1. What this covers
This Privacy Policy explains what data customcarmods.ai collects when you use the website and the Generator app, how we store and process it, and who else sees it. By using the service you accept this policy.
2. Data you give us
Account data — your email address, a hashed password, and an optional display name.
Vehicle photos — every image you upload as a Vehicle. We pass each photo to a third-party AI provider for make/model detection, and to a third-party AI image-generation provider when you submit a Recipe to produce your renders.
Generations — the renders the AI returns. Stored against your Project.
Billing data — our payment processor holds your card details directly. We only see the metadata it returns (Pack SKU, amount, event ID).
3. Where it lives
Application database — on our servers in the European Union (Germany). Encrypted at rest.
Vehicle photos and Generations — held with a third-party cloud object-storage provider and served through our CDN.
Email delivery — a third-party email provider, for verification, password reset, and payment receipts.
4. Third parties
We share the data needed to run the service with a small set of third-party processors, by category: a payment processor, AI providers for vehicle detection and image generation, cloud hosting and object storage, an email provider, and a privacy-first analytics provider. Each is bound by its own terms and processes your data only on our behalf; we do not sell your data to anyone.
5. International transfers
Some of the third-party processors above operate outside the European Economic Area (for example, in the United States). Where your personal data is transferred outside the EEA, we rely on an appropriate safeguard under the GDPR — Standard Contractual Clauses, an adequacy decision, or the EU–U.S. Data Privacy Framework — so it keeps an equivalent level of protection. You can ask us for details of the safeguard that applies to a specific transfer.
6. License plates, faces, and bystanders
Your photos may contain license plates, faces, or people in the background. We do not automatically blur them. If you share a render publicly, your sensitive details may end up in the output. Blur them in the source image before uploading if that matters to you. An automatic blur option is on the roadmap.
7. Retention
Vehicle photos and Generations stay until you delete the Project or your account. Credit ledger entries are kept for the period our tax and accounting obligations require. Server access logs are kept for 30 days.
8. Your rights
You can export, correct, or delete your data at any time from your account settings. Choosing “Delete account” soft-deletes immediately and hard-deletes within 30 days. Email us if you can’t access the account.
9. Children
The service is not intended for users under 16.
10. Changes
We’ll update this policy as the product evolves. Material changes will be announced by email at least 14 days before they take effect.
11. Contact
Reach the data controller at [email protected].