personal information to operate the marketplace, manage user accounts, publish vehicle listings, connect buyers with sellers and dealers, process enquiries, prevent fraud, improve safety, manage subscriptions, and provide support.

We collect information you provide directly and information generated by your use of the Platform. Account information: name, email address, phone number, account type (buyer, seller, dealer), password (stored securely and never in plain text), profile photo where provided. Buyer information: saved cars, recently viewed vehicles, enquiry messages, compare lists, saved search alerts, notification preferences. Seller and dealer information: seller/dealer profile, business name, address, opening hours, dealership description, contact details, listing history, subscription plan, payment history. Vehicle listing information: make, model, year, mileage, condition, price, description, photos, VIN/chassis number, location, seller contact details. Enquiries and communication data: messages sent between buyers and sellers, quick enquiry chip selections, WhatsApp/call contact events (click-level only, not full call content), enquiry timestamps and status. Vehicle documents and verification data: proof of ownership, customs papers, roadworthiness certificates, insurance documents, vehicle licences, inspection reports — uploaded privately for admin review only. Fraud reports and safety data: fraud report submissions, report categories, evidence uploaded, reporter details, admin actions taken. Payment and subscription data: subscription plan, payment reference numbers, amount, currency, payment status, Paystack transaction metadata. We do not store full card numbers. Technical data: IP address, browser type, device type, operating system, pages visited, session duration, referral source, cookie identifiers, and analytics data where consent is given.

We use your information to: • Create and manage user accounts • Publish and display vehicle listings • Connect buyers with sellers and dealers • Process enquiries and facilitate communication • Verify seller/dealer identity and documents • Manage subscription plans and process payments via Paystack • Detect, investigate, and prevent fraud and suspicious activity • Review and action fraud reports • Provide customer support and respond to support tickets • Send security alerts, listing notifications, and account communications • Improve Platform features and user experience • Comply with legal obligations We do not sell your personal information to third parties. We do not use your personal data to serve targeted advertising without your consent.

We process your personal data on the following legal bases: • Contract: to provide the marketplace service you signed up for • Legitimate interests: fraud prevention, platform safety, security monitoring, service improvement • Consent: marketing communications (opt-in only), optional analytics cookies • Legal obligation: where required by Nigerian law, including financial records, fraud investigation, and court orders You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We share your information only as necessary to operate the Platform: Buyers and sellers/dealers: When you send an enquiry, your name and message are shared with the listing owner. Phone numbers and WhatsApp numbers are displayed on listings only if the seller has chosen to make them visible. Paystack: Payment processing is handled by Paystack, a Nigerian payment provider. We share transaction data (amount, reference, email) with Paystack to process subscription payments. Paystack's own privacy policy applies to data they hold. Supabase: Our database and storage infrastructure provider. Vehicle documents, fraud evidence, and support attachments are stored in private Supabase Storage buckets and are not publicly accessible. Administrators: Our admin team can view listing details, seller/dealer profiles, fraud reports, support tickets, and private documents for the purpose of moderation and customer support. Legal authorities: We may disclose information to Nigerian law enforcement, courts, or regulatory authorities where required by law or in response to lawful requests. We do not share your information with advertising networks, data brokers, or third-party analytics providers without your explicit consent.

The following categories of data are treated as private and sensitive marketplace records: • Seller and dealer verification documents (proof of ownership, customs papers, roadworthiness, insurance, vehicle licence) • Fraud report evidence, screenshots, and attachments • Support ticket attachments • VIN/chassis numbers (only partial VIN is shown publicly; full VIN is admin-only) • Report correspondence These records are stored in private Supabase Storage buckets (seller-documents, dealer-documents, report-evidence, support-attachments) and are not accessible to the public. They are used only for admin review, verification, and dispute resolution. Public vehicle photos may be stored in a public or signed-URL bucket.

We retain your data for as long as your account is active and as required for the purposes described in this policy. Specifically: • Account data: retained while your account is active and for 3 years after deletion request, unless legal obligations require longer retention • Listing data: retained while the listing is active; historical listing data may be retained for audit purposes • Payment records: retained for 7 years for financial compliance purposes • Fraud reports and evidence: retained indefinitely for safety and legal purposes • Support tickets: retained for 2 years after resolution • Analytics and cookie data: retained per the cookie retention settings described in our Cookie Policy Some data cannot be immediately deleted even after an account deletion request due to fraud prevention, legal compliance, dispute handling, and audit requirements. We will explain any such retention when processing your data request.

We implement technical and organisational security measures including: • HTTPS encryption in transit for all Platform connections • Password hashing (never stored in plain text) • Row-Level Security (RLS) on all Supabase database tables • Private storage buckets for sensitive documents • Access controls limiting who can view sensitive data • Two-Factor Authentication (2FA) available for all users, required for Dealer Pro • Rate limiting on login attempts • Security alert notifications for new sign-ins and password changes No system is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by law.

You have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate or incomplete data • Deletion: request deletion of your account and associated data (subject to retention obligations) • Restriction: request that we restrict processing of your data in certain circumstances • Portability: receive your data in a structured, machine-readable format • Objection: object to processing based on legitimate interests • Withdraw consent: withdraw marketing or analytics consent at any time To exercise any of these rights, use our Data Request page or contact privacy@folexautomarket.com. We will respond within 30 days. We may need to verify your identity before processing a request.

We use cookies and similar technologies to operate the Platform and, with your consent, to analyse usage. Essential session cookies are required for login and security. Optional analytics cookies require your explicit consent. We do not use advertising or tracking cookies by default. See our Cookie Policy for full details and to manage your preferences.

Folex Auto Market is not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that a child has registered, we will delete their account and associated data promptly. If you believe a child has submitted data, contact us at privacy@folexautomarket.com.

We may update this Privacy Policy from time to time. We will notify users of material changes via email or platform notification. The effective date at the top of this page shows when the policy was last updated. Continued use of the Platform after changes constitutes acceptance.

For privacy enquiries: privacy@folexautomarket.com To submit a data request: /data-request For general support: /contact-support Folex Auto Market, Lagos, Nigeria.