Privacy notice

Autodrom privacy notice

This notice explains what personal data Autodrom collects, why, who receives it and what you can do about it. It covers the Autodrom mobile app for car owners, the Autodrom web app for auto services, and the website autodrom.app.

Who we are

• The data controller is Autodrom OÜ, registry code 17595374, Harju maakond, Tallinn, Lasnamäe linnaosa, Lõõtsa tn 8, 11415, Estonia.
• For any privacy question or request, write to info@autodrom.app.

What this notice covers

• It applies to everyone who uses the mobile app, the web app for services or the website.
• Auto services listed on Autodrom are separate businesses. When you send a request to a service or use a prepaid service there, that service handles the data it receives from you under its own responsibility.

Data we collect

We collect only what the product needs to work. We do not buy data about you from anyone.

Car owners

• Account: your e-mail address and whether it is verified, the name shown in your profile, and how you sign in — with a password (stored by our sign-in provider in hashed form, never readable by us), with your Google Account or, in the iPhone app, with your Apple Account. From Google or Apple we use only your e-mail address and, if you let the provider share it, your name — nothing else from that account, such as its profile picture. With Apple's "Hide My Email", the address we receive is one that Apple creates for Autodrom and forwards to your own.
• Garage: the vehicles you add — name, brand, model, year, licence plate, and a vehicle photo if you add one. Photos are uploaded to our servers, re-encoded with their metadata (such as location and camera details) removed, stored privately and shown only to you. If you ask the app to cut the car out of its background, that processing is automated. By default it uses enhanced processing by OpenAI: the photo — without location or camera data — is sent to OpenAI, and the result is AI-edited, so small details may change; you always see it before it is applied. You can switch to standard processing in the app at any time; it happens inside our own infrastructure and nothing leaves it.
• Requests to services: the vehicle, the work you ask for, your preferred time, your notes, and the estimate and status the service sends back.
• Prepaid services: the prepaid services you buy, their codes, price, status, the version of the terms you accepted, and refund requests.
• Shared service history: only if you create a history link — see "What stays on your device".
• Location (optional): only if you allow it, and only while you use the app. The app rounds your phone's location to about 100 metres and sends it with a search for services or offers, so that our server can list the nearest first and show how far they are. We use it for that one answer and discard it: we do not store it, it is not written to our logs, and the app never reads it in the background. You can switch it off in the app or in your phone's settings at any time.
• Place search (optional): when you look for an auto service, car wash or tyre shop to add to «My services», the app sends what you type, the search radius and the app's language to our server, which passes them on to Geoapify — together with your rounded location, if you have allowed location. When you pick a result, its identifier is sent to look up the place's phone number. The search reaches Geoapify from our server and carries nothing that identifies you; we do not store the search or its results and do not write them to our logs. On iPhone, the map in «My services» is Apple Maps, which loads the map of the area on screen.

Service accounts

• Account: the e-mail address of the person who signs in for the business, and their password or Google Account — from Google, as for car owners, we use only the e-mail address and the name.
• Business profile: the name, description, address, phone, website, e-mail, social accounts, opening hours, photos, logo, works and prices, and the company details you enter. This profile is meant to be public once the service is verified. We look up the address in Estonia's official address register to place the service on the map, so that car owners can see how far it is and find it by municipality. If you use "Generate with AI" for a logo or an offer picture, the text you entered for it (such as the business name, categories or the offer's title) is sent to OpenAI to create the image.
• Activity: promotions and campaigns, requests received and the answers given, prepaid services redeemed, settlement and payout records.

Website visitors

• The website sets one cookie, and only when you pick a language. We run no analytics, advertising or tracking tools on it.
• Like any web server, our infrastructure records technical request logs — see "How long we keep it".

What stays on your device

• Your receipts and their photos, expenses, service book, reminders, favourites and the auto services you save in «My services» (their names, phone numbers and places on the map) are stored on your phone only. They are not uploaded to us, we cannot read them and we keep no copy — if you lose the phone, they are gone.
• Receipt text is recognised on the device itself.
• The one exception is a history link you create yourself. When you share a vehicle's service history, the app uploads a fixed extract of that vehicle's service book — never costs, the VIN or your identity — to our servers. Anyone who has the link can read it until it expires (90 days) or until you revoke it. We cannot recall copies that a recipient has already saved.

Why we use data and the legal bases

• To provide the service you signed up for — your account, garage, requests, prepaid services and the business tools for services (performance of a contract).
• To show services and offers near you, if you turn this on — your rounded location, used only to answer that search; and to find any auto service you want to add to «My services» (performance of a contract: the feature you asked for).
• To keep the platform secure and working — abuse and fraud prevention, rate limiting, technical logs, troubleshooting (our legitimate interest in a safe and reliable service).
• To meet legal obligations — accounting and tax records for prepaid services sold and payouts.
• We do not use your data for advertising, we do not sell it, and we make no decisions about you by automated means that have legal or similarly significant effects.

