Pilot privacy policy · 15 October 2026

Your details, handled with care.

Selling and certified-car records

Seller contact details, vehicle registration, inspection and certification records, dealer applications, approved introductions and buyer enquiries are stored privately for coordination. Public approved listings show vehicle details, asking price, condition summary and approved vehicle photographs. Seller contact and registration are excluded from the public listing.

Dealer introductions and photos

A reviewed dealer receives seller contact details only after certification, seller consent and an authorized introduction. Vehicle photographs are private before publication and can become public with an approved marketplace listing. Do not upload identity documents, faces or sensitive personal records as vehicle photos.

Separate vehicle programmes

If you use the separate vehicle-concept features, we collect your selections, custom brief, optional reference images, saved estimate and review records. Earlier charging enquiries may be retained for follow-up; the energy programme is paused. Configurator drafts are stored on your device for continuity.

Optional design sharing

Sharing is disabled by default. If you create an unlisted design link, anyone with it can view the shared concept name, selections and estimate. Your custom brief, contact details, private files, quotations and order records are excluded. You can replace or disable the link from the saved build page.

What we collect

We collect your signed-in identity, contact details, vehicle details, service address, requested times, problem descriptions and optional vehicle photographs to coordinate and document your service.

How we use it

Information is used for bookings, quotations, approval records, customer support and operational security. Authorized staff and an assigned service provider receive only information necessary for the job.

Storage and access

The Vercel/Node deployment stores booking records in Supabase-hosted PostgreSQL and uploaded images in a private Supabase Storage bucket when configured. Uploaded images are held in private object storage. Signed-in users can access their own bookings; operations access is restricted by role. A guest request can be accessed on the same browser using a private capability stored on that device. A booking reference or mobile number alone does not provide access. Keep shared devices secure and contact the team if you lose access.

Retention and your choices

Operational records are retained while needed for service, support and applicable recordkeeping obligations. Contact the team to request access, corrections or deletion; some approval or accounting records may require retention.

External providers

Vercel hosts this deployment. Supabase Auth provides account sign-in when configured. Essential session cookies keep your account signed in. WhatsApp opens an external service with its own privacy terms. No optional marketing analytics or advertising cookies are enabled in this version.

Contact

For privacy requests, contact +880 1911 040436. Do not include unnecessary identity documents, faces or sensitive information in vehicle photos.