Privacy Policy
Last updated: 24 October 2026
This policy explains how Mladen Milićević PR Digital Bridges, the operator of the AutoProvera brand (a sole proprietorship seated in Majdanpek, Serbia), processes personal data when you use AutoProvera on the website, in the portal, or in the mobile app. It is written to comply with the Serbian Law on Personal Data Protection (ZZPL) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Data we collect
- Account: name, email address, password hash, company name for dealers, language preference, and optional two-factor secrets.
- Profile: profile photo and the details you choose to add.
- Vehicles and listings: listing links you submit, vehicle details you enter for valuations and auctions, and photos you upload.
- Activity: scans, dossiers and reports, finder answers, auction listings and bids, service requests, and notification settings.
- Device and technical: device and OS or browser type, push notification token (mobile app), IP address, and server logs kept for security and debugging.
- Payments: plan, order status, and invoice details. Card details are handled by the payment provider and never stored by us.
2. Data from listings
When you submit a listing link, our servers download the public photos and text of that listing to produce your dossier. Those photos may contain personal data of third parties, such as a licence plate. We process them only to produce the dossier, keep them for as long as the dossier exists, and do not use them to identify individuals.
3. Why we process data
- To provide the Service and its features (performance of a contract).
- To keep the Service secure, prevent abuse, and enforce allowances (legitimate interest).
- To send transactional email and the push notifications you turn on (contract and consent).
- To improve our models and heuristics using aggregated, de-identified results (legitimate interest).
- To comply with tax, accounting, and legal obligations.
4. AI and automated processing
Photo analysis, dossiers, valuations, and finder rankings are produced by automated systems, including third-party AI models (Anthropic Claude and OpenAI). They inform your decision but do not make legally binding decisions about you. You can always request a human review of any output by contacting us.
5. Who we share data with
We do not sell personal data. We share it only with:
- AI providers (Anthropic, OpenAI) that process listing photos and text to generate findings, under data processing terms.
- Hosting, email, and push notification providers, and payment providers: Paddle.com Market Ltd for website and portal purchases, Apple and Google for in-app purchases.
- Verified dealers, when you open a Sell now auction: they see the vehicle details and photos, and your contact details only after you accept a bid.
- Service partners, when you order an add-on service.
- Authorities, where the law requires.
6. International transfers
Some providers process data outside Serbia and the European Economic Area. Where they do, we rely on standard contractual clauses or equivalent safeguards recognised by Serbian and EU law.
7. Retention
- Account data: while your account is active and for up to 12 months after you delete it. Deleting the account ends access at once; within 30 days you can ask us to restore it.
- Dossiers and reports: for as long as your account exists, unless you delete them earlier.
- Auction records: 3 years, for dispute resolution.
- Invoices: for the period required by Serbian accounting law.
- Server logs: 90 days.
8. Your rights
You can access, correct, export, or delete your personal data, object to processing based on legitimate interest, withdraw consent, and lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection or your local supervisory authority.
You can delete your account in the app under Settings → Danger zone → Delete account, or in the portal under Settings → Danger zone, and turn push notifications off in Settings or in your device settings. The steps, and what is removed or kept, are described at autoprovera.com/account-deletion. For anything else, contact us at office@autoprovera.com.
9. Security
Passwords are hashed, transport is encrypted, access is role-based, and two-factor authentication is available. No system is perfectly secure; tell us at once if you suspect your account was accessed without permission.
10. Children
The Service is not directed at people under 18 and we do not knowingly collect their data.
11. Changes and contact
We will announce material changes in the Service before they take effect. Data controller: Mladen Milićević PR Digital Bridges (sole proprietorship, operator of the AutoProvera brand), Majdanpek, Republic of Serbia. Contact: office@autoprovera.com.