Privacy policy

Data controller

[owner] ([tax ID]), [address]. Contact: [email].

What data we process

• Account: name, email address and password (stored as a hash).
• Your Garage: your vehicles' details, history, notes, and the photos and documents you upload. The VIN is optional.
• Conversations and tool results, including images you attach.
• Reviews you post on spec sheets (shown with your first name) and answers you report for review: when you report one, our team sees that answer and your question.
• Minimal technical data: IP address and security logs, and our own usage events (for example, "conversation started"). We do not use third-party trackers.
• If you take out a paid plan, billing data is processed by Stripe; we do not store your card details.

Purposes and legal basis

• Providing the service (performance of the contract).
• Security, abuse prevention and usage limits (legitimate interest).
• Billing and tax obligations (legal obligation).

Providers with access to data

To generate answers, the text of your queries, the context of the selected vehicle and any attached images are sent to the provider of the artificial-intelligence model used by DATAIAO (Anthropic or OpenAI, depending on the service configuration), which may process them outside the European Economic Area with the safeguards required by law. The hosting provider and, where applicable, Stripe for payments are also involved.

If you use voice dictation in a browser without built-in speech recognition, the audio is sent to a transcription provider and is not kept on our servers. In other browsers, dictation is carried out by the browser itself under its own policy.

ORIONVIN. DATAIAO and ORIONVIN have the same owner and data controller (OrionDataGroup) but operate as separate services: your account on one does not exist on the other and your data from one is not used in the other, except as set out here. If you use the number-plate search when adding a vehicle, the plate is sent to ORIONVIN to obtain the car's details and is not stored in DATAIAO. If your vehicle has a VIN, DATAIAO asks ORIONVIN whether a report exists for that car so the AI can take it into account; ORIONVIN receives no data about you. When you arrive from an ORIONVIN link, we receive the car details contained in that link (make, model, year and similar) to fill in the new-vehicle form.

If you tell us how a diagnosis turned out ("what was it in the end?"), we store that case in our knowledge base, Dataiao Engine, without your name or account: only the make, model, engine, the symptoms you described and the actual fault. It is used to improve diagnoses for cars like yours and does not identify you. You can stop contributing your cases in Settings.

Do not include personal data of third parties or information you do not wish to share in your messages.

Retention

We keep your data for as long as you keep your account. You can delete conversations, vehicles and files at any time, and delete your account from Settings: your Garage, files and conversations are permanently erased. Security logs are kept for a limited period.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email]. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.

Minors

The service is not intended for children under 14.

This English version is provided for convenience; if there is any discrepancy, the Spanish version prevails.