Privacy Policy

1Who We Are and What This Policy Covers

autodAIgnosis ("we", "our", or "us") decides why and how your personal data is processed. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") that makes us a Data Fiduciary, and you a Data Principal.

This policy covers the autodAIgnosis mobile app and the website autodaignosis.com. It explains:

• What information we collect
• How we collect it
• Why we use it
• Who helps us process it
• How long we keep it
• The rights you have, and how to use them

Where we rely on your consent, we ask for it clearly inside the app. Optional uses, such as research sharing and crash reports, are asked for separately, are off unless you turn them on, and can be withdrawn at any time.

2Information We Collect

We may collect the following categories of information:

A. Personal Information

Information you provide directly when creating an account, purchasing a subscription, contacting support, or using the platform.

This may include:

• Full name
• Email address
• Phone number
• Address
• Billing details
• Company or fleet name
• Login credentials
• Support requests and communication history

B. Vehicle Information

We may collect information about the vehicle connected to autodAIgnosis. This may include:

• Vehicle make
• Vehicle model
• Year of manufacture
• Registration number
• Vehicle Identification Number (VIN)
• Fuel type
• Engine type
• Transmission type
• Mileage
• Service history
• Maintenance records
• Insurance or warranty information if provided voluntarily

C. Diagnostic and OBD Data

When a compatible OBD device is connected, we may collect:

• OBD fault codes
• Engine temperature
• Battery health and voltage
• RPM
• Speed
• Fuel consumption
• Sensor values
• Brake and engine warnings
• Emissions information
• Error logs
• Diagnostic history
• Maintenance alerts
• Predicted fault data

D. Device and Technical Information

We may automatically collect:

• IP address
• Device ID
• Browser type
• App version
• Operating system
• Mobile device model
• Language settings
• Usage logs
• Crash reports
• Date and time of access

E. Location Information

If you allow location access, the app sends your current location to find mechanics near you. We use it only for that search and do not save it to your account. You can turn location access off at any time in your device settings.

F. Records of Your Choices and Requests

• The version of our privacy notice you accepted, when, and which optional uses you turned on or off
• Your confirmation that you are 18 or older
• Requests and complaints you send us about your data, and our replies
• The name and contact details of anyone you nominate to act for you (see section 10)

3How We Collect Information

We may collect information in several ways:

• Directly from you when you create an account or enter data
• Automatically through the app or website
• Through connected OBD devices
• Through cookies and analytics tools
• Through support interactions
• From third-party integrations that you approve

4Why We Use Your Information

We use your information to:

• Provide the autodAIgnosis service and keep your account secure
• Connect your account to your vehicle
• Analyse vehicle condition and generate diagnoses and predictions
• Detect faults and maintenance needs
• Provide reports and recommendations
• Send notifications and alerts
• Process payments made on our website
• Improve our diagnoses, using scan data only if you have turned on research sharing
• Understand app crashes, only if you have turned on crash reports
• Prevent fraud, abuse, or misuse
• Respond to support requests and privacy requests
• Comply with legal obligations

5Our Basis for Processing

Under the DPDP Act we process your personal data on one of these grounds:

• Your consent. You give it when you first open the app and accept our privacy notice. Optional uses need their own separate consent.
• Certain legitimate uses the DPDP Act permits without consent, such as complying with a law that requires us to keep tax and billing records, or complying with a court order.

We do not rely on any other ground.

6Cookies and Tracking Technologies

autodAIgnosis may use:

• Cookies
• Pixels
• Session storage
• Local storage
• Analytics tools
• Device identifiers

These technologies may help us:

• Keep you logged in
• Remember preferences
• Improve site performance
• Understand usage patterns
• Prevent fraud
• Measure marketing effectiveness

You may block cookies through your browser settings, but some parts of the service may stop functioning properly.

7Sharing of Information

We do not sell your personal information. We share it only as described below.

A. Service Providers (Data Processors)

Trusted companies help us run autodAIgnosis:

• Cloud hosting and database providers
• AI inference providers, which generate diagnostic reports and chat replies from the data you send for analysis
• Email delivery providers
• Crash reporting (only if you turned crash reports on)
• Payment gateway (web payments only; we never receive card, UPI, or bank details)

They receive only the information they need for their task. Your data export (section 10) lists these categories.

B. Business Transfers

If autodAIgnosis is merged, acquired, sold, or reorganized, your information may be transferred as part of that transaction.

