Privacy notice

Autodrom privacy notice

This notice explains what personal data Autodrom collects, why, who receives it and what you can do about it. It covers the Autodrom mobile app for car owners, the Autodrom web app for auto services, the website autodrom.app and our e-mail correspondence at info@autodrom.app.

Who we are

• The data controller is Autodrom OÜ, registry code 17595374, Harju maakond, Tallinn, Lasnamäe linnaosa, Lõõtsa tn 8, 11415, Estonia.
• For any privacy question or request, write to info@autodrom.app.

What this notice covers

• It applies to everyone who uses the mobile app, the web app for services or the website, and to everyone who corresponds with us by e-mail.
• Auto services listed on Autodrom are separate businesses. When you send a request to a service or use a prepaid service there, that service handles the data it receives from you under its own responsibility.

Data we collect

We collect only what the product needs to work. We do not buy data about you from anyone.

Car owners

• Account: your e-mail address and whether it is verified, the name shown in your profile, and how you sign in — with a password (stored by our sign-in provider in hashed form, never readable by us), with your Google Account or, in the iPhone app, with your Apple Account. From Google or Apple we use only your e-mail address and, if you let the provider share it, your name — nothing else from that account, such as its profile picture. With Apple's "Hide My Email", the address we receive is one that Apple creates for Autodrom and forwards to your own.
• Garage: the vehicles you add — name, brand, model, year, licence plate, and a vehicle photo if you add one. Photos are uploaded to our servers, re-encoded with their metadata (such as location and camera details) removed, stored privately and shown only to you. If you ask the app to cut the car out of its background, that processing is automated. By default it uses enhanced processing by OpenAI: the photo — without location or camera data — is sent to OpenAI, and the result is AI-edited, so small details may change; you always see it before it is applied. You can switch to standard processing in the app at any time; it happens inside our own infrastructure and nothing leaves it.
• Requests to services: the vehicle, the work you ask for, your preferred time, your notes, and the estimate and status the service sends back.
• Prepaid services: the prepaid services you buy, their codes, price, status, the version of the terms you accepted and the language they were shown in, and refund requests.
• Synced records: your receipt records (shop, date, amount, category, notes and, for fuel, the litres, the mileage and whether the tank was filled — never the receipt photo), your service book and your reminders. They are copied to your account so that they come back on a new phone or after you reinstall the app, and so that two phones signed in to the same account show the same records. Sync is on unless you switch it off in the app under Profile → «Sync records»; switching it off deletes the copy from our servers at once, and your phone keeps its records.
• Shared service history: only if you create a history link — see "What stays on your device".
• Location (optional): only if you allow it, and only while you use the app. The app rounds your phone's location to about 100 metres and sends it with a search for services or offers, so that our server can list the nearest first and show how far they are. We use it for that one answer and discard it: we do not store it, it is not written to our logs, and the app never reads it in the background. You can switch it off in the app or in your phone's settings at any time.
• Place search (optional): when you look for an auto service, car wash or tyre shop in «Services» or to add one to «My services», the app sends what you type, the search radius and the app's language to our server, which passes them on to Geoapify — together with your rounded location, if you have allowed location. When you pick a result, its identifier is sent to look up the place's phone number. The search reaches Geoapify from our server and carries nothing that identifies you; we do not store the search or its results and do not write them to our logs. On iPhone, the map in «My services» is Apple Maps, which loads the map of the area on screen.
• Plate lookup (optional): when you press «Search» beside the licence plate while adding or editing a car, our server sends that plate to the Estonian Transport Administration's traffic register (Transpordiamet) and shows you what the register holds about the car — make, model, year of first registration, engine, gearbox, drive and body type. Nothing is filled in until you confirm that it is your car. The answer is kept only if you save the car, as part of your garage, together with a note that its details came from the register. We do not keep a record of the plates you look up; only a usage counter for your account, which also holds the time of your last lookup, limits how often lookups can be made and is deleted automatically, normally within two days.
• Notifications (optional): if you allow notifications, the app registers your phone for them. We store the phone's notification token (an identifier Google or Apple issues for this app on this phone), whether it is an Android phone or an iPhone, the app's language and your notification settings, so that we can tell you when a service answers your request, when your prepaid service is used and when a refund is complete. The texts are fixed and carry no personal or order details — no service name, price, plate or code. You can switch notifications off in the app or in your phone's settings; signing out or deleting the account removes the registration.

