Privacy Policy

Effective date: August 14, 2026

Autel Consultancy ("we", "us", "our") operates the Curtify application and website at curtify.app. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in with a third-party provider (e.g., Google), we receive your name and email from that provider.

1.2 Vehicle Data

To deliver diagnostic assistance, we process vehicle information you provide, including:

• Vehicle Identification Numbers (VINs)
• Diagnostic Trouble Codes (DTCs)
• Module data (as-built configurations, calibration identifiers)
• Repair and service history you enter

1.3 Audio Recordings and Transcripts

When you use voice consultation features, we capture audio from your microphone. Audio is streamed in real time to our speech-to-text provider (Deepgram) and converted into text transcripts. Audio streams are processed transiently and are not stored after transcription. The resulting text transcripts are stored as part of your consultation session.

1.4 Screen Captures and Images

Curtify can capture screenshots or accept uploaded images to help identify parts, read diagnostic screens, or extract information from documents. These images are processed by AI vision services and stored within your session data.

1.5 Session Data

We store consultation sessions including your questions, AI-generated responses, transcripts, extracted procedures, and any images or documents associated with the session.

1.6 Payment Information

Subscription payments are processed by Stripe. We do not store your full credit card number. Stripe provides us with a tokenized reference, your billing email, and subscription status. See Stripe's Privacy Policy for details.

1.7 Usage and Device Data

We collect basic usage analytics including app version, operating system, feature usage patterns, and error logs to improve reliability and performance.

2. How We Use Your Data

• Provide the service: Process your queries, generate diagnostic suggestions, search for parts and procedures, and maintain consultation history.
• AI processing: Your questions, images, and vehicle data are sent to AI services to generate responses. See Section 3 for a full list of providers.
• Improve the service: Aggregate, anonymized usage data helps us improve accuracy and build better features.
• Billing: Process subscription payments and manage your account status.
• Communication: Send account-related emails (e.g., password resets, billing receipts). We do not send marketing email without your consent.

3. Third-Party Services

We share data with third-party services only as necessary to operate Curtify. We do not sell your data to any third party.

Each provider processes data under their own privacy policies and data processing agreements. AI providers may use data according to their respective API data policies — we use API tiers that do not permit training on customer data where available.

4. Data Retention

• Session data: Retained for the lifetime of your account. You can delete individual sessions at any time.
• Audio: Audio streams are processed in real time and are not stored after transcription is complete.
• Account data: Retained until you delete your account.
• Payment records: Retained as required by tax and accounting laws (typically 7 years).
• Backups: Database backups may retain deleted data for up to 30 days before permanent removal.

5. Data Security

We protect your data using:

• TLS encryption for all data in transit
• Encryption at rest for database storage (Supabase/AWS)
• Row-level security policies ensuring users can only access their own data
• API keys and secrets stored in secure environment variables, never in client-side code

No system is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

6. Your Rights

6.1 All Users

Regardless of where you live, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your account and associated data from the Curtify app or our account deletion page.
• Correction: Update your account information at any time.
• Export: Request an export of your session data in a portable format.

6.2 GDPR (European Economic Area, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you additionally have the right to:

• Legal basis: We process your data based on (a) performance of our contract with you (providing the service), (b) legitimate interests (improving the service, preventing fraud), and (c) your consent where required.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.
• Complaint: Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@curtify.app. We will respond within 30 days.

6.3 CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale: We do not sell your personal information. No opt-out is necessary.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To make a CCPA request, email privacy@curtify.app with the subject line "CCPA Request".

7. Children's Privacy

Curtify is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

8. International Data Transfers

Our servers and primary data infrastructure are located in the United States. If you access Curtify from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses and other appropriate safeguards for cross-border data transfers where required by law.

9. Cookies and Tracking

The Curtify desktop and mobile applications do not use cookies. Our website at curtify.app may use essential cookies for authentication and session management. We do not use advertising trackers or third-party analytics cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or an in-app notice. The "Effective date" at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Autel Consultancy
Email: privacy@curtify.app
Website: curtify.app