Privacy Policy

Vehiq is the controller of the personal data described in this policy. You can reach us at any time for privacy-related questions.

• Service: Vehiq — AI platform for car dealerships
• Website: https://vehiq.eu
• Privacy contact: support@vehiq.eu
• Region of operation: European Union

Where this policy refers to “we”, “us” or “Vehiq”, it refers to the operator of the Vehiq platform. Where it refers to “you” or “customer”, it refers to the dealership or professional user of the service.

We only collect data that is needed to deliver and secure the service:

• User accounts: name, email address, password hash, language preference, account status and the plan you subscribe to.
• Business information: dealership name, business address, VAT number and billing contact where you provide it.
• Vehicle information: make, model, year, mileage, price, fuel type, transmission, VIN and any specifications or notes you enter.
• Uploaded images: vehicle photographs you upload for AI enhancement or listing creation, including any technical metadata contained in those files.
• Payment information: subscription tier, billing status, invoices and payment identifiers. Card details are processed exclusively by our payment provider and never stored by Vehiq.
• Email addresses: used for account access, transactional messages, invoices and support correspondence.
• Login information: authentication tokens, sign-in timestamps, IP address, browser and device type, used for security and abuse prevention.

Please do not upload photographs containing identifiable individuals unless you have a lawful basis to do so. Our platform offers licence-plate blurring, but you remain responsible for the content you upload.

• To provide the service (performance of a contract): creating accounts, generating listings, enhancing photos, translating content and storing your listing history.
• To process payments and issue invoices (contract and legal obligation): subscription billing, VAT accounting and statutory record keeping.
• To secure the platform (legitimate interest): fraud prevention, abuse detection, rate limiting and diagnosing technical faults.
• To provide support (contract and legitimate interest): answering your questions and resolving incidents.
• To improve the service (legitimate interest): aggregated, non-identifying usage insights about features and performance.
• To send optional product updates (consent): only where you have explicitly opted in; you can withdraw consent at any time.

Vehiq works with a small number of carefully selected processors. Each of them acts on our documented instructions under a data processing agreement, and transfers outside the European Economic Area are covered by the European Commission’s Standard Contractual Clauses where applicable.

• OpenAI — AI generation of listing descriptions, highlights, translations and marketing copy. Vehicle data and prompts are transmitted for processing; content submitted through the API is not used to train their models.
• Stripe — payment processing, subscription management, invoicing and tax accounting. Stripe acts as an independent controller for payment data and card details.
• Supabase — database, file storage and authentication infrastructure hosted in the European Union.
• Hosting provider — delivery of the web application and its content over a global edge network; server logs may briefly contain IP addresses.
• Analytics — if enabled, privacy-friendly, aggregated usage statistics only. We do not run advertising or cross-site tracking networks.

We never sell personal data, and we never share it with third parties for advertising purposes.

All vehicle data, specifications, uploaded photographs and generated listing content remain the property of the customer. Vehiq stores and processes this content solely to provide the service to you. You may export or delete your content at any time, and we do not use your vehicle data or images to train our own models or to promote other dealerships.

We keep account and content data for as long as your subscription is active. After termination, content is deleted or anonymised within 90 days, except where a longer period is required by law — invoices and tax records are retained for up to seven years under European accounting rules. Security logs are kept for a maximum of 12 months.

Data is transmitted over encrypted connections (TLS) and stored encrypted at rest. Access to production data is restricted to a limited number of authorised people on a need-to-know basis, protected by strong authentication. Database access is additionally restricted by row-level security so that each dealership can only reach its own records.

As a data subject in the European Union you have the following rights:

• Right of access — obtain confirmation of whether we process your data and receive a copy of it.
• Right of rectification — have inaccurate or incomplete personal data corrected.
• Right to erasure — request deletion of your personal data where there is no overriding legal ground to keep it.
• Right to data portability — receive your data in a structured, commonly used, machine-readable format, or have it transmitted to another provider.
• Right to object — object to processing based on our legitimate interests, including any profiling.
• Right to restriction — request that we temporarily limit processing while a request or dispute is assessed.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

You also have the right to lodge a complaint with the supervisory authority in your country of residence.

Vehiq uses AI to generate listing text and to enhance photographs. These outputs are suggestions: they have no legal or similarly significant effect on individuals, and you remain responsible for reviewing and approving all AI-generated content before publishing it.

Send privacy requests to support@vehiq.eu with the subject line “GDPR request”. We respond within 30 days. To protect your data we may ask you to confirm your identity before acting on a request.

We may update this policy to reflect changes to the service or to legal requirements. Material changes will be announced in the application or by email before they take effect.