Privacy Policy

1. Overview

Autowalk (“we,” “us,” or “our”) is committed to protecting your privacy. This Policy explains what information we collect, how we use it, and your rights. By using our Service, you agree to this Policy.

2. Information We Collect

Account data. When you sign up — including via Google OAuth — we receive your name, email address, and profile picture. We do not receive or store your Google password.

Usage data. We log job submissions (vehicle URLs, uploaded photos, VINs), credit usage, and generated output files. We also collect browser/device information, IP addresses, and page interaction events to understand how the Service is used.

Payment data. All payment processing is handled by Stripe. We store only a reference to your Stripe Customer ID and subscription status; we never see or store your full card number.

Communications. If you contact us by email, we store your messages to respond and improve our support.

3. How We Use Your Data

• Deliver the Service — process your vehicle jobs and return generated assets.
• Billing and account management — manage subscriptions, credit balances, and invoices.
• Product improvement — aggregate analytics to improve output quality and platform reliability. Uploaded photos are processed by AI models and are not used to train third-party foundation models without your consent.
• Communications — transactional emails (job ready, low credits, billing receipts) and, where you have opted in, product updates.
• Legal compliance — where required by law or to protect our rights.

4. Data Retention

Generated job assets are retained for 90 days from creation, after which they are permanently deleted from our storage. You can manually delete any job at any time from your dashboard. Account data is retained while your account is active and for up to 30 days after deletion.

5. Sharing Your Data

We do not sell your personal data. We share data only with:

• AI processing providers — your vehicle photos are sent to third-party AI inference APIs (e.g., FAL, Google) solely to generate the requested output.
• Cloud infrastructure — data is stored on Supabase (database) and Cloudflare R2 (file storage), both of which are SOC 2-compliant.
• Stripe — for payment processing.
• Analytics — anonymised usage events via Google Analytics (GA4). No personally identifiable information is sent to GA4.
• Legal authorities — where we are required by law or court order.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session. We also use analytics cookies (Google Analytics) to understand usage patterns — you can opt out via your browser settings or a cookie-management tool. We do not use advertising or tracking cookies.

7. Security

We use industry-standard security measures including HTTPS for all data in transit, encrypted database storage, and role-based access controls. However, no transmission over the internet is 100% secure; you use the Service at your own risk.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict processing in certain circumstances.
• Receive your data in a portable format.

To exercise these rights, email us at hello@getautowalk.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Policy periodically. We will notify you by email or in-app notification before material changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

11. Contact

Privacy questions or requests: hello@getautowalk.com