Last updated: December 9, 2025

Privacy Policy

This Privacy Policy explains how OTOZ (“OTOZ”, “we”, “us”, or “our”) collects, uses, and protects your information when you use our mobile application and related services (together, the “Service”).

By creating an account or using OTOZ, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Definitions

Application / App
The OTOZ mobile application.
Service
The App and any related features we provide.
Account
A unique profile you create to use the Service.
Personal Data
Any information that identifies you or can be used to identify you (directly or indirectly).
Device
Any internet-connected device (such as a phone or tablet) used to access the Service.
Usage Data
Data collected automatically when you use the Service (such as device information and log data).
We / Us / Our
OTOZ, based in Iraq.
You / User
Any individual who accesses or uses the Service.

2. What Information We Collect

2.1 Information You Provide Directly

When you use OTOZ, we may collect the following Personal Data:

  • Name
  • Phone number
  • City / location (for example: Baghdad, Erbil, Sulaymaniyah, etc.)
  • Car listing details, such as make, model, year, mileage, price, description, and car photos you upload
  • Dealer showroom information, if you register as a dealer
  • Messages or details you choose to share in descriptions, contact forms, or support requests

We may also collect your email address or profile photo if you add them to your account. Sign-in is via one-time SMS code to your Iraqi phone number (+964); we do not require a password.

No payment data: OTOZ does not collect or store credit card numbers, bank details, or other payment information. OTOZ does not process payments between buyers and sellers.

2.2 Information Collected Automatically (Usage Data)

When you use the Service, we may automatically collect:

  • Device information (device type, operating system version, app version, language preference)
  • IP address or approximate location (for security and analytics)
  • App usage data (buttons you click, screens you visit, time spent in the app)
  • Crash logs and performance data (to fix bugs and improve stability)
  • Interaction data such as favorites, listing views, and dealer lead events (e.g. view, phone tap, WhatsApp tap, map open)
  • Push notification token, if you enable notifications

This data is generally not used to identify you personally, but helps us understand and improve how OTOZ is used.

2.3 Information from App Permissions

With your permission, OTOZ may access:

  • Location (GPS or network-based) — to show you cars near your area and to allow you to set your city or region more easily
  • Camera — to let you take photos of your car directly from the app for your listings
  • Photo Gallery — to let you select and upload existing photos of your car

You can disable these permissions at any time in your Device settings, but some features of the app may not work properly without them.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain the Service — create and manage your account; allow you to list cars for sale; display listings to other users; show cars based on city/location
  • To connect buyers and sellers — show your name, phone number, and location (city/area) on your listings so interested buyers can contact you
  • To improve and develop the Service — analyze app usage and performance; fix bugs and improve features
  • To communicate with you — send notifications or in-app messages about your account, security, or important changes; respond to your support requests
  • To protect our users and the platform — detect, prevent, and respond to fraud, abuse, or suspicious activity; enforce our Terms & Conditions

We do not sell your Personal Data to third parties.

4. How We Share Your Information

4.1 With Other Users

When you list a car for sale, other users may see:

  • Your name (or display name)
  • Your phone number (as contact information)
  • Your city / area
  • The photos and details of your car

This is necessary for buyers and sellers to contact each other and complete transactions outside the app.

4.2 With Service Providers

We may share limited Personal Data with trusted third-party service providers who help us run the Service, such as:

  • Supabase — hosting, authentication, database, file storage, and server functions
  • Namabar — SMS delivery and OTP verification for Iraqi phone numbers
  • Google Maps Platform — maps, place search, and geocoding
  • Analytics and crash reporting providers
  • Push notification services
  • Apple / Google — app distribution through their app stores

These service providers are allowed to use your data only to provide services to OTOZ and must protect it appropriately.

4.3 For Legal Reasons

We may disclose your Personal Data if we believe it is necessary to:

  • Comply with applicable laws, regulations, or legal requests
  • Respond to a court order, government request, or legal process
  • Protect our rights, property, or safety, or the rights, property, or safety of our users or the public
  • Investigate and prevent fraud or abuse of the Service

4.4 Business Transfers (if applicable in the future)

If OTOZ is ever involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred as part of that transaction. If this happens, we will take reasonable steps to ensure your data is handled safely and according to this Privacy Policy.

5. Data Retention

We keep your Personal Data only for as long as necessary to:

  • Provide the Service
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements and protect our rights

When you delete your account, we will:

  • Remove or anonymize your personal profile data within a reasonable period
  • Remove or anonymize your active listings from the app

Some data (for example, logs or backup copies) may be kept for a limited time as required for security, legal, or technical reasons, but will not be used in a way that identifies you personally except where required by law.

To request account deletion, see our Support page or contact us below.

6. Data Security

We take reasonable technical and organizational measures to protect your Personal Data against unauthorized access, loss or theft, and misuse or alteration.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we work to reduce risks as much as reasonably possible. Report suspicious activity to info@otozapp.com.

7. Your Rights and Choices

Depending on how you use the app, you may:

  • View and update your profile — update your name, phone number, and location in the app (if the feature is available)
  • Control app permissions — enable or disable access to camera, gallery, and location in your Device settings
  • Delete your account — if the app includes a “Delete Account” option, you can use it to request removal of your account and related data; or contact us (details below) and we will assist with account deletion

We may keep some information where required by law or for legitimate business purposes (for example, security logs), but we will minimize it.

8. Children's Privacy

OTOZ is not intended for children under 13 years old. We do not knowingly collect Personal Data from anyone under 13.

If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us. If we learn that we have collected Personal Data from a child under 13, we will delete it.

9. International Data Transfers

Your information may be stored and processed on servers inside or outside Iraq, including in countries whose data protection laws may be different from those of Iraq.

By using the Service, you agree that your information may be transferred and processed in these locations, and we will take reasonable steps to protect your data in line with this Privacy Policy.

10. Third-Party Links and Content

The Service may contain links to third-party websites or services that are not operated by OTOZ (for example WhatsApp, phone dialer, or maps opened from a listing).

We are not responsible for the privacy practices, content, or policies of third-party sites. We encourage you to review the privacy policies of every site or service you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

  • We will post the updated version in the app and/or on our website.
  • The “Last updated” date at the top will show when changes were made.

If you continue to use the Service after the updated Privacy Policy becomes effective, you are considered to have accepted the changes. If you do not agree, you should stop using the Service and may delete your account.

12. Contact Us

If you have any questions or requests about this Privacy Policy or your Personal Data, contact us:

Email: info@otozapp.com
Phone: +964 775 580 5220