SanAuto LogoSanAuto

Privacy Policy

SanAuto is fully committed to protecting your personal data in strict compliance with the Vietnam Personal Data Protection Regulations (Decree 13/2023/ND-CP).

Introduction

Welcome to SanAuto (used car auction and certified inspection trading platform). When you use our mobile application or website, you trust us with your personal data. This policy explains how we collect, store, process, and protect your personal information to safeguard your privacy rights.

1. Data Collection

We collect the following personal data to operate the platform securely and prevent fraud:

  • Basic Identity Information: Full name, email address, registered phone number.
  • Identity Verification (eKYC): Government ID photos (National ID/Passport) and facial validation images to prevent bot accounts and fake bids.
  • Transaction & Vehicle Info: License plate, VIN numbers, listing history, inspection reports, bid records, and payment logs.
  • Financial Data: Bank account numbers for managing the 10% escrow deposit lock, 90% balance payments, and receiving SLA refunds.
  • Device Info: IP address, device type, operating system, and bidding session activities.

2. Purposes of Processing

We process your personal data for the following legitimate business purposes:

  • Identity Verification: Performing eKYC checks and establishing your initial Trust Score (100 base points).
  • Auction Operation: Running 48-business-hour auction timers, processing auto-bidding agents, and enforcing anti-sniping rules.
  • Certified Inspections: Generating detailed inspection reports for EVs (with battery SOH) and ICE vehicles, secured with digital signatures.
  • Escrow Transactions: Managing secure payments through partner banks and releasing funds only after mutual handover approvals.
  • SLA Refunds: Executing automated refunds according to SLA timelines (T+1 for outbids/rejects, T+3 for seller defaults, T+5 for dispute resolutions).

3. Security & Signatures

We apply strict information security measures, including end-to-end data encryption (SSL/TLS), firewalls, database access isolation, and immutable audit logs. Additionally, all inspection reports are cryptographically signed by authorized centers using public key infrastructure (VNPT-CA or equivalent) to prevent tampering.

4. Third-Party Sharing

We do not sell your personal data. Sharing only occurs in the following limited scenarios:

  • Inspection Partners: Sharing car details and owner contacts to schedule physical checkups.
  • Payment Gateways / Banks: Processing deposits, escrow payments, and processing refunds.
  • Buyers/Sellers: Releasing mutual contact details and executing automated electronic contracts upon successful auction completion.
  • Law Enforcement: When required by written orders under applicable Vietnamese laws.

5. Data Subject Rights

Under Decree 13/2023/ND-CP (PDPA), you have full control over your personal data, including:

  • The right to be informed and access your stored personal data.
  • The right to rectify or update inaccurate information.
  • The right to withdraw consent (which may limit your ability to trade on SanAuto).
  • The right to restrict or object to data processing.
  • The right to request data erasure or permanent account deletion.

6. Retention & Account Deletion

We retain your personal data for as long as your account is active. If you decide to close your account, you can request the permanent deletion of your account and all associated personal identifiers.

You can submit an account deletion request using our online support form at: Account Deletion Support. Deletion requests will be processed by our team within 7 business days, provided there are no active auctions or outstanding dispute balances on your profile.