C. Legal Requirements

We may disclose information if required by:

• Court orders
• Government requests
• Legal investigations
• Applicable laws
• Regulatory authorities

D. Protection of Rights

We may share information when necessary to:

• Protect our rights
• Investigate fraud
• Prevent misuse
• Enforce our Terms & Conditions
• Protect users or public safety

8International Data Transfers

Some of our service providers process data outside India. We transfer personal data only to countries that the Government of India has not restricted under section 16 of the DPDP Act.

9How Long We Keep Your Data

We keep personal data only as long as we need it for the purpose you gave it for, or as long as a law requires. Once a period ends, the data is deleted automatically.

• Your account and profile: until you delete your account
• Diagnosis history, saved reports and uploaded scan logs: 3 years from when they were created
• Security and account-activity logs: 1 year
• Fault-code clearing attestations (a safety record of your confirmation before codes were cleared): 3 years
• Records of privacy requests, complaints and consent: 3 years
• Billing records, invoices, payments and credit history: 8 years, as required by the Companies Act, 2013 and the CGST Act, 2017. After you delete your account, these records are no longer linked to you.
• After you delete your account, your email address, name and sign-up date: 180 days, as required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, then deleted
• Copies inside server backups: up to 90 days

10Your Rights Under the DPDP Act

You can use these rights in the app (Settings → My Account → Privacy & data) or on the web at autodaignosis.com/account/privacy:

• Access: download a summary of the personal data we hold about you, what we use it for, and the categories of providers we share it with
• Correction: update your name in your account, or ask us to correct or complete anything else
• Erasure: delete your account and the personal data linked to it yourself (see section 11)
• Withdraw consent: turn research sharing or crash reports off at any time. Withdrawing consent to the core service means deleting your account, because we cannot provide the service without processing your data. Withdrawal does not affect processing done before you withdrew.
• Nominate: name someone who can use these rights for you if you die or become unable to act. They will need to prove their identity and your death or incapacity before we act on their request.
• Grievance redressal: raise a concern with our Grievance Officer (section 17). We resolve every grievance within 90 days.
• Complain to the Data Protection Board of India if you are not satisfied with how we resolved your grievance

We may ask you to confirm your identity before acting on a request. When you use these rights, the DPDP Act asks you not to impersonate anyone or give false information.

11Deleting Your Account

You can delete your account at any time, in the app (Settings → My Account → Privacy & data → Delete account) or on the web at autodaignosis.com/account/privacy. To protect you, we ask you to confirm with a code sent to your email address or with your password.

When you delete your account:

• Your account, profile, sign-in details, devices, vehicles and diagnosis history are erased straight away
• Scan data you shared from the app is erased
• Your community posts are changed to "[deleted]" so that other people's replies remain readable
• Any unused credits are forfeited
• The records in section 9 that a law requires us to keep are kept for the period stated there, no longer linked to an account

If you cannot sign in, email us from the address registered to your account and we will verify the request and delete the account for you. See our Data Deletion page for details.

12Children's Privacy

autodAIgnosis is for adults only. When you first open the app we ask you to confirm that you are 18 or older.

We do not knowingly process the personal data of anyone under 18, and we never track, monitor or target advertising at children. If we learn that we have collected a child's data, we delete it.

13Security Measures

We take reasonable security safeguards to protect personal data, including:

• Encryption in transit (HTTPS)
• Password hashing
• Two-factor authentication for accounts that turn it on
• Restricted access for our own staff
• Logging of sign-ins and administrative actions
• Independent security reviews of our code

No online system is completely secure, and we cannot guarantee absolute security.

14Data Breach Notification

If a personal data breach affects you, we will tell you without undue delay, in the app or by email: what happened, the likely consequences for you, what we are doing about it, what you can do to protect yourself, and who to contact.

We will also report the breach to the Data Protection Board of India and to CERT-In, as the law requires.

15Third-Party Services and Links

autodAIgnosis may contain links to third-party websites, applications, repair shops, hardware providers, or payment services.

We are not responsible for the privacy practices of third parties.

You should review their policies separately.

16Changes to this Privacy Policy

When we change this policy, the date at the top changes. If a change affects what you have consented to, we will tell you in the app and ask for your consent again before we rely on it. Other changes take effect when published.

17Grievance Officer and Contact

Our Grievance Officer answers questions about how we process your personal data and handles complaints. Email privacy@autodaignosis.com, or use the form at autodaignosis.com/account/privacy. The officer's current name is shown on that page and in the app.

We acknowledge every grievance by email with a reference number and resolve it within 90 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.