Privacy Policy

Effective Date: January 14, 2026

Welcome to PhotoMeh. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered car damage estimation service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information based on your chosen authentication method:

Email/Password Registration:

• Your email address
• Encrypted password (we never store plain text passwords)
• Unique user identifier (UID)

Google Sign-In:

• Your email address
• Display name
• Profile photo URL
• Unique user identifier (UID)

1.2 User Profile Information

We store additional profile information that you may optionally provide or configure:

• Company name (optional)
• Notification preferences (email and push)
• Newsletter subscription status
• Account deletion requests and status

1.3 Vehicle Damage Images

When you use our service, we collect the vehicle damage photographs you upload. These images are:

• Stored securely in Backblaze B2 cloud storage
• Associated with your user account
• Used solely for generating damage estimates

1.4 Damage Reports

We store the following information about each damage report:

• Image reference and file metadata
• AI-generated damage assessment and cost estimates
• Timestamp of report creation
• Confidence scores for the analysis

1.5 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive payment information on our servers. Stripe may collect and process payment data according to their own privacy policy.

1.6 Automatically Collected Information

We may automatically collect:

• Browser type and version
• Device information
• IP address
• Usage patterns and analytics data

1.7 Location Information

We collect approximate location data to provide localized services:

• IP-based geolocation: We use your IP address to determine your country for currency selection and regional pricing
• Browser geolocation (optional): With your permission, we may collect more precise location to provide local repair shop recommendations in your damage reports

Location data is used to display prices in your local currency, provide region-specific cost estimates, and suggest nearby service providers. We do not track your movements or store precise location history.

2. How We Use Your Information

We use the collected information to:

• Provide AI-powered damage estimation services
• Process your payments and maintain transaction records
• Store and display your damage report history
• Improve our AI models and service quality
• Communicate with you about your account and services
• Ensure security and prevent fraud
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate PhotoMeh:

Each third-party service has its own privacy policy governing how they handle your data.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Account information: Retained until you delete your account
• User profile data: Company name, notification preferences, and settings are retained until account deletion
• Damage reports and images: Retained for 1 year from creation date, then automatically deleted. You may request earlier deletion at any time.
• Payment records: Retained for 7 years as required by applicable tax and accounting laws in the European Union
• Promo code usage: Records of promotional code usage are retained for commission tracking and fraud prevention

4.1 Account Deletion

You may request account deletion at any time through your account settings. When you request deletion:

• A 30-day grace period begins, during which you can cancel the deletion request
• After 30 days, your account and associated data will be permanently deleted
• Payment records may be retained longer as required by law
• You can optionally provide feedback about why you're leaving, which helps us improve our service

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the email address provided below.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our services. When you first visit our website, you will be presented with a cookie consent banner allowing you to manage your preferences.

6.1 Essential Cookies

These cookies are necessary for the website to function and cannot be disabled. They include:

• Authentication session cookies (Firebase)
• Session identifiers for anonymous users
• Cookie consent preferences
• Theme and display preferences

6.2 Analytics Cookies (Google Analytics)

With your consent, we use Google Analytics (GA4) to understand how visitors interact with our website. Google Analytics collects:

• Pages visited and time spent on each page
• How you arrived at our website (referral source)
• Your approximate geographic location (country/city level)
• Browser type, device type, and screen resolution
• Interactions with site features

Privacy protections we implement:

• IP Anonymization: Your IP address is anonymized before being stored by Google Analytics
• Consent-based: Analytics cookies are only activated after you provide consent via our cookie banner
• No cross-site tracking: We do not use Google Analytics for advertising or cross-site tracking purposes

You can withdraw your consent at any time by clearing your browser cookies and refreshing the page, which will display the cookie consent banner again. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

6.3 Local Storage

We use browser local storage to:

• Store your cookie consent preferences
• Maintain session identifiers for anonymous uploads
• Remember your display preferences

Local storage data remains on your device and is not transmitted to our servers unless necessary for the service (e.g., session IDs for claiming anonymous reports).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure cloud storage with access controls
• Regular security assessments
• Limited access to personal data by authorized personnel

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our third-party service providers operate globally. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

PhotoMeh is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" at the top. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: