Privacy Policy
How AutoSajam processes personal data in the app and on autosajam.me.
This text has not been legally reviewed yet and is not in force. Fields marked in [BRACKETS] must be completed before publication. The Montenegrin version is the primary version.
1. Who processes your data
The AutoSajam service (the app and the autosajam.me website) is run by [IME I PREZIME], a private individual, [ADRESA], [DRŽAVA] (hereinafter “AutoSajam”, “we”).
The controller of your personal data is this private individual. For questions about data protection, write to podrska@autosajam.me [CHECK ADDRESS].
[TO CHECK: whether a controller who is a private individual must also appoint a data protection officer and/or a representative in Serbia (Art. 44 ZZPL) – if so, name and contact]
2. In short
- We only process the data needed for you to buy and sell vehicles.
- No third-party ads, no tracking, and we do not sell data.
- Data is stored on our own server in the European Union.
- You can delete your account at any time directly in the app.
3. What data we process and why
3.1 User account
When you create an account, we process your e-mail address, password (stored only as a hash, never in readable form), name or dealership name, phone number and – if you provide them – country, city and profile picture. We also record the registration date, your chosen language and the version of the Terms of Use you accepted. For dealers we additionally process the company name, tax ID (PIB/JIB), address, phone number and website, which are shown on the dealer profile.
Purpose: creating and managing the account, sign-in, showing the seller next to a listing, contacting you about your account. Legal basis: performance of a contract (Terms of Use).
3.2 Listings and photos
We process the vehicle details, price, description, city and photos you publish. Once approved, a listing is public: all app users can see it, as can anyone who opens the listing link on autosajam.me. The seller's name or company name, city and the date they joined AutoSajam are shown with the listing. We recommend that licence plates, faces and documents are not visible in photos.
Purpose: publishing and displaying listings. Legal basis: performance of a contract.
3.3 Listing review (moderation)
A moderator (AutoSajam or a person authorised by AutoSajam to do so) reviews every listing before it goes live. In doing so they see the content of the listing and basic account information (e.g. registration date, previously rejected listings and reports by other users). We record the decision, the reason and the time of the review. Automatic signals (e.g. a price well below average) only assist the moderator – a person always makes the decision. We do not make automated decisions that have legal effects on you.
Purpose: platform security and fraud prevention. Legal basis: legitimate interest and performance of a contract.
3.4 Messages
When you message another user, we store the content of the messages, the time sent and the participants. Only the participants can see the messages. Moderators read a conversation only if one of the participants reports it. Messages are encrypted in transit (TLS) but are not end-to-end encrypted.
Purpose: communication between buyers and sellers, handling reports. Legal basis: performance of a contract; for reports, legitimate interest.
3.5 Seller's phone number
We show a seller's phone number with a listing only if the seller chooses to show it. To prevent mass harvesting of numbers, we record views of the number and limit how many can be viewed.
Legal basis: performance of a contract and legitimate interest (abuse prevention).
3.6 Reports and blocking
When you report a listing or a user, we store the report, the reason, your account and a copy of the reported content. When you block a user, we store the block so that this user can no longer message you.
Legal basis: legitimate interest (user safety) and legal obligations.
3.7 Push notifications
If you allow notifications, we store your device's push token and link it to your account. We send notifications (e.g. a new message, an approved listing, new listings for a saved search) via the Apple Push Notification service. A notification about a new message may contain the sender's name and the beginning of the message. When you sign out or delete your account, we delete the token. You can turn notifications off in your phone's settings.
Legal basis: consent (permission in the phone's system) and performance of a contract.
3.8 Saved listings and searches
Saved listings (favourites) and saved searches are visible only to you. We use them to show you price changes and new listings.
Legal basis: performance of a contract.
3.9 Listing statistics
So that sellers can see how often their listing was viewed and contacted, we count views and contacts. For this, the app creates a random installation identifier. It is not an advertising identifier (IDFA), is not linked to other apps and is used only to avoid counting the same view more than once. Sellers only see totals.
Legal basis: legitimate interest.
3.10 Error log
When an error occurs in the app, the app sends a technical report to our server: the error description, the screen where it happened, the app version, the platform, the installation identifier and – if you are signed in – your account ID. We do not use external crash-reporting services.
Legal basis: legitimate interest (app stability and security).
3.11 The autosajam.me website
The website uses no cookies, no analytics, no external fonts and no third-party scripts. With each request the web server records technical data (IP address, time, requested page, browser type) in log files. Individual listing pages load data and photos from our server.
