2. Legal Basis & How We Use Your Data

We process your personal data under the following legal bases under UK GDPR:

• Performance of a Contract: To process payments, verify time-stamped visual condition metadata, run AI damage-analysis algorithms, and deliver your downloadable Inspection Reports.
• Legitimate Interests: To train and refine our computer-vision AI algorithms, prevent fraud/misuse, monitor app performance, and attribute sales to marketing channels or travel affiliate partners.
• Legal Obligation: To comply with accounting, tax, and reporting obligations under UK law.
• Consent: To send optional promotional offers, travel tips, or newsletters where you have explicitly opted in via our marketing sign-up checkbox.

3. AI Processing & Image Data Usage

3.1 Visual media uploaded to the App is analyzed using automated artificial intelligence to detect vehicle surface anomalies (e.g., scratches, dents, cracks).

3.2 Cryptographic time-stamps and GPS location metadata are embedded into final Inspection Reports to establish verifiable audit logs.

3.3 We may use anonymized and aggregated image media (stripped of all personal identifiers, vehicle registration numbers, or face details) to train, evaluate, and enhance our proprietary AI vision models.

4. Data Sharing & Third-Party Processors

We do not sell or rent your personal data. We share data only with trusted service providers operating under strict data protection agreements:

• Cloud & Infrastructure Providers: Secure cloud computing and storage providers hosting our App, database, and AI processing pipelines.
• Payment Gateways: Merchant processors handling checkout transactions.
• Affiliate & Advertising Networks: Anonymized conversion and tracking tokens (e.g., via Travelpayouts, Awin, Impact, Meta, TikTok) to credit referring travel publishers and measure ad campaign effectiveness.
• Legal & Regulatory Authorities: Where required by law, court order, or to enforce our Terms of Service and protect our legal rights.

5. International Data Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area (EEA), we ensure appropriate safeguards are implemented (such as Standard Contractual Clauses or UK International Data Transfer Agreements) to guarantee your data receives an equivalent level of protection.

6. Data Retention & Security

6.1 Retention: Account information and generated Inspection Reports are retained for as long as your account remains active or up to two (2) years following package purchase to support dispute verification needs. Unused scans expire after 30 days per our Terms of Service.

6.2 Security: We employ industry-standard administrative, physical, and technical security measures (including end-to-end encryption and cryptographic hashing) to protect your data against unauthorized access, loss, or alteration.

7. Your Statutory Rights Under UK GDPR

Subject to applicable law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where it is no longer necessary for contract performance or legal compliance.
• Right to Restrict or Object: Object to or restrict processing based on legitimate interests or direct marketing.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at hello@detectdamage.ai. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies & Analytics

Our Site and App use essential cookies to maintain secure sessions, process purchases, and analyze user interactions. You can manage cookie preferences through your web browser settings.

9. Updates to This Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Any updates will be published on this page with an updated Effective Date.

10. Contact Us

For questions, data requests, or privacy concerns:

Detect Damage AI Ltd
Email: hello@detectdamage.ai