Privacy Policy

Directly from you: account info (email, display name, hashed password), waitlist info (name + email only), onboarding answers (all optional), scan inputs (images/videos), VIN metadata if provided.

Generated by use: scan history (part name, condition score, cost estimate, recommendations), chat history, subscription status (plan type, renewal dates, Stripe customer ID).

Automatically: server logs (IP, browser/device, request URL), Supabase auth cookies, Cloudflare security cookies.

We do not use advertising trackers, third-party analytics cookies, or sell any user data.

• Provide the diagnostic service and maintain scan history.
• Process payments.
• Send transactional emails via Resend.
• Enforce security and prevent abuse.
• Respond to support and legal requests.

Raw images are not used to train AI models unless user explicitly opts in.

• Supabase (auth & database).
• Stripe (payments, PCI-DSS compliant — we never see your card).
• Anthropic / Cloudflare Workers AI (inference).
• Resend (email).
• Vercel (hosting).
• @react-pdf/renderer (self-hosted PDF generation).

• Uploaded images: deleted after inference unless saved.
• Scan & chat history: until user deletes or closes account.
• Account data: purged within 30 days of deletion request.
• Payment records: 7 years per financial regulations (stored by Stripe).
• Backups: encrypted daily snapshots kept 30 days.

• Strictly necessary: Supabase auth cookies.
• Functional: theme / preference memory.
• Analytics: none.
• Advertising: none.

Access, correct, delete, restrict, or export your data. Requests processed within 30 days.

Email privacy@recumeai.com.