Privacy Policy

This Privacy Policy (“Policy”) governs the collection, use, disclosure, and safeguarding of personal data by Car Doctor Inc. (“Car Doctor”, “Company”, “we”, “our”, or “us”) through the Car Doctor mobile applications for iOS and Android, website interfaces, and related digital automotive marketplace services (collectively, the “Service”).

By downloading, registering for, accessing, or using Car Doctor, you acknowledge that you have read, understood, and agree to be bound by the data handling practices described in this Policy.

1. Categories of Information We Collect

We collect information directly from you, automatically through your device hardware and software, and from trusted third-party service partners to deliver an efficient automotive repair and dispatch marketplace.

A. Information You Provide Directly

• Account & Profile Data: Full name, email address, telephone number, encrypted password credentials, profile picture, and selected account role (Driver/Customer or Service Provider/Mechanic).
• Vehicle Information: Vehicle make, model, model year, trim, color, license plate number, Vehicle Identification Number (VIN), odometer mileage, and service maintenance history.
• Service Requests & Diagnostics: Descriptions of mechanical issues, diagnostic trouble codes, photos and video recordings of vehicle components (pre-repair and post-repair documentation), and customer-provider chat correspondence.
• Provider Verification & Professional Credentials: Government-issued photo identification, commercial liability insurance certificates, ASE certifications, business tax registrations, banking details for direct payout disbursements, and identity verification records.

B. Information Collected Automatically

• Precise & Approximate Geolocation: With your explicit operating system permission, we collect real-time device GPS coordinates to calculate proximity between drivers and mobile mechanics, provide accurate dispatch estimates, and display live interactive arrival maps during active bookings.
• Device & Network Telemetry: Device manufacturer, hardware model, operating system version, unique device identifiers (IDFV / Android Advertising ID), push notification tokens, IP address, cellular carrier, and crash telemetry diagnostics.

C. Payment & Transactional Data

Payment processing is securely facilitated through our PCI-DSS Level 1 certified third-party payment partner (Stripe, Inc.). Credit card, debit card, and banking credentials are submitted directly to the payment gateway through end-to-end tokenization and are never stored or transmitted across Car Doctor servers. We maintain transaction audit summaries including authorization timestamps, transaction totals, platform fees, taxes, and the last four digits of the payment method for billing reconciliation and receipts.

2. Purposes and Legal Bases for Data Processing

We process personal information under the following lawful legal bases:

• Performance of Contract: To dispatch service requests, match drivers with mobile mechanics, facilitate real-time quotes, process payments, and provide live customer support.
• Legitimate Interests: To prevent fraud, verify mechanic qualifications, enhance platform security, evaluate app performance, and analyze platform trends.
• Legal Compliance: To satisfy statutory accounting, tax, regulatory reporting, and law enforcement subpoena obligations.
• Consent: Where required by applicable law for precise background location tracking, push notifications, and marketing communications.

3. How We Share and Disclose Information

We share information strictly in connection with facilitating automotive services and fulfilling marketplace functionality:

• Between Drivers and Service Providers: When a booking or quote request is initiated, relevant details (customer name, vehicle specifications, service location coordinates, uploaded issue photos, and in-app communications) are shared with the assigned provider to fulfill the repair.
• Authorized Service Vendors: Cloud infrastructure hosting (AWS/Google Cloud), identity verification providers, payment processors, map & geocoding API providers, and customer support ticketing software operating under strict data processing agreements.
• Legal & Regulatory Authorities: When required by law, valid court subpoena, governmental inquiry, or to protect the vital physical safety and property rights of users and the public.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, or asset sale, customer information may be transferred as a business asset subject to standard confidentiality protections.

No Sale of Personal Data: Car Doctor does not sell, rent, or lease personal information to third-party data brokers or advertisers.

4. Data Security & Storage Architecture

We implement robust administrative, technical, and physical security measures to protect personal data against unauthorized access, destruction, loss, or alteration. These measures include TLS/HTTPS 256-bit encryption for data in transit, AES-256 encrypted storage volumes for uploaded documents and photos, strict role-based least-privilege access controls, and routine infrastructure vulnerability assessments.

5. Data Retention & Account Deletion (Apple & Google Compliance)

We retain personal information only for as long as necessary to fulfill the operational purposes outlined in this Policy, resolve disputes, maintain accurate financial accounting, and comply with statutory retention laws.

In compliance with Apple App Store Guideline 5.1.1(v) and Google Play policies, users may permanently delete their account and associated personal data at any time directly through the Car Doctor mobile application by navigating to Account Settings → Privacy & Security → Delete Account, or by submitting a verified deletion request to Support@cardoctorapp.com or by phone at +1 (817) 323-3207. Upon receiving a verified request, we permanently delete or anonymize personal data within thirty (30) days, except where retention is mandated by applicable tax and legal compliance statutes.

6. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction of residence, you may exercise the following statutory privacy rights:

• Right to Access / Know: Request a copy of the specific categories and pieces of personal data collected about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to lawful retention exceptions.
• Right to Data Portability: Obtain a machine-readable copy of your personal data for transfer to another service provider.
• Right to Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service for exercising your privacy rights.

7. Children’s Online Privacy Protection

The Service is strictly intended for individuals who are at least eighteen (18) years of age. We do not knowingly solicit or collect personal information from children under the age of thirteen (13) (or sixteen (16) where applicable under local regulations). If we discover that a minor has provided personal information, we will immediately delete such data from our databases.

8. International Data Transfers

If you access the Service from outside the United States, please be aware that information we collect may be transferred to, stored, and processed in the United States and other jurisdictions where our servers and central databases are located. By utilizing the Service, you consent to the transfer of information to jurisdictions that may have different data protection laws than your home country.

9. Policy Modifications and Notifications

We reserve the right to revise this Privacy Policy periodically to reflect technological updates, business changes, or legal obligations. Material amendments will be communicated via in-app push notifications, prominent notices upon login, or direct email correspondence prior to the change becoming effective. Your continued use of Car Doctor following notice of modifications constitutes acceptance of the revised Policy.

10. Contact Information & Data Protection Officer

For inquiries, privacy requests, or questions regarding our data practices, please contact Car Doctor Inc. customer support:

• Support Email: Support@cardoctorapp.com
• Telephone Support: +1 (817) 323-3207
• Operating Entity: Car Doctor Inc.