Privacy Policy

Used Cars Doctor ("we," "our," "us") operates the web application, Progressive Web Application, and Android application available at usedcarsdoctor.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

By using the Service you consent to the practices described here; if you do not agree, discontinue use. The Service provides AI-assisted decision support only — AI outputs, scores, and history summaries are not guarantees of a vehicle's condition, safety, legality, value, or history.

Account data: name, email address, and a hashed password, or your name, email, and profile photo if you sign in with Google.

Vehicle and inspection data: make, model, year, VIN, mileage, asking price, checklist responses, and notes you enter.

Vehicle images: photos uploaded during AI analysis, transmitted to our AI provider for that purpose only (see Section 6). Avoid uploading images containing personal or unrelated content not necessary for vehicle identification.

AI results: findings, confidence scores, summaries, and risk scores generated from your inputs.

Payment data: if you purchase a premium product, payment is processed by Stripe or Google Play Billing; we do not store full card numbers and retain only transaction records needed for billing and legal compliance.

Usage data: browser/device type, IP address, pages visited, and feature interactions, used to operate and improve the Service.

Legal consent evidence: see Section 3.

Local storage: your authentication session is stored in browser storage until you sign out.

When you accept these Terms, the Privacy Policy, or the Risk Acknowledgement — at registration or when a material update requires re-acceptance — we record a consent evidence entry consisting of: which document versions you accepted, the date and time, your selected locale, the platform you used (web or Android), which revision of the consent form presented the checkboxes to you, and the IP address and browser user-agent string associated with that specific acceptance event.

This information is collected solely to prove, if it is ever disputed, that you were shown and affirmatively accepted a specific, identifiable version of our legal documents — it is contract-formation evidence, not analytics, and it is never used for tracking, profiling, advertising, or any purpose beyond establishing what you agreed to and when. It is retained for as long as necessary to serve that evidentiary purpose, including for a reasonable period after account deletion where retention is necessary to establish, exercise, or defend legal claims, consistent with applicable data-protection law.

We use your information to operate the Service and its AI-assisted features, generate inspection outputs and reports, process purchases, authenticate your account, communicate with you about your account or purchases, improve the reliability of AI features, comply with legal obligations and enforce our Terms, prove what you consented to, and detect and prevent fraud or abuse. We do not sell, rent, or trade your personal data for third parties' marketing purposes.

We share data only with providers essential to the Service: database hosting; our AI provider, to generate analysis from photos and inspection context you submit; Stripe and Google Play Billing, for payment processing; third-party vehicle-history data providers, when you purchase a history report; CDN/DNS/security providers; and an email delivery provider for transactional email. Each processes data under its own privacy policy; we are not responsible for their practices beyond our reasonable control. We do not share your data with advertisers, data brokers, or unaffiliated third parties for other purposes.

Uploaded images and vehicle data may be processed by third-party AI providers to generate findings, risk indicators, and recommendations. Result quality depends on image resolution and clarity, lighting and angle, completeness of the data you provide, and the AI model's inherent limitations. AI results are informational and decision-support only — not a professional inspection, certified assessment, or guarantee of condition, safety, value, or history.

Your data is stored in an encrypted-in-transit PostgreSQL database. We apply reasonable technical and organizational safeguards, including access controls and secure key management, but no method of electronic transmission or storage can be guaranteed absolutely secure, and by using the Service you accept that inherent risk. We will notify you and, where required, the relevant supervisory authority in the event of a data breach affecting your rights.

We retain data for as long as necessary for account functionality, report generation, security and fraud prevention, service improvement, and legal and compliance obligations, including the evidentiary retention described in Section 3. Retention periods vary by data type. You may request account deletion via the Account Deletion page or by contacting us (Section 13); payment transaction records may be retained up to 7 years as required by accounting and tax law, and consent evidence may be retained past account deletion for the legal-claims purpose described in Section 3, even after your account and other personal data are deleted.

If you are located in a jurisdiction that grants data-protection rights such as the EEA/UK's GDPR, you may have the right to access, rectify, erase, restrict processing of, port, or object to processing of your data, and to lodge a complaint with your supervisory authority. Contact us to exercise these rights (Section 13); we respond within the timeframe applicable law requires.

We use an authentication cookie to maintain your signed-in state, a language-preference cookie (expires after 365 days), and local/session storage for authentication data on your device. We do not use advertising cookies, cross-site tracking, or third-party analytics such as Google Analytics.

The Service is not directed at, and must not be used by, individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal data, contact us and we will take steps to delete it promptly.

We may update this Privacy Policy; each published version is dated and retained. Material changes may require affirmative re-acceptance before you can continue using protected features, as described in the Terms of Use.

For privacy questions, access requests, or complaints, contact us at contact@usedcarsdoctor.com or via usedcarsdoctor.com.