Privacy Policy

When you buy on AutoAccess, we collect:

• Account information: Your email address (your login identity) and a password hash — never your plaintext password.

• Wallet & transactions: Your wallet balance, top-up history, and a record of every purchase: product, price paid, quantity, coupons used, and timestamps.

• Order history: Which accounts you bought and their delivery status, so we can honour replacement guarantees and support you.

• Security logs: IP addresses, login timestamps, and session metadata used to detect fraud and prevent account takeover.

• Support messages: Anything you send our concierge team via order chats, Telegram, WhatsApp, or email.

In addition to everything listed for buyers, sellers provide:

• Identity verification documents: A government-issued ID (front and back) plus a selfie of you holding the ID. These are encrypted at rest, visible only to our manual review team, and permanently deleted if your application is rejected.

• Payout wallet address: The crypto wallet address where you want your earnings sent. Changing it pauses withdrawals for 24 hours as a security measure.

• Listing & stock data: Your product details, prices, and the account credentials you upload to your vault — encrypted, and never shown to anyone except the buyer of each specific order.

• Sales records: Your sales history, replacement rates, and dispute outcomes, used to compute trust signals and enforce quality standards.

Every social media account sold on AutoAccess ships with login credentials. These are the most sensitive data on the platform, so they are protected accordingly:

• AES-256-GCM encryption: All stored credentials are encrypted at rest with a unique random initialization vector per record. Tampering is detected and rejected automatically.

• Buyer-only access: Decrypted credentials are shown only to the buyer of that specific order, inside their private dashboard and order sheet — never in listings, search results, or emails.

• Sellers can't snoop: Sellers cannot see each other's stock, and our own staff cannot browse credential contents. Access is strictly need-to-know.

Every conversation between a buyer and a seller runs through our concierge. Buyers and sellers never contact each other directly. We state this plainly because it is the core of how AutoAccess works:

• We read both sides: Our team sees buyer and seller messages in order chats so we can relay questions, manage the deal, and step into disputes early.

• Records protect everyone: Chat records are kept as evidence for dispute arbitration — they protect honest buyers and honest sellers alike.

• No private channels: Attempting to move a conversation off-platform (WhatsApp, Telegram, email) violates our zero-circumvention rule and leads to instant account restriction.

To enforce our zero-circumvention rule, listings, product descriptions, and messages are automatically scanned for phone numbers, email addresses, social handles, and off-platform links (such as t.me or wa.me URLs).

When contact information is detected, the seller's account is restricted immediately and our team reviews the case manually. Scanning is limited to detecting circumvention attempts — we do not profile message content for advertising or any other purpose.

All payments on AutoAccess are processed by Cryptomus, a cryptocurrency payment gateway. Buyers pay in crypto (Bitcoin, Ethereum, USDT, and more); sellers receive payouts in crypto to their saved wallet address.

We receive only a payment confirmation (amount, currency, status) via a cryptographically signed webhook. We never see or store card numbers, bank details, or crypto wallet private keys. Cryptomus's own privacy policy governs the data you share with them during checkout.

We use a minimal set of cookies strictly necessary for the marketplace to function:

• Authentication cookies: HttpOnly, Secure, SameSite cookies that keep you logged in (a short-lived access token and a rotating refresh token). They contain no personal data beyond a session identifier.

We do not use advertising cookies, cross-site trackers, or third-party analytics beacons.

We keep your account data while your account is active and for a reasonable period afterwards to meet fraud-prevention and record-keeping obligations. Order and transaction records are retained to honour guarantees and resolve disputes. Security logs rotate on a rolling basis. Identity verification documents of rejected seller applications are deleted promptly.

You have the right to:

• Access: Request a copy of the personal data we hold about you.

• Correction: Ask us to fix inaccurate information, such as your contact or payout details.

• Deletion: Request deletion of your account and personal data. Note that we may retain order and fraud-prevention records where the law or platform safety requires it.

• Objection: Object to processing based on legitimate interests, such as fraud detection.

To exercise any of these rights, reach us on Telegram, WhatsApp, or email below. We respond to verified requests within 30 days.

We do not sell, rent, or trade your personal information to anyone — not to advertisers, data brokers, or third parties. Your email, transaction history, verification documents, and credentials stay inside AutoAccess and are used only for the purposes described in this policy.