Privacy Policy

AutoPrice is a vehicle price-intelligence website covering Kenya, Nigeria and South Africa. We publish asking-price bands, vehicle specifications, import-duty estimates and indicative financing information compiled from publicly available classified adverts and public reference sources.

You can browse every page of this site without an account, without signing in and without giving us your name, email or phone number. Specifically:

• We have no user registration, newsletter or contact forms, and we do not ask for personal data.
• We do not run analytics, advertising or social-tracking scripts, so no behavioural profile of you is built and no data is sold or shared with advertisers.
• We never collect or store vehicle sellers’ personal contact details (phone numbers, emails). Where a source advert contains them, those fields are discarded before storage - a deliberate design choice under the Kenya Data Protection Act, 2019 and the Nigeria Data Protection Act, 2023.

• Currency preference. When you pick a display currency, it is saved in your browser’s local storage (ap_currency) so pages render the way you chose. It never leaves your device.
• Admin session cookie. The staff-only admin area sets a single strictly-necessary, HttpOnly session cookie to keep its editor signed in. This cookie is never set for ordinary visitors.

Clearing your browser storage removes the currency preference; no account data exists to delete.

Our product is aggregated market data. We collect publicly posted advert content (asking price, mileage, year, engine and body details) from classifieds marketplaces such as Jiji Kenya, Autochek and Cars.co.za, plus public reference sources such as the Kenya Revenue Authority’s CRSP schedule and Wikimedia Commons.

• Photos are hotlinked, not copied. Vehicle images load directly from the source or from Wikimedia Commons, with an on-image attribution. We do not store image files on our servers, and copyright remains with the original owners.
• Personal data in adverts is filtered out. Only vehicle- and price-related fields are kept; seller identity and contact fields are not stored.
• Takedown. If you are a seller or rights holder and want your advert content or photo removed from our aggregation, contact the site operator and we will remove it.

We do not sell or share data, because we do not collect any. The “Share on WhatsApp” button opens WhatsApp with the page link you choose to send - nothing is transmitted by us until you press send there. External links (lender rate sources, tax authority pages, photo sources) take you to third-party sites with their own privacy practices.

If you create a contributor account, we store the email address you register (or the email your Google account exposes, if you sign in with Google), a display name, a salted password hash (never the password itself), and your submissions with their review status. The legal basis is your consent and our legitimate interest in operating the contribution feature. Emails are used only for account verification and submission review - never for marketing. Google sign-in shares only your email, name and account identifier with this site.

• Submitted data becomes part of the site's public dataset with your name kept in an internal audit trail; the published data itself is not attributed personally.
• Every submission passes an automated audit before publication; submissions the audit cannot verify are reviewed by a human admin before anything is published.
• You can request deletion of your account and personal data at any time through the contact details below - your published data contributions may be retained as part of the dataset without personal attribution.

Sellers and dealerships can pay to appear in the “Featured sellers” sections of this site. This is the one place where contact details are published by design - and it is always at the advertiser’s own request and for their business, never scraped.

• We store the business details the advertiser gives us (business name, WhatsApp number, location, short description, optional logo) and publish them alongside a WhatsApp button that opens a chat with the advertiser.
• We count how many times an advert’s WhatsApp button is opened, so the advertiser can see how their advert performs. We do not track the visitor afterwards.
• Advertiser contact details are removed from the site and from our storage when the advert is deleted or expires, subject to any record-keeping required for billing.

The service runs on a private server. Listing data is retained as a historical price series (daily snapshots); it contains no personal data. Account credentials are scrypt-hashed, sessions are signed HttpOnly cookies, verification codes expire within 15 minutes and are stored hashed. Admin access is password-protected and limited to the site operator.

Questions about this policy, or a removal request, can be sent to the site operator through the contact details published alongside this site.