Service accounts

• Account: the e-mail address of the person who signs in for the business, and their password or Google Account — from Google, as for car owners, we use only the e-mail address and the name.
• Business profile: the name, description, address, phone, website, e-mail, social accounts, opening hours, photos, logo, works and prices, and the company details you enter. This profile is meant to be public once the service is verified. We look up the address in Estonia's official address register to place the service on the map, so that car owners can see how far it is and find it by municipality. If you use "Generate with AI" for a logo or an offer picture, the text you entered for it (such as the business name, categories or the offer's title) is sent to OpenAI to create the image.
• Activity: promotions and campaigns, requests received and the answers given, prepaid services redeemed, settlement and payout records.

Website visitors

• The website sets its own cookies only when you make a choice on it: the language you pick, or the Halloween theme you switch on (in season).
• We count visits to the website's home page and its offer pages (the list of offers and the page of each offer and each auto service) and taps on their App Store and Google Play buttons as daily totals only — no cookie, no identifier, and your IP address is not kept for it. We also split these totals by source and by device type. The source is the campaign tag in our own link (such as utm_source=instagram) or, without one, the name of the website you came from (such as google.com — never the page you were on). The device type is phone, tablet or computer, worked out from the description your browser sends of itself, which we do not keep. The totals tell us how many people find the site and through which channels; they cannot tell us who.
• Google Analytics, only with your consent. The website asks whether you allow statistics cookies. Until you choose, and if you reject, nothing from Google is loaded. If you accept, Google Analytics records the pages you view, how you arrived (the website or the campaign that brought you, our Google Ads campaigns included), your device type, operating system, browser, screen size and language, your approximate location (country and city, which Google works out from your IP address without keeping the address) and what you do on the pages — scrolling, taps on links to other websites and on the App Store and Google Play buttons — linked to a random identifier kept in cookies. We use it for statistics only: it is never used for advertising, personalised or otherwise, and Google signals (linking visits to Google accounts) is off. The pages of shared history links and of sign-in e-mail links never load Google Analytics. You can change your choice at any time under «Cookie settings» at the bottom of the pages; withdrawing stops the collection and deletes these cookies.
• Like any web server, our infrastructure records technical request logs — see "How long we keep it".

Correspondence

• When you write to info@autodrom.app, or we write to you from it — most often about bringing an auto service onto Autodrom — we keep a copy of the correspondence in our correspondence tool: each letter's sender (name and e-mail address), the e-mail addresses of its recipients, its date, subject and text, and the names, types and sizes of its attachments. The attachments themselves stay only in our mailbox: the tool fetches one when someone opens it and does not keep it.
• For each auto service we correspond with, we also keep the names, e-mail addresses and phone numbers of its contact people, the stage of the conversation, the next step agreed and our own notes.

What stays on your device

• Your receipt photos, favourites, the services you hide and the auto services you save in «My services» (their names, phone numbers and places on the map) are stored on your phone only. They are not uploaded to us, we cannot read them and we keep no copy — if you lose the phone, they are gone.
• Your receipt records, service book and reminders are stored on your phone and, while «Sync records» is on, also copied to your account — see "Data we collect". With sync off they stay on your phone only.
• Receipt text is recognised on the device itself.
• The one exception is a history link you create yourself. When you share a vehicle's service history, the app uploads a fixed extract of that vehicle's service book — never costs, the VIN or your identity — to our servers. Anyone who has the link can read it until it expires (90 days) or until you revoke it. We cannot recall copies that a recipient has already saved.

Why we use data and the legal bases

• To provide the service you signed up for — your account, garage, requests, prepaid services, the copy of your records that lets them follow your account, and the business tools for services (performance of a contract).
• To show services and offers near you, if you turn this on — your rounded location, used only to answer that search; and to find any auto service you want to add to «My services» (performance of a contract: the feature you asked for).
• To fill in your car's details from the traffic register when you press «Search» — the licence plate you typed (performance of a contract: the feature you asked for).
• To send the notifications you turned on — the notification token, the app's language and your notification settings (performance of a contract: the feature you asked for).
• News and offers. If you switch on «News and offers» in the app yourself, we will occasionally send push notifications about Autodrom news and offers from services. The legal basis is your consent (Art. 6(1)(a) GDPR); we keep when you gave it and when you withdrew it. Switch it off any time in Profile → Notifications; your other notifications are not affected. Google (FCM) and Apple (APNs) deliver the notifications.
• To answer letters and to bring auto services onto the platform — the correspondence with info@autodrom.app and the contact details of the services we talk to (our legitimate interest in answering the people who write to us and in growing the platform with auto services).
• To keep the platform secure and working — abuse and fraud prevention, rate limiting, technical logs, troubleshooting (our legitimate interest in a safe and reliable service).
• To know how many people visit the website and how they find it — daily totals of visits to the home page and the offer pages and of store-button taps, split by source and device type, with no identifier (our legitimate interest in knowing whether the website works and which channels bring visitors).
• To understand how visitors use the website and which channels, our Google Ads campaigns included, bring them — Google Analytics, as described under "Website visitors", only if you allow it (your consent, Art. 6(1)(a) GDPR). You can withdraw it at any time under «Cookie settings»; withdrawing does not affect what was collected before.
• To meet legal obligations — accounting and tax records for prepaid services sold and payouts.
• We do not build advertising profiles or show you targeted ads: Google Analytics serves statistics only, with Google signals and every advertising use turned off, and the only promotional messages are the «News and offers» you switch on yourself, the same for everyone who did. We do not sell your data, and we make no decisions about you by automated means that have legal or similarly significant effects.

