Privacy Policy

1. Information we collect

1.1 Information you provide

• Email address — collected when you run a scan or create an account. Used to deliver your report and send transactional emails.
• Vehicle information — year, make, model, trim, mileage, and optionally VIN. Used to generate your report.
• Asking price — for buyer's reports only. Used in AI analysis and negotiation strategy.
• Service history — optional oil change and brake service mileage. Used to improve report accuracy.
• Payment information — processed by Stripe. We never store your card number or payment credentials.

1.2 Information collected automatically

• IP address — collected for rate limiting and abuse prevention. Retained for up to 30 days, then purged.
• Scan metadata — vehicle make/model/year combinations and scan timestamps, stored to prevent duplicate scans and support caching.

1.3 Information we do not collect

We do not collect your name, phone number, address, date of birth, government ID, social insurance number, or any sensitive personal information beyond what is listed above.

2. How we use your information

We do not sell your personal information. We do not use your data for advertising or share it with third parties for their marketing purposes.

3. Email communications and CASL

By submitting your email address to run a scan, you provide implied consent under CASL to receive transactional emails related to that scan — including your report, account confirmation, and service notifications.

We do not send commercial promotional emails without your express consent. If you subscribe to the Owner Plan, you may receive product update emails. You can unsubscribe at any time using the link in any email we send, or by contacting us at info@puschermedia.com.

4. Data storage and security

Your data is stored on Supabase infrastructure located in Canada (ca-central-1 region). Your data does not leave Canada for storage purposes.

We use the following security measures:

• Row-level security (RLS) on all database tables — you can only access your own data
• Encrypted connections (TLS) for all data in transit
• Service role keys stored as server-side secrets, never exposed client-side
• Session timeouts after 1 hour of inactivity
• API rate limiting and disposable email blocking to prevent abuse

No security system is perfect. In the event of a data breach that poses significant risk of harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

5. Third-party services

Each third party operates under its own privacy policy. We only share the minimum data necessary for each service to function.

6. Data retention

• Vehicle reports — retained indefinitely while your account is active. If you delete your account, reports are anonymised (personal identifiers removed) but the vehicle data is retained for aggregate analysis.
• IP addresses — retained for up to 30 days for rate limiting purposes, then automatically purged.
• Account data — retained until you request deletion.
• Payment records — retained as required by Stripe and applicable tax law (typically 7 years).

7. Your rights under PIPEDA

As a Canadian resident, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate information be corrected
• Deletion — request that your personal information be deleted (subject to legal retention requirements)
• Withdrawal of consent — withdraw consent for non-essential processing at any time
• Complaint — file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, contact us at info@puschermedia.com. We will respond within 30 days.

You can delete your account and associated data at any time from your dashboard under Settings → Danger zone.

8. Cookies and tracking

AutoSeer does not use advertising cookies or third-party tracking. We use only essential session cookies required for authentication and security. No analytics cookies are placed without your knowledge.

We do not display ads. AutoSeer is funded entirely by subscriptions and one-time report purchases.

9. Children's privacy

AutoSeer is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform. The updated policy will take effect 30 days after notice is provided, unless a shorter period is required by law.

Continued use of AutoSeer after the effective date constitutes acceptance of the updated policy.