Privacy Policy
This policy explains what personal data we process when you use AI Car Mechanic, why, and the choices you have. Terox Solutions LLC (“we”, “us”) is the controller of this data.
1. Data we collect
- Account data: your email address, your password (stored only in hashed form by our authentication provider), the name you enter at sign-up and, if you add it in your profile, a phone number.
- Google sign-in: if you choose “Continue with Google”, Google shares your email address, your name and a link to your profile picture with us. We use the email address and name to create your account; we do not use the picture. Google handles the sign-in itself under its own privacy policy.
- Subscription data: your plan, subscription status, renewal date, credit balance and the customer and subscription IDs from our payment provider Stripe. You enter your card details, name and billing address on Stripe’s checkout page; Stripe collects and keeps them to complete the sale and calculate tax, and they never reach our servers.
- AI chat content: the messages, vehicle details (for example make, model, mileage or VIN) and photos you submit to the AI mechanic. Each message is sent to our AI provider to generate the reply. Photos are never stored by us. The text of your 10 most recent conversations is kept in your browser’s local storage on your device, so you can reopen them from History; it is not sent to our servers for storage, and it is removed when you delete it, sign out or delete your account. If you are on the Basic or Pro plan and press “Save”, the text of that conversation is saved to your account, linked to the vehicle you chose, so you can reopen it later on any device.
- Garage data (Basic and Pro plans): the vehicles you add (make, model, year, engine, optional nickname and VIN, mileage), your service reminders and the service history you record, including dates, mileage, costs and notes.
- Location: only if you allow your browser to share it, on the mechanic map or when you ask the emergency page for local emergency numbers. It is used to search for repair shops near you or to find your country. On the mechanic map, your location is rounded to about 0.6 miles (1 km) and sent to our server, which asks OpenStreetMap services for repair shops in that area; a city, address or ZIP code you type into the map search is sent the same way. On the emergency page, your coordinates and IP address are sent directly to OpenStreetMap services. We do not store your location or map searches in our database or link them to your account. Search results for an area may be cached by our hosting provider for up to about a week, and recent results may be cached in your browser.
- Messages to us: the name, email address and message you send through the contact, feedback or enterprise forms, or by email.
- Usage data: through Google Analytics, pages viewed, device and browser type, approximate location derived from your IP address, and events such as sign-up, starting checkout, completing a purchase or completing a diagnosis. In the EEA, the UK and Switzerland this happens only after you accept analytics cookies.
- Technical data: our hosting provider processes your IP address and request details to deliver the website and protect it against abuse.
Please do not include sensitive personal information (for example health data) or other people’s personal data in your messages or photos.
2. How we use data and our legal bases
- To create and run your account, provide the AI mechanic, track credits and manage your subscription: performance of our contract with you (GDPR Art. 6(1)(b)).
- To process payments, issue invoices and keep accounting and tax records: contract and legal obligations (Art. 6(1)(b) and (c)).
- To answer your messages and quote requests: steps at your request and our legitimate interest in responding (Art. 6(1)(b) and (f)).
- To keep the service secure, apply rate limits and prevent fraud and abuse: our legitimate interests (Art. 6(1)(f)).
- To measure how the website is used with Google Analytics: your consent in the EEA, UK and Switzerland (Art. 6(1)(a)); elsewhere our legitimate interest in improving the site, and you can opt out at any time.
- To send service emails such as account confirmation, password reset, payment receipts and important changes to these terms: contract and legal obligations.
We do not use your chats or photos to train AI models, we do not sell your personal data or share it for cross-context behavioural advertising, and we do not send marketing emails without your consent. AI answers are informational; we do not make decisions that have legal or similarly significant effects on you by automated means.
4. International transfers
We are based in the United States, so your data is processed in the United States and in other countries where our providers operate. Where the law requires it, our providers protect transfers from the EEA, the UK and Switzerland with recognised safeguards such as the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) or the European Commission’s Standard Contractual Clauses.
5. How long we keep data
- Account and profile data: for as long as your account exists. You can delete your account at any time in your profile; the data is then deleted from our database.
- Free-credit record: if you receive free credits, we keep a one-way hash of your email address (not the address itself) after you delete your account, solely to prevent the free credits from being claimed more than once.
- Payment and invoice records: kept by Stripe and by us for as long as tax and accounting laws require (generally up to 7 years).
- AI chat content: not stored on our servers unless you save it (Basic and Pro plans). Your 10 most recent chats stay in your browser until you delete them, sign out or delete your account. Saved chats and garage data are kept until you delete the chat, the vehicle or your account. Photos are never stored. Our AI provider may keep messages for a limited period as described above.
- Messages you send us: as long as needed to handle your request and for up to 2 years afterwards.
- Analytics data: no longer than 14 months.
- Security and hosting logs: for the short period set by our hosting provider.
7. Your rights
Depending on where you live, you have the right to access the personal data we hold about you, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. Residents of California and other U.S. states with privacy laws have the right to know, access, correct and delete their data and to opt out of its sale or sharing (we do not sell or share it), and will not be treated differently for using these rights.
To use your rights, email info@ai-car-mechanic.com from the address on your account, or delete your account in your profile. We may need to verify your identity. We reply within one month (45 days where U.S. state law applies). An authorised agent may make a request on your behalf with proof of authority.
If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office). We would appreciate the chance to address your concern first.
8. Security
All traffic to the site is encrypted with HTTPS. Passwords are stored only in hashed form by our authentication provider. Database rules ensure that each user can access only their own profile, and billing and credit fields can be changed only by our server. Card payments are handled entirely by Stripe, a PCI DSS certified provider.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as required by law. Please use a strong, unique password and keep it private.
9. Children
The service is not directed to children. You must be at least 16 to create an account. We do not knowingly collect personal data from children under 16 (under 13 in the United States). If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We will post any update on this page and change the “Last updated” date. If a change materially affects how we use your data, we will tell you by email or with a notice on the site before it takes effect.
