Privacy Policy

1. Introduction

AutoGuard 360 ("we", "us", "our") operates the AutoGuard 360 mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using AutoGuard 360, you consent to the practices described in this policy.

2. Information We Collect

Information you provide directly:

• Account information: email address, full name, password
• Vehicle data: make, model, year, VIN, license plate, mileage, color
• Maintenance records: service types, dates, costs, shop details, technician names
• Fuel logs: gallons, cost, station names, odometer readings
• Parts inventory: brand, part numbers, installation dates, warranty details
• Uploaded documents: receipt photos, vehicle photos
• Support messages and feedback

Information collected automatically:

• Device information: device type, operating system, browser type
• Usage data: features accessed, interaction timestamps, session duration
• Approximate location: ZIP code (when using Local Search or Marketplace features), only with your explicit permission

Information from third parties:

• NHTSA vPIC API: publicly available vehicle specification data from VIN decoding
• Google OAuth: email and name (if you sign in with Google)
• Stripe: subscription status and billing identifiers (we never receive or store full card numbers)

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Process and manage vehicle maintenance records and service reminders
• Generate AI-powered analyses, resale reports, and maintenance recommendations
• Process payments and manage subscriptions via Stripe
• Send transactional emails (welcome, reminders, billing)
• Connect you with local automotive service providers (only when you initiate)
• Improve and personalize the Service
• Respond to support requests
• Comply with legal obligations

4. AI-Generated Content

AutoGuard 360 uses artificial intelligence to generate vehicle health analyses, resale value estimates, recall information, DIY repair guides, and maintenance schedules. Your vehicle data may be sent to AI service providers in anonymized prompts. These AI outputs are estimates for informational purposes only. They are not sourced from any manufacturer's owner's manual or licensed repair database. Always consult your vehicle's owner's manual or a qualified mechanic for vehicle-specific service guidance.

5. Data Sharing & Third-Party Services

We do not sell your personal data. We share data only with:

• Stripe: Payment processing (PCI DSS compliant)
• AI Providers: Anonymized prompts for generating analyses (no personal identifiers sent)
• NHTSA vPIC API: VIN decoding (public government data, no personal info sent)
• OpenStreetMap/Nominatim: Geocoding for local search (ZIP code only)
• Google Calendar: Syncing service reminders (optional, with your explicit consent via OAuth)
• Service Providers: Businesses you explicitly request quotes or appointments from via the Marketplace

Manufacturer and brand names used in the app are for vehicle identification purposes only and do not imply endorsement or affiliation.

6. Data Retention & Deletion

Your data is retained as long as your account is active. You can delete all your data and account at any time from Settings → Danger Zone → Delete My Account. This permanently removes all your vehicles, maintenance records, fuel logs, parts, reminders, and account access. Billing records required for legal compliance may be retained for up to 7 years after deletion.

7. Security

We use industry-standard security measures including encrypted connections (TLS/HTTPS), secure authentication tokens, role-based access control, and encrypted data at rest. Payment information is handled entirely by Stripe's PCI DSS Level 1 compliant infrastructure. While no system is 100% secure, we continuously monitor and improve our security practices.

8. Your Rights (GDPR / EEA Users)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request restricted processing of your data
• Right to Data Portability: Receive your data in a portable format (CSV export)
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

Legal basis for processing: contract performance (providing the Service), legitimate interests (improving the Service), and consent (optional features like Google Calendar sync).

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights
• Right to Correct: Correct inaccurate personal information

To exercise these rights, use the Delete My Account feature in Settings or contact us through the Support page.

10. Children's Privacy

AutoGuard 360 is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child without parental consent, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us through the Support page.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required by GDPR.

12. Cookies & Tracking

AutoGuard 360 uses essential cookies and local storage for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. Analytics events are collected in aggregate to improve the Service and do not include personal identifiers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related inquiries, data requests, or to exercise your rights, please visit our Support page or contact us through the AutoGuard 360 app.

AutoGuard 360
Nevada, United States