Carmy AI – Privacy Policy
Last Updated: Jul 22, 2026
1. Introduction
This Privacy Policy explains how Carmy AB ("Carmy", "we", "our", or "us") collects, uses, stores, shares, and protects your personal information when you use the Carmy platform, website, mobile applications, and related services (the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
3. Information We Collect
Account Information
- Email address
Vehicle Information
- Vehicle registration numbers
- VIN (Vehicle Identification Number)
- Vehicle make and model
- Vehicle-related information you provide
User Content
You may upload or submit:
- Chat messages
- Vehicle photos
- Warning light photos
- Screenshots
- Repair invoices
- Inspection reports
- Vehicle-related documents
- Other files submitted through the Service
Technical Information
We may collect:
- IP address
- Browser information
- Device information
- Operating system information
- Approximate geographic location
- City and country information
- Usage and activity information
Payment Information
- Payments are processed through Stripe.
- Carmy does not store complete payment card information.
4. Authentication and Session Management
To provide secure access to the Service, Carmy uses authentication technologies that may include cookies, tokens, and similar storage mechanisms.
When you sign in:
- A short-lived access token may be issued to authenticate requests.
- A longer-lived refresh token may be used to maintain your session.
- Refresh tokens may be rotated periodically as a security measure.
Authentication credentials are used solely to operate and secure the Service.
These technologies are necessary for the operation of Carmy and cannot be disabled without affecting functionality.
5. How We Use Information
We use personal information to:
- Provide and operate the Service
- Identify vehicles and vehicle configurations
- Generate AI-powered responses
- Process payments
- Provide customer support
- Maintain account functionality
- Monitor system performance
- Detect abuse, fraud, and security threats
- Improve reliability and security
- Send service-related communications
- Send marketing communications where permitted
6. Marketing Communications
We may send:
- Product updates
- Feature announcements
- Promotional offers
- Newsletters
- Service-related notifications
You may unsubscribe from marketing emails at any time using the unsubscribe link included in those emails or by contacting us.
Service-related communications may still be sent when necessary to operate your account.
7. Administrative Access
Authorized Carmy personnel may access user accounts, chat history, uploaded content, and related information when reasonably necessary to:
- Provide customer support
- Investigate technical issues
- Maintain platform security
- Prevent abuse or fraud
- Comply with legal obligations
- Protect the integrity of the Service
9. Third-Party Automotive Data Sources
Carmy may rely on vehicle and automotive information provided by third-party data providers.
Information supplied by such providers may be incomplete, delayed, inaccurate, or subject to change.
10. Analytics
We use analytics technologies, including PostHog and similar tools, to understand how users interact with the Service.
Analytics information may include:
- Device information
- Browser information
- IP address
- Approximate geographic location
- Session activity
- Feature usage
- Pages visited
- Performance information
Analytics information helps us improve the Service, identify technical issues, and understand product usage.
11. International Data Transfers
Carmy serves users internationally.
Your information may be processed or stored in countries outside your country of residence.
By using the Service, you acknowledge that such transfers may occur where permitted by applicable law.
12. Data Retention
We retain:
- Account information
- Vehicle information
- Chat history
- Uploaded files and documents
for as long as your account remains active or as necessary to provide the Service.
We may retain certain information where required by law, for security purposes, dispute resolution, or legitimate business needs.
13. Account Deletion and Data Requests
Users may request:
- Access to their personal information
- Correction of personal information
- Deletion of personal information
- Restriction of processing
- Data portability where applicable
Requests may be submitted to:
Until self-service deletion becomes available, requests will be handled manually.
14. GDPR Rights
Where GDPR applies, users may have rights to:
- Access personal data
- Rectify personal data
- Erase personal data
- Restrict processing
- Object to processing
- Request portability of personal data
To exercise these rights, contact:
15. Security
We implement reasonable technical, organizational, and administrative safeguards designed to protect personal information.
However, no method of transmission, storage, or electronic security is completely secure, and we cannot guarantee absolute security.
16. Children's Privacy
Carmy is not specifically directed at children.
If a parent or guardian believes a child has provided personal information inappropriately, they may contact us and request review or removal.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Updated versions will be posted on the Service with a revised "Last Updated" date.
Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.