Your account. Email address, a hashed password, and your name. Optionally a username, phone number and avatar. If you sign in with Google or Facebook, we store the account identifier they give us — never your password for those services.

What you put in the app. Vehicles and their specifications, service history and reminders, diagnostic records, insurance records, photos, documents and voice notes.

Vehicle diagnostic data. Diagnostic sessions and fault codes, sensor logs and OBD sessions. This is generated by your vehicle, not by you, but it is linked to your account and we treat it as your personal information.

Billing. If you subscribe, Stripe handles your card. We never see or store card numbers. We store the customer and subscription identifiers Stripe gives us so we know what you are entitled to.

Technical. Your IP address and request details, used for rate limiting, security and error diagnosis.

• To provide the service — running your garage, service records, diagnostics and service features. Basis: performance of our contract with you.
• To take payment and give you the features you have paid for. Basis: performance of our contract.
• To keep the service secure and working — rate limiting, fraud and abuse prevention, error monitoring. Basis: our legitimate interests in operating a secure service.
• To meet legal obligations — retaining invoice and tax records. Basis: legal obligation.

We do not sell your personal information, and we do not use it for advertising or profiling.

When you use the AI assistant, or ask for a diagnostic or service analysis, your question and the relevant vehicle data — such as the year, make and model, and a summary of the diagnostic data you are asking about — are sent to Anthropic and OpenAI to generate a response. We record these interactions against your account. They are not currently shown back to you in the app, but they are part of your personal information: they are included in anything you ask us for a copy of, and they are erased when you delete your account.

AI output is generated text. It can be wrong, and it is not professional mechanical advice.

We share data only with the providers that run the service. Each acts on our instructions, and none of them are permitted to use your data for their own purposes.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

Your account database is hosted in London (AWS eu-west-2). Photo uploads are disabled in production until durable object storage is configured; the service will refuse an upload rather than accept a file that could be lost from temporary container storage. The providers above operate in the United Kingdom, the European Union and the United States, so your information may be transferred overseas and handled under those providers' own safeguards, including the standard contractual clauses where they apply.

PistonAI sets two cookies, both strictly necessary to keep you signed in: carlogic_app for your session, which lasts 30 days, and carlogic_admin for administrator sessions, which lasts 7 days. Both are HttpOnly, so page scripts cannot read them.

There are no advertising cookies or analytics cookies. Cloudflare Web Analytics measures aggregate page views and page-load performance without cookies, local storage or cross-site user tracking. We do not use advertising pixels.

We keep your account and everything in it until you delete your account. Password-reset links expire one hour after they are requested, and are stored hashed so a database read does not yield a usable link.

When you delete your account, your personal data is erased and any active subscription is cancelled first, so you are not charged for an account that no longer exists. Your Stripe customer record is deliberately kept, because it carries invoice and tax records we are required by law to retain. Error logs and server logs age out on our providers' own schedules.

Wherever you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct it if it is wrong;
• delete it — you can do this yourself at any time in Settings;
• export it in a portable form;
• restrict or object to how we use it;
• withdraw consent, where we relied on it.

To exercise any of these, email [email protected]. We will respond within 30 days.

If you think we have handled your information badly, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to your local supervisory authority in the UK or EU — in the UK, the Information Commissioner's Office (ico.org.uk).

Passwords are stored hashed, never in plain text. Sessions use HttpOnly cookies and can be revoked — changing or resetting your password immediately invalidates every existing session. Access to the production database is restricted, and traffic is encrypted in transit.

No service can promise perfect security. If a breach affects your personal information, we will notify you and the relevant regulator as the law requires.

PistonAI is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

If we change how we handle your data, we will update this page and the date at the top. If the change is significant, we will tell you in the app or by email.

Northern Edge Software — [email protected]