Who receives data

• The auto service you contact sees the request you send it: the name shown in your profile, the vehicle, the work, your notes and preferred time. The service where you redeem a prepaid service sees that purchase.
• Google Cloud (Google Cloud EMEA Limited) hosts our servers, database and file storage and provides sign-in (Google Identity Platform), including protection against automated abuse at sign-up. Google acts as our processor.
• Google or Apple, if you sign in with them. They run those accounts themselves: the provider confirms who you are under its own terms and privacy policy — not on our behalf — and so knows that you use Autodrom.
• Our payment service provider, a licensed payment institution, receives the payment details needed to process a purchase or a refund, once sales of prepaid services open; we will name it here before then. We never see or store your bank credentials or card number.
• Public authorities, where the law requires it.
• When a vehicle has no photo, our server may look up a stock picture of that brand, model and year on Wikimedia. The lookup contains no information about you.
• OpenAI receives a vehicle photo when you use enhanced background removal, and the text an auto service enters when it generates a logo or an offer picture. OpenAI acts as our processor: it does not use this data to train its models, and it may keep it for up to 30 days to monitor abuse before deleting it.
• The Estonian Land and Spatial Development Board (Maa- ja Ruumiamet) receives a service's business address when our server looks it up in the official address register (In-AKS). The lookup contains no information about car owners.
• Geoapify (KEPTAGO LTD, Cyprus) receives the text of a place search, the rounded area and radius around you, the app's language and the identifier of a place you pick, so that it can return matching places from OpenStreetMap data. The request comes from our server and contains nothing that identifies you.

Where data is processed

• Our servers, database and file storage are in the European Union.
• Two exceptions: sign-in data (your e-mail address, and your password hash or, with Google or Apple, your name and the link to that account) is processed by Google Identity Platform in the United States, and technical logs are kept in Google's global log storage. These transfers rely on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.
• Enhanced processing by OpenAI (enhanced background removal, generated images) takes place outside the European Union, mainly in the United States. This transfer relies on the European Commission's standard contractual clauses.

How long we keep it

• Account, garage, requests and business profile: until you delete them or the account.
• Vehicle photos: until you replace or remove the photo, delete the vehicle or the account.
• History links: 90 days, or until you revoke them.
• Your location: not kept — it is discarded as soon as the search has been answered.
• Place searches: not kept by us — the text, the area and the results are discarded as soon as the answer has been sent.
• Technical logs: 30 days.
• What is sent to OpenAI: up to 30 days at OpenAI for abuse monitoring, then deleted; the result is kept with us like the photo itself.
• Records of prepaid services, payments and payouts: as long as accounting law requires (seven years in Estonia), even after the account is deleted — without the data we no longer need.
• After an account is deleted we keep a record that contains no personal data, so that the deleted account cannot be re-created by mistake from an old session. Requests you sent to services stay in the service's history with your personal details removed.
• Backups and recovery copies: deleting removes data from the product at once, but copies in our database backups and in the storage recovery window remain for up to 14 days before they expire. We use them only to restore the service after a failure.
• To limit abuse at sign-up we keep a salted, irreversible fingerprint of the network address for a short time; it cannot be turned back into an address.

Your rights

Under the EU General Data Protection Regulation you may:

• ask for a copy of your data, and for it to be corrected;
• ask for it to be deleted, or for its use to be restricted;
• object to processing that relies on our legitimate interest;
• receive the data you gave us in a portable form;
• complain to the supervisory authority — in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) — or to the authority of the EU country where you live.

Write to info@autodrom.app. Before acting on a request we verify that the person asking controls the account, so that nobody else can obtain or delete your data. We answer within one month.

Deleting your account

• The fastest way is in the app itself: both the mobile app and the web app for services have a "Delete account" action in their settings. It removes the account, the garage, photos and history links from the product at once; recovery copies expire as described under "How long we keep it".
• If you signed in with Apple, deleting the account in the iPhone app also asks Apple to revoke Autodrom's access. If you delete it another way — on Android, in the web app for services or by e-mail — or the revocation fails, remove Autodrom yourself in your Apple Account settings, under "Sign in with Apple".
• A service account that still has running campaigns, unredeemed prepaid services or an unpaid balance cannot be deleted until those are settled, because buyers depend on them.
• If you cannot use the app, write to info@autodrom.app from the address of the account. We will confirm that the request comes from the account holder before deleting anything.

Cookies

• Language cookie (named autodrom.locale) — set only when you choose a language on the website or in the web app for services, so that your choice is remembered. It holds the language code and nothing else and lasts one year. On the website it cannot be read by scripts; in the web app for services the app's own code reads it to switch the language.
• Session cookie of our internal team area — set only for our own team members who sign in there.
• No analytics, advertising or third-party cookies.

Children and changes

• Autodrom is meant for adults who own or run vehicles or auto services. We do not knowingly collect data from children under 16.
• When we change how we handle data, we update this notice and its date before the change takes effect.