Privacy Policy

1. Who We Are

AutoVision Pro ("we", "us", "our") operates the AutoVision Pro platform at auto-vision-pro.com. We provide AI-powered car customisation tools, advertising placement services, creative design services, and website building services for the automotive sector.

For questions about this policy, contact us at privacy@auto-vision-pro.com.

2. Data We Collect

2.1 Account Data

When you register, we collect your name, email address, and (optionally) a profile picture. If you sign in with Google or another OAuth provider, we receive the data that provider shares with us.

2.2 Payment Data

We do not store card numbers or bank details. Payments are processed by:

• Razorpay (India, INR transactions) — Razorpay Privacy Policy
• PayPal (international, USD transactions) — PayPal Privacy Policy

We store only the transaction ID, amount, and currency to record that a payment occurred.

2.3 Usage Data

We log AI credit usage events (feature used, credits consumed, timestamp) to maintain accurate credit balances and detect abuse. We also record ad impressions and click counts per advertisement.

2.4 Uploaded Content

Car images you upload for background removal or part detection, and creative assets you upload for advertising, are stored via Cloudinary (Cloudinary Privacy Policy). Images sent to our AI routes are processed by Anthropic's Claude API and are not used to train Anthropic's models per their enterprise data handling policy.

2.5 Analytics Data

We use Google Analytics 4 to understand how users interact with our platform. GA4 collects anonymised usage data, including pages visited, session duration, and feature engagement. GA4 may set cookies on your device. See Google's Privacy Policy for details. We also use Vercel Analytics for performance monitoring.

2.6 Lead Capture Data

If you submit your email via our pricing lead form, we store your email address, the plan you expressed interest in, and the timestamp. We use this only to follow up with pricing information.

2.7 Cookies

See our Cookie Policy for a full list of cookies we set and why.

3. How We Use Your Data

• Authenticating your account and maintaining session security.
• Processing payments and issuing credit packs or subscriptions.
• Deducting AI credits and maintaining an accurate balance.
• Displaying your advertisements to our user base.
• Delivering creative design and website building services.
• Sending transactional emails (payment confirmations, ad approval notices, design delivery).
• Improving the Platform through aggregate, anonymised analytics.
• Detecting and preventing fraud and abuse.

We do not sell your personal data to third parties or use it for targeted advertising outside our Platform.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases are:

• Contract — processing necessary to fulfil your subscription or service order.
• Legitimate interest — fraud prevention, platform security, aggregate analytics.
• Consent — non-essential cookies and marketing emails (you may withdraw at any time).

5. Data Sharing

We share data only with the following categories of sub-processors, each bound by appropriate data processing agreements:

• MongoDB Atlas (database hosting, AWS ap-south-1 region by default)
• Cloudinary (image storage and delivery)
• Anthropic (Claude AI — image and text processing)
• Remove.bg (background removal processing)
• Razorpay (payment processing, India)
• PayPal (payment processing, international)
• Google (analytics)
• Vercel (hosting and edge network)

6. Data Retention

Account data is retained for as long as your account is active. If you delete your account, we delete your personal profile within 30 days. Payment records are retained for 7 years for tax and legal compliance. Anonymous analytics data has no fixed retention limit.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@auto-vision-pro.com. We will respond within 30 days.

8. Security

We use HTTPS/TLS for all data in transit. Passwords are hashed using bcrypt. API keys and secrets are stored as environment variables and never exposed client-side. We conduct regular dependency audits. Despite our best efforts, no system is 100% secure — please use a strong, unique password.

9. Children's Privacy

AutoVision Pro is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

10. International Transfers

Our primary infrastructure is governed by Indian law. If you are located outside India, your data may be transferred to and processed in India or other countries where our sub-processors operate. We rely on standard contractual clauses or sub-processor certifications to ensure adequate protection.

11. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. We will notify you of material changes by email or in-app notice at least 14 days in advance. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related questions or requests, contact our data protection contact at privacy@auto-vision-pro.com or use our Contact form.