Who receives data

• The auto service you contact sees the request you send it: the name shown in your profile, the vehicle, the work, your notes and preferred time. The service where you redeem a prepaid service sees that purchase.
• Google Cloud (Google Cloud EMEA Limited) hosts our servers, database and file storage and provides sign-in (Google Identity Platform), including protection against automated abuse at sign-up. Google acts as our processor.
• Google Workspace, Google's e-mail service for organisations, hosts our mailbox info@autodrom.app: the letters and their attachments are stored there, and our correspondence tool reads and sends letters through it. Google acts as our processor.
• A person we engage to handle correspondence with auto services reads and answers these letters in our correspondence tool, on our instructions.
• Google or Apple, if you sign in with them. They run those accounts themselves: the provider confirms who you are under its own terms and privacy policy — not on our behalf — and so knows that you use Autodrom.
• Our payment service provider, a licensed payment institution, receives the payment details needed to process a purchase or a refund, once sales of prepaid services open; we will name it here before then. We never see or store your bank credentials or card number.
• Public authorities, where the law requires it.
• When a vehicle has no photo, our server may look up a stock picture of that brand, model and year on Wikimedia. The lookup contains no information about you.
• OpenAI receives a vehicle photo when you use enhanced background removal, and the text an auto service enters when it generates a logo or an offer picture. OpenAI acts as our processor: it does not use this data to train its models, and it may keep it for up to 30 days to monitor abuse before deleting it.
• The Estonian Land and Spatial Development Board (Maa- ja Ruumiamet) receives a service's business address when our server looks it up in the official address register (In-AKS). The lookup contains no information about car owners.
• Geoapify (KEPTAGO LTD, Cyprus) receives the text of a place search, the rounded area and radius around you, the app's language and the identifier of a place you pick, so that it can return matching places from OpenStreetMap data. The request comes from our server and contains nothing that identifies you.
• The Estonian Transport Administration (Transpordiamet) receives the licence plate you look up, from our server, and returns the car's technical data from the traffic register. The request carries Autodrom's registry code, not your name or anything else about you.
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) deliver notifications to your phone. They receive the phone's notification token and the notification's text, which contains no personal or order details.
• Google Analytics (Google Ireland Limited) — only with your consent, as described under "Website visitors". Google acts as our processor under its data processing terms. Our Google Analytics is linked to our Google Ads account only so that its reports show which of our ads brought visitors; data about your visit is not used for advertising.

Where data is processed

• Our servers, database and file storage are in the European Union.
• Two exceptions: sign-in data (your e-mail address, and your password hash or, with Google or Apple, your name and the link to that account) is processed by Google Identity Platform in the United States, and technical logs are kept in Google's global log storage. These transfers rely on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.
• Enhanced processing by OpenAI (enhanced background removal, generated images) takes place outside the European Union, mainly in the United States. This transfer relies on the European Commission's standard contractual clauses.
• Notifications are delivered through Google's and Apple's notification services, which operate worldwide, including in the United States; what they receive is described under "Who receives data".
• Our mailbox (info@autodrom.app) is hosted by Google Workspace, which may store and process letters in Google's data centres outside the European Union, including in the United States. These transfers rely on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. The copy in our correspondence tool is kept in our database in the European Union.
• Google Analytics may process data in Google's data centres outside the European Union, including in the United States. These transfers rely on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.

