Privacy Policy

1. Introduction

AuctionMandu ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at auctionmandu.com and our mobile applications.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number when you register an account.
• Authentication Data: Encrypted passwords, OAuth tokens from Google or Facebook sign-in.
• Usage Data: Pages visited, time spent, browser type, device information, IP address.
• Inquiry Data: Information submitted when you express interest in an auction listing.
• Saved Preferences: Auction bookmarks, notification preferences.
• Cookies: We use cookies and similar technologies to enhance your experience.

3. How We Use Your Information

• To provide and maintain our platform and mobile applications
• To process your inquiries and connect you with banks
• To send notifications about auctions you've saved
• To improve our services and user experience
• To authenticate your identity and secure your account
• To comply with legal obligations

4. Interest and Activity Tracking

When you browse listings on our website, we record which listings you show interest in. We use this to show you listings you recently viewed and similar properties, and to understand which listings attract serious buyers.

• What we record:the listings you open; how long a listing stays on your screen; whether you open its photos, map, Street View or the bank's contact details; which contact option you tap (call, WhatsApp, Viber, email or copying a number); when you save, share or send an enquiry about a listing, or follow a link to the bank's own notice; and the filters you search with (property type, district, bank, price range and search text).
• How it is identified: each record carries a random device identifier that is created and stored in your browser. If you are signed in, the record is also linked to your account.
• Linking to your account: when you sign in or create an account, activity recorded in that browser during the previous 90 days is linked to your account.
• Who can see it: AuctionMandu staff can see this activity together with your account details. Banks that list auctions with us only see totals for their own listings, such as how many visitors showed strong interest. They are not shown who you are, unless you send them an enquiry yourself (see section 5).
• How long we keep it: activity records are deleted automatically after 180 days.
• Deletion: if you delete your account, the activity linked to it is deleted with it.
• On your device:the list of listings you recently viewed is kept only in your browser. Clearing this site's data in your browser removes it, along with the device identifier.

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Banks and financial institutions when you submit an inquiry
• Service providers who assist in operating our platform (hosting, analytics)
• Government authorities when required by law

6. Data Storage & Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of passwords, secure HTTPS connections, and access controls. Your data is stored on secure cloud servers. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Interest and activity records (section 4) are deleted automatically after 180 days.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to processing of your personal data

9. Account & Data Deletion

You can delete your account at any time through your Profile Settings or by visiting our Account Deletion page. When you delete your account:

• Your profile information (name, email, phone, avatar) is permanently deleted
• Your saved auctions and notification preferences are removed
• The interest and activity records linked to your account are deleted
• Your inquiry history is anonymized (your name is removed but the record remains for the bank)
• OAuth connections (Google, Facebook) are disconnected
• This action is irreversible

10. Third-Party Services

Our platform uses the following third-party services:

• Google OAuth: For account sign-in (governed by Google's Privacy Policy)
• Facebook OAuth: For account sign-in (governed by Meta's Privacy Policy)
• AWS: For secure file and media storage
• OpenStreetMap/Leaflet: For map-based property visualization

11. Children's Privacy

Our platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at auctionmandu@gmail.com