Legal basis: legitimate interest (operation and security of the website).
3.12 Contacting support
When you write to us, we process your e-mail address and the content of your message in order to reply.
Legal basis: legitimate interest; for account questions, performance of a contract.
4. No ads, no tracking
- We do not show third-party ads and there are no advertising SDKs in the app.
- We do not use Google Analytics, the Facebook Pixel or similar tools – neither in the app nor on the website.
- We do not track you across other apps and websites and do not use the advertising identifier (IDFA).
- We do not sell or rent personal data.
5. Where data is stored
App data (accounts, listings, photos, messages) is stored in a database we operate ourselves, on a server in the European Union ([SERVER PROVIDER], [SERVER COUNTRY]). The autosajam.me website is hosted by [HOSTING PROVIDER], [HOSTING COUNTRY].
For users from Montenegro, Serbia and Bosnia and Herzegovina this means a transfer of data to the EU. [TO CHECK: EU member states are considered to provide an adequate level of protection under the laws of Montenegro, Serbia and BiH]
6. Who else receives data
- Other users see the public part of listings and profiles (name or company name, city, registration date, active listings). They see a phone number only if the seller shows it, and messages only if they are the other participant.
- Processors acting on our instructions under a data processing agreement: [SERVER PROVIDER] (app server), [HOSTING PROVIDER] (website), [E-MAIL PROVIDER] (sending e-mails, e.g. account confirmation).
- Apple – to deliver push notifications (Apple Push Notification service) and to distribute the app via the App Store. Apple also processes data in the USA, under its own privacy policy.
- Public authorities – only where the law requires it, e.g. on a court or police order in a fraud case.
7. How long we keep data
| Data | Retention |
|---|---|
| Account | as long as the account exists; deleted or anonymised immediately after account deletion |
| Active and sold listings | while they run; expired and sold listings are deleted after [PERIOD] |
| Deleted listings and photos | removed from public view immediately; fully deleted after [PERIOD] |
| Messages | as long as the conversation exists; after you delete your account they remain visible to the other participant marked “Obrisan korisnik” (deleted user), for at most [PERIOD] |
| Reports, blocks, moderation records | [PERIOD, e.g. 2 years] after closure, to protect against fraud |
| Phone number views | [PERIOD, e.g. 90 days] |
| Listing statistics | installation identifier [PERIOD]; totals as long as the listing exists |
| Error log | [PERIOD, e.g. 90 days] |
| Push token | until sign-out, account deletion or until Apple marks it invalid |
| Web server log files | [PERIOD, e.g. 14 days] |
| Backups | up to 6 months, then deleted automatically |
Backups are used solely for disaster recovery. Deleted data disappears from them after 6 months at the latest. If we ever had to restore a backup, we would re-apply all deletions requested in the meantime.
8. Your rights
- Access – you can find out what data we process about you and get a copy.
- Rectification – you change your profile data in the app; we correct other data on request.
- Erasure – in the app via ProfileDelete account or by e-mail (Delete your account).
- Portability (export) – you receive a copy of the data you provided in a machine-readable format (JSON).
- Restriction and objection – in particular to processing based on legitimate interest.
- Withdrawing consent – e.g. by turning off notifications, without affecting earlier processing.
- Complaint to a supervisory authority – in Montenegro the Agency for Personal Data Protection and Free Access to Information, in Serbia the Commissioner for Information of Public Importance and Personal Data Protection, in Bosnia and Herzegovina the Personal Data Protection Agency, and in the EU the supervisory authority of the country where you live.
Send your requests to podrska@autosajam.me [CHECK ADDRESS], ideally from your account's e-mail address. We respond without undue delay and within 30 days at the latest. For your protection we may ask for additional proof of identity.
9. Security
All traffic between the app, the website and the server is encrypted (HTTPS/TLS). Passwords are stored only as hashes. Database access is restricted by row-level rules: every user can see only what they are allowed to see. Only authorised moderators have access to administration. We make regular backups.
10. Minors
AutoSajam is intended exclusively for adults (18+). We do not knowingly collect data from minors. If we learn of such an account, we will delete it.
11. Changes to this policy
If we change this policy materially, we will notify you in the app before the changes take effect. The current version is always available at autosajam.me/en/privacy.
12. Contact
[IME I PREZIME] (private individual), [ADRESA], [DRŽAVA]
E-mail: podrska@autosajam.me [CHECK ADDRESS]