How long we keep it

• Account, garage, requests and business profile: until you delete them or the account.
• Vehicle photos: until you replace or remove the photo, delete the vehicle or the account.
• Synced records: until you delete the record, delete its vehicle, switch «Sync records» off (the copy is deleted at once) or delete the account.
• History links: 90 days, or until you revoke them.
• Your location: not kept — it is discarded as soon as the search has been answered.
• Place searches: not kept by us — the text, the area and the results are discarded as soon as the answer has been sent.
• Plate lookups: not kept — the plate and the register's answer are discarded once shown to you; only the details you save become part of your garage. The usage counter for your account is deleted automatically, normally within two days.
• Notification registrations: until you sign out on that phone, it stops accepting notifications, or you delete the account. A notification that cannot be delivered is dropped after one to three days, and our record of a sent notification is deleted after 7 days.
• Your «News and offers» choice: when you switched it on and when you switched it off — until you delete the account.
• Correspondence: our correspondence tool deletes a conversation two years after its last letter, and a conversation we archive without linking it to an auto service 30 days after archiving; a service's contact people and our notes go two years after the last activity, once no conversation with it is left. When you ask us, or when you delete your Autodrom account, the tool's copy of your correspondence is deleted at once. Our mailbox keeps its own copy of the letters until we delete them there.
• Google Analytics: the data linked to the cookie identifier is kept for 2 months, after which only aggregated reports remain; the cookies expire after 13 months and are deleted at once when you withdraw consent. Your answer to the cookie banner is kept on your device for 12 months, after which the banner asks again.
• Technical logs: 30 days.
• What is sent to OpenAI: up to 30 days at OpenAI for abuse monitoring, then deleted; the result is kept with us like the photo itself.
• Records of prepaid services, payments and payouts: as long as accounting law requires (seven years in Estonia), even after the account is deleted — without the data we no longer need.
• After an account is deleted we keep a record that contains no personal data, so that the deleted account cannot be re-created by mistake from an old session. Requests you sent to services stay in the service's history with your personal details removed.
• Backups and recovery copies: deleting removes data from the product at once, but copies in our database backups and in the storage recovery window remain for up to 14 days before they expire. We use them only to restore the service after a failure.
• To limit abuse at sign-up we keep a salted, irreversible fingerprint of the network address for a short time; it cannot be turned back into an address.

Your rights

Under the EU General Data Protection Regulation you may:

• ask for a copy of your data, and for it to be corrected;
• ask for it to be deleted, or for its use to be restricted;
• object to processing that relies on our legitimate interest;
• receive the data you gave us in a portable form;
• complain to the supervisory authority — in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) — or to the authority of the EU country where you live.

Write to info@autodrom.app. Before acting on a request we verify that the person asking controls the account, so that nobody else can obtain or delete your data. We answer within one month.

Deleting your account

• The fastest way is in the app itself: both the mobile app and the web app for services have a "Delete account" action in their settings. It removes the account, the garage, synced records, photos and history links from the product at once; recovery copies expire as described under "How long we keep it".
• If you signed in with Apple, deleting the account in the iPhone app also asks Apple to revoke Autodrom's access. If you delete it another way — on Android, in the web app for services or by e-mail — or the revocation fails, remove Autodrom yourself in your Apple Account settings, under "Sign in with Apple".
• A service account that still has running campaigns, unredeemed prepaid services or an unpaid balance cannot be deleted until those are settled, because buyers depend on them.
• If you cannot use the app, write to info@autodrom.app from the address of the account. We will confirm that the request comes from the account holder before deleting anything.

Cookies

• Language cookie (named autodrom.locale) — set only when you choose a language on the website or in the web app for services, so that your choice is remembered. It holds the language code and nothing else and lasts one year. On the website it cannot be read by scripts; in the web app for services the app's own code reads it to switch the language.
• Halloween theme cookie (named autodrom.halloween) — set only when you switch on the website's Halloween theme, which is offered from mid-October to early November, so that the page stays in it on your next visit. It holds the word "on" and nothing else; switching the theme off deletes it, and it expires by itself after 7 November.
• Session cookie of our internal team area — set only for our own team members, and the person we engage for correspondence with auto services, when they sign in there.
• Google Analytics cookies (named _ga and _ga_ followed by a code) — set only if you accept. They hold a random identifier that lets Google Analytics recognise a repeat visit, and last 13 months or until you withdraw consent.
• Your cookie choice (named autodrom.consent) — kept in your browser's local storage, not in a cookie: your answer to the cookie banner and its date, for 12 months. It never leaves your device.
• No other analytics, advertising or third-party cookies.

Children and changes

• Autodrom is meant for adults who own or run vehicles or auto services. We do not knowingly collect data from children under 16.
• When we change how we handle data, we update this notice and its date before the change takes effect.