Last updated: September 2026
We collect: (a) your email address and a hashed password for account authentication; (b) the deal information you enter — vehicle details, financial numbers, notes, and documents you upload for extraction; (c) usage analytics to understand how the Service is used and to improve it. We do not collect government-issued IDs, credit card numbers, or banking details.
Your data is used to: (a) provide deal analysis, scoring, and negotiation guidance; (b) save and display your deals and scenarios; (c) verify your purchase if you bought access through our online store; (d) improve our calculation engine and user experience. We do not sell your data to third parties, and we do not use your data to train external AI models.
Your data is stored on secure cloud infrastructure with encryption in transit (TLS 1.2+) and encryption at rest. Access to your deals is restricted to your account through row-level security — no other user, not even an administrator, can read your deal data. Your password is never stored in plain text; it is hashed using industry-standard one-way hashing.
When you upload a quote or document for extraction, the file is stored privately in encrypted storage. Files are used only to extract the numbers you requested. Files are not shared with other users, are not indexed by search engines, and are not used for any purpose beyond your analysis. You can delete your uploaded documents at any time.
If you purchased access through our online store, we verify your email against our order processor's records to activate your account. We only check whether a paid order exists for your email — we do not access or store your payment method details, billing address, or order contents. The verification is performed once at activation and is not repeated.
Your deal data is retained for as long as your account is active. You may delete individual deals, documents, or your entire account at any time. When you delete data, it is removed from our active systems immediately and from backup systems within 30 days. Account deletion is permanent and cannot be undone.
You have the right to: (a) access your data at any time within the app; (b) export your deal data as PDF or CSV; (c) delete individual deals, documents, or your entire account; (d) request a copy of your data by contacting support. You do not need to provide a reason to delete your data.
The Service uses essential cookies for authentication and session management. We may use privacy-respecting analytics to understand feature usage and improve the product. We do not use advertising trackers, cross-site tracking pixels, or third-party advertising cookies.
We use the following third-party services: (a) cloud infrastructure for data storage and compute; (b) our e-commerce platform for purchase verification; (c) email delivery for password resets and notifications. Each service has its own privacy policy, and we share only the minimum data necessary to perform the function.
The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it immediately.
We may update this Privacy Policy from time to time. We will notify users of material changes within the app. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy questions, data access requests, or account deletion, send us a message at car-deal-xray.ca/pages/contact. We respond to all privacy-related requests within 30 days.