Privacy notice
This notice describes how 1596705 B.C. Ltd. handles personal information and vehicle data when you use Smart Gear Diagnostics.
Account. We store your email, an optional name, how you sign in (Google, or email and password), and the dates the account was created and updated. If you use a password, we store a hash, not the password itself. Sign-in is kept with a session cookie that lasts about 30 days.
Shop profile (optional). If you fill in the first-run card, we store the name, shop name, business type, and how you heard about us. You can skip it.
Vehicle and diagnostic data. For each vehicle we store the VIN, make, model, year, and an optional nickname. For each read we store the scan (codes, freeze frames, monitor status, a snapshot of live sensors, data-quality flags, adapter voltage at connect, and the time of the scan). If you run live monitoring, we store the session and its sensor readings. If you run an AI analysis or chat, we store the request, the result, and the messages. If you rate a diagnosis or enter repair notes, we store that text, which may include a cause, a repair, cost, and hours.
Do not put a person's name, phone number, address, or other personal details in a nickname, a comment, a chat message, or a repair note.
Payments. Card numbers are entered only in Paddle's checkout. We do not store card numbers. We keep a copy of the Paddle customer id, email, and pack or subscription status so we can apply what you bought to your account.
Same vehicle, other accounts. When a VIN is valid, an AI summary for that vehicle may use earlier scans, road tests, ratings, comments, and repair notes stored for that same VIN on any account, not only yours. This is so the diagnosis can use the vehicle's prior history. Invalid VINs stay within your own account. Because of this, keep personal details out of notes and chat.
Who else receives data. Paddle receives checkout, tax, receipts, and saved payment methods. Google receives the sign-in if you use Google. Zoho receives your email address and the link in each account email we send (to confirm your email, reset your password, and similar notices). Anthropic, in the United States, receives the AI request, which includes year, make, model, VIN, fault codes, freeze frames, sensor data, prior history on that vehicle, and chat text. That request does not include your account email. NHTSA, in the United States, receives the VIN to decode make, model, and engine, and receives make, model, and year for recall lookups. Transport Canada receives make, model, and year for open recall data, not the VIN. The companies that host the website, the API, and the database may store data outside Canada.
We do not sell personal information. We do not run an advertising or analytics tracker in the app. The browser also stores settings and in-progress scan state on your computer so the page can work.
Email. We send only account messages: confirm the email, reset the password, and similar notices. We do not send a newsletter unless you later opt in. Those messages are not a marketing list.
How long we keep it. We keep account and diagnostic records while the account is open, and as long as we need them to provide the service, meet payment and tax duties, and handle disputes. After a pack expires, stored scans and reports stay available to you as described in the Terms. You may ask us to delete your account and the diagnostic records tied to it. We will do that except where we must keep a record (for example a payment record). Paddle keeps its own payment records under Paddle's policy. There is not yet a delete button inside the product. Use the contact method on the site.
Access. You may ask what account data we hold and ask for a correction. Write to us at the address in the Terms.
Cookies. We use one sign-in cookie and local storage for settings and an unfinished scan. Paddle's checkout may set its own cookies when you pay. We do not use advertising cookies.