Privacy Notice

Last updated: May 6, 2026

This Notice describes how Jeremy Vikman ("we") collects and uses personal data when you use EzFix. We are the data controller.

Data we collect

• Account data — email, username, hashed password, OAuth identifiers (Google).
• Usage data — diagnostic queries, vehicle info you enter, timestamps, credit balance & transactions.
• Technical data — IP address, device, browser, log events.
• Support messages — anything you send us.

Purposes & legal basis

• Provide the Service & fulfil your contract — contract performance.
• Security, abuse prevention, fraud detection — legitimate interests.
• Improve the product — legitimate interests.
• Customer support — contract / legitimate interests.
• Legal compliance — legal obligation.

Sharing

• Subprocessors: Supabase (database/auth), Lovable (hosting), Google (AI inference & OAuth).
• Merchant of Record: Paddle, who processes payments, handles tax compliance, subscription management, and invoicing on our behalf.
• Authorities where required by law.

International transfers

Data may be processed outside the UK/EEA. Where applicable, we rely on Standard Contractual Clauses or adequacy decisions.

Retention

We retain account & transactional data while your account is active and up to 7 years thereafter to comply with tax/accounting law. Diagnostic queries are retained up to 24 months. We delete or anonymise data when no longer needed.

Your rights

You may request access, rectification, erasure, restriction, portability, objection, or to withdraw consent. EU/UK users may complain to a supervisory authority. We respond within 1 month. Email Jeremywikman@gmail.com.

Security

We use encryption in transit and at rest, role-based access controls, and least-privilege keys.

Cookies

We use essential cookies for authentication and session. We do not use marketing cookies.

Contact

Jeremy Vikman — Jeremywikman@gmail.com