Privacy Policy

Effective date: [to be set] · Operator: [legal entity] ("SpecLab", "we") · Contact: [privacy@…]

1. What this covers

SpecLab gives owners of European cars expert-verified answers for their exact vehicle. This policy explains what data we collect, why, who we share it with, and the choices you have.

2. What we collect

• Account & identity — handled by our authentication provider, [Clerk]. This includes your email and any name you provide to them. We store only a reference to your account, not your password.
• Your garage — the car you add (make, model, generation, engine), an optional nickname, your mileage, and an optional VIN. A VIN is personal; if you provide one it is encrypted at rest, and it is never required.
• What you log — service history entries and trouble codes you look up for your car.
• Technical logs — basic request logs (method, path, status, timing, a request ID, and IP address) to operate and secure the service. We do not log request/response bodies, tokens, or your VIN.
• What we do NOT collect — we run no third-party analytics or advertising trackers.

3. How we use it

To give you answers specific to your car, remember your garage between visits, compute maintenance and fitment, and operate and secure the service. We do not use your data for advertising.

4. AI processing

To phrase answers in plain English, we send the relevant diagnostic record (the trouble code and its verified causes and steps) to an AI provider. We do not send your identity, email, or VIN. AI output is strictly grounded in our verified data and is checked before you see it; where we have no verified answer, we say so rather than guess.

5. Who we share it with

• Service providers — authentication ([Clerk]), hosting and database ([Railway], US), and the AI provider described above. They process data on our behalf.
• Affiliate links — where we link to a retailer, the link may include a standard referral parameter (disclosed in the interface). The retailer does not receive your SpecLab identity from us.
• We do not sell your personal data.

6. Your rights & choices

• Access & export — use Export my data in your garage to download everything we hold for you as JSON.
• Deletion — use Delete all my data to erase your cars and history. Your sign-in account is managed by [Clerk] and can be deleted there.
• Correction — edit your garage (nickname, mileage) at any time.
• Depending on where you live, you may have additional rights (GDPR/CCPA). Contact [privacy@…].

7. Retention

We keep your garage and history until you delete it. Technical logs are kept for a limited operational window [e.g. 30–90 days].

8. Security

Data is encrypted in transit (HTTPS/HSTS). Any VIN you provide is encrypted at rest. Access is limited and secrets are held outside source control.

9. Cookies

We use essential cookies set by our authentication provider to keep you signed in. We do not use advertising or analytics cookies.

10. Children

SpecLab is not directed to children under [16]. We do not knowingly collect their data.

11. Changes & contact

We will post changes here and update the effective date. Questions: [privacy@…].