Privacy Policy

1. Information We Collect

We collect the following information when you use Chassly:

• Account information (name, email address) via Clerk authentication
• Vehicle information (year, make, model, VIN, color)
• Vehicle damage photos you upload
• Assessment results and history
• Payment information (processed securely by Stripe)
• Usage data and analytics

2. How We Use Your Information

• To provide and improve our damage assessment service
• To process payments and manage subscriptions
• To send transactional emails (reports, billing updates)
• To provide body shop recommendations based on your location
• To improve our AI models and service quality

3. Data Security

All API keys and credentials are stored as environment variables and never exposed to the client. VIN data is encrypted at rest using AES-256-GCM encryption. Images are stored securely on Cloudflare R2 with access controls.

4. License Plates in Photos

Vehicle damage photos may contain visible license plates. We recommend blurring or covering license plates before uploading. Chassly does not extract or store license plate numbers.

5. Data Retention

Assessment data and images are retained as long as your account is active. Free tier images are retained for 12 months. You may request deletion of your account and all associated data at any time.

6. Your Rights (GDPR/CCPA)

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and all data, including images
• Export your data in a portable format
• Opt out of non-essential data processing

7. Third-Party Services

We use the following third-party services:

• Clerk (authentication)
• Stripe (payment processing)
• Cloudflare R2 (image storage)
• Neon (database hosting)
• Our AI provider (AI damage analysis via purpose-built vision AI)
• Google Places API (body shop recommendations)
• Resend (transactional email)

8. Contact

For privacy inquiries, contact us at privacy@chassly.com.