Privacy Notice

1. Data We Collect

• Vehicle Data: Vehicle Registration Marks (VRMs) searched.
• Account Data: Email address and authentication metadata managed via Supabase.
• Payment Identifiers: Stripe transaction tokens (payment details are handled securely by Stripe; CarSage never stores raw credit card numbers).
• Technical Logs: IP address and user-agent details strictly for rate-limiting and operational security.

2. How We Use Data

Data is processed under the legal bases of Contract Performance (delivering vehicle audits and processing payments) and Legitimate Interest (preventing system abuse and maintaining rate-limiting security).

3. Third-Party Sub-Processors

• Stripe: Payment processing and billing metadata.
• Supabase: User authentication and database storage.
• Google Gemini: Anonymized text processing for AI vehicle defect synthesis.
• DVSA API: Official UK MOT history data retrieval.

4. Your UK GDPR Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to request access to your personal data, request correction or deletion, or object to processing. To exercise your rights, contact us at privacy@getcarsage.co.uk.