Privacy Policy

Introduction

Rovafi ("we", "us", or "our") operates the Rovafi mobile application and website (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party sources.

• •Account Information — Name, email address, phone number, profile photo, and account preferences when you create an account.
• •User Content — Videos, photos, listings, comments, messages, and other content you post or share on the Platform.
• •Transaction Information — Details related to vehicle listings, inquiries, test drive bookings, and communications between buyers and sellers.
• •Device Information — Device type, operating system, unique device identifiers, IP address, browser type, and mobile network information.
• •Usage Data — Pages viewed, features used, time spent on the Platform, search queries, and interaction patterns.
• •Location Data — Approximate location based on IP address; precise location only with your explicit consent for features such as nearby listings.

Camera, Microphone, and Media Capture

The Rovafi mobile application accesses your device's camera and microphone only when you take an action that requires capturing or recording media. We do not access these sensors in the background, automatically, or without your direct interaction.

Uploaded media is stored in Google Firebase Cloud Storage and delivered to other users via Bunny CDN. Media appears only in the places you choose to post it — your listings, the public feed, your profile, or direct messages. We do not sell your media, use it for advertising, or share it with third parties for any purpose other than operating the platform.

You can delete any individual photo, video, or post at any time from the app. When you delete your account, all media you uploaded is removed from our storage and CDN within 30 days, except where retention is required by law. You can revoke camera, microphone, or photo library access from your device's system settings at any time.

• •Camera — used when you tap "Record Video," "Take Photo," or any in-app capture button to record vehicle walk-around videos for listings, capture clips for the feed, take a profile photo, or photograph documents.
• •Microphone — used only while the camera is recording video, so audio is included with the clip. We do not record audio independently of video capture.
• •Photo Library — used only when you explicitly select a photo or video to upload. We never read your library without your selection.
• •Technical metadata such as resolution, duration, frame rate, and codec is captured alongside the file and used to render the media correctly.

How We Use Your Information

We use the information we collect to:

• •Provide, maintain, and improve the Platform and its features.
• •Process and facilitate transactions between buyers and sellers.
• •Send you notifications, updates, and marketing communications (with your consent).
• •Personalize your experience, including feed recommendations and relevant listings.
• •Detect, investigate, and prevent fraud, abuse, and security incidents.
• •Comply with legal obligations and enforce our Terms of Service.

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• •With Other Users — Your profile information, listings, and public content are visible to other users of the Platform.
• •With Dealerships — When you inquire about a listing or book a test drive, your contact information is shared with the relevant dealership.
• •With Service Providers — We use third-party services for hosting, analytics, payment processing, and communication (e.g., Firebase, Bunny CDN, Upstash).
• •For Legal Reasons — When required by law, to protect our rights, or to respond to legal process.

Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Platform. Specific retention periods include:

• •Account Information — Retained while your account is active and for up to 30 days after account deletion to allow for recovery.
• •Transaction Data — Retained for up to 7 years after the transaction for legal and regulatory compliance.
• •Usage Data & Analytics — Retained in anonymized or aggregated form for up to 24 months.
• •Communications & Messages — Retained while your account is active; deleted within 30 days of account deletion.
• •You may request deletion of your account and associated data at any time through your account settings or by contacting support@rovafi.com.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

Your Rights

Depending on your jurisdiction (including under GDPR, PIPEDA, CCPA, and other applicable data protection laws), you may have the following rights regarding your personal information:

• •Right of Access — Request a copy of the personal data we hold about you.
• •Right to Rectification — Request correction of inaccurate or incomplete personal information.
• •Right to Erasure ("Right to be Forgotten") — Request deletion of your personal data, subject to legal retention requirements.
• •Right to Data Portability — Request a machine-readable copy of your data to transfer to another service.
• •Right to Restrict Processing — Request that we limit how we use your data in certain circumstances.
• •Right to Object — Object to processing of your personal data for direct marketing or based on legitimate interests.
• •Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• •Right to Opt Out of Marketing — Unsubscribe from marketing communications at any time via email preferences or by contacting us.

Exercising Your Rights

To exercise any of the above rights, you may: (1) use the relevant features in your account settings (e.g., account deletion), (2) email us at support@rovafi.com with the subject line "Data Rights Request", or (3) contact us using the details below. We will respond to all legitimate requests within 30 days. We may ask you to verify your identity before processing your request.

Third-Party Data Processors

We use the following categories of third-party service providers to process your data on our behalf:

• •Cloud Infrastructure & Authentication — Google Firebase (Firestore, Auth, Cloud Functions, Cloud Storage) for data storage, user authentication, and backend processing.
• •Content Delivery — Bunny CDN for media delivery and video streaming.
• •Caching & Rate Limiting — Upstash (Redis) for performance optimization and abuse prevention.
• •Analytics & Crash Reporting — Firebase Analytics and Firebase Crashlytics for understanding platform usage, improving our services, and receiving crash and error reports so we can fix bugs.

Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@rovafi.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Platform with a new "Last Updated" date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

Account Deletion

Users can delete their account directly within the app by navigating to: Profile → Settings → Delete Account.

If users are unable to access the app or prefer assistance, they can request account deletion by contacting support@rovafi.com.

Upon deletion of an account:

• •Personal account information will be permanently removed.
• •Listings, uploaded media, and associated content will be deleted.
• •Messages and communication history may be removed or anonymized where applicable.
• •Some data may be retained for a limited period where required for legal, security, or fraud prevention purposes.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@rovafi.com.