Privacy Policy

At Carsmind, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

We collect information to provide, improve, and secure our Service. This includes:

• Account Information: When you register, we collect your email address, full name (optional), and password (stored securely as a hash). If you authenticate via Google or Apple, we collect your provider subject ID, email, and full name.
• Vehicle Information: We collect and store vehicle data, including the Vehicle Identification Number (VIN), make, model, and year, to cache VIN decodes and deliver customized diagnostic insights.
• OBD2 and Sensor Data: When you connect an OBD2 adapter, we read and process real-time sensor data, diagnostic trouble codes (DTC), and vehicle parameters to diagnose vehicle problems.
• Chat and Diagnostic History: We store your chat messages and diagnostic conclusions to maintain a history of your vehicle's issues and to allow our AI assistant to provide continuous support.
• Purchase Information: We process store purchase tokens and receipts to credit your wallet with tokens. We validate all purchases server-side.

2. How We Use Your Information

We use the collected information for various purposes, including to:

• Provide, operate, and maintain the Service.
• Analyze and diagnose vehicle problems and generate AI-powered insights.
• Process transactions, manage your token wallet, and prevent fraud.
• Send transactional emails, including verification codes (OTP) and service updates.
• Understand and analyze how you use our Service to improve and develop new features.
• Enforce our Terms of Use and comply with legal obligations.

3. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services for us, such as email dispatch (Brevo API) and AI model inference (OpenRouter API). These providers are bound by confidentiality agreements.
• Compliance with Laws: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as a business asset.

4. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. Your passwords are encrypted using strong hashing algorithms, and refresh tokens are stored securely with rotation and revocation mechanisms. However, no security system is completely impenetrable, and we cannot guarantee the absolute security of our database.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. You can request the deletion of your account and associated data at any time using our Account Deletion form, without needing to sign in.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, or delete the personal information we hold about you. To delete your entire account or specific categories of data (vehicle data, chat/diagnostic history, sensor data, or purchase history), submit a request through our Account Deletion form. We email a one-time confirmation link to the address you provide; opening that link permanently deletes the selected data.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

8. Contact Us

If you have any questions or suggestions about this Privacy Policy, please contact us at [email protected].