Privacy Policy

1. Information We Collect

When you use CarScanAI, we collect:

• Account Information: Email address, name, and password (encrypted)
• Vehicle Photos: Images you upload for AI analysis
• VIN Data: Vehicle Identification Numbers you submit for decoding
• Payment Information: Processed securely through LemonSqueezy (we never store your credit card details)
• Usage Data: Report generation history, timestamps, and analysis results
• Vehicle Photos Processing: Photos are sent to third-party AI services for analysis. Photos are processed in accordance with our providers' data handling policies. We retain uploaded photos for report generation and may use anonymized data to improve our service.

2. How We Use Your Data

We use your information to:

• Generate AI vehicle inspection reports
• Process payments and manage your account
• Improve our AI models and detection accuracy
• Send you report completion notifications
• Provide customer support
• Comply with legal obligations

3. Data Storage and Security

Your photos and reports are securely stored on encrypted cloud infrastructure. We use industry-standard security practices to protect your data, including:

• HTTPS encryption for all data transmission
• Secure password hashing with bcrypt
• Regular security audits and updates
• Access controls limiting who can view your data

Vehicle photos uploaded for analysis are stored securely and retained for the duration of your account. You may request deletion of your photos at any time by contacting us.

4. Data Sharing

We never sell your personal data. We only share information with:

• LemonSqueezy: Payment processor (required for transactions)
• AI Analysis Provider: Third-party AI services for processing vehicle photos
• Cloud Infrastructure: Hosting and storage providers
• Microsoft Clarity: We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
• Law Enforcement: Only if legally required by valid court order

5. Your Rights

You have the right to:

• Access your personal data and reports
• Request deletion of your account and all associated data
• Export your data in a portable format
• Opt out of marketing emails (we don't send any by default)
• Request correction of inaccurate information

To exercise these rights, email us at privacy@carscanai.net.

6. Data Retention

We retain your data as follows: Account information is retained while your account is active. Vehicle photos are retained for report access purposes. AI analysis results are retained with your reports. If you delete your account, we will permanently delete your personal information and uploaded photos within 30 days, except where required by law. Payment transaction records may be retained for up to 7 years for tax and legal compliance.

7. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

We use Microsoft Clarity, a website analytics tool, to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of features and online activity. Additionally, we use this information for site optimization and fraud/security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

8. International Users

If you access CarScanAI from outside the United States, your data may be transferred to and processed in the United States. By using our service, you consent to this transfer. We make reasonable efforts to comply with applicable data protection laws including GDPR for EU users. EU users have additional rights including the right to data portability, restriction of processing, and the right to lodge a complaint with a supervisory authority.

9. Children's Privacy

CarScanAI is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: request disclosure of what personal information we collect, request deletion of your personal information, opt out of any sale of personal information (we do not sell personal information), and not be discriminated against for exercising your rights. To exercise these rights, contact privacy@carscanai.net.

12. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@carscanai.net.