Privacy Policy

Vectivra ("we", "us") operates the Vectivra iOS app and the vectivra.com web services (the "Service"). This page explains what information the Service collects, how it is used, and the choices you have. By creating an account or using the Service, you agree to the practices described below.

Information we collect

• Account data: name, email address, phone number, and a password hash you create at signup. We verify the email with a one-time code and validate the phone number against carrier records (carrier name, line type, listed caller name when available) to deter fraudulent signups.
• Estimate data: photos of vehicle damage you upload, the vehicle VIN or make/model/year you provide, any insurance estimate PDF you choose to upload, and the AI-generated repair estimate plus market value lookup tied to that submission.
• Device + diagnostic data: an Apple Push Notification token (so we can tell you when an estimate is ready), iOS version, and basic request logs (IP address, user agent, timestamps).
• Communications: any message you send to support, sales, or feedback channels, including the email address you reply from.

How we use it

• Authenticate you and protect the account.
• Generate damage estimates and look up vehicle market value.
• Deliver push notifications you have opted into.
• Investigate abuse, security incidents, and bugs.
• Improve the AI estimating models and the product experience.

Who we share it with

• Service providers we depend on: Cloudflare (hosting, R2 photo storage, DNS), SendGrid (transactional email and OTP delivery), Twilio (phone number lookup), OpenAI and Google Gemini (AI inference on uploaded photos and vehicle data), VinAudit (vehicle market value), and Apple Push Notification service. Each provider receives only the data needed to perform its function.
• Legal requirements: if compelled by a valid legal process, or to protect rights, safety, and property.
• Business transfers: in the event of a merger, acquisition, or asset sale, account data may transfer to the successor entity under the terms of this policy.

We do not sell personal information, and we do not share account data with third-party advertisers.

Data retention

Account and estimate data is retained while the account is active. You can request deletion at any time by emailing support@collisionvision.app and we will permanently delete your account, uploaded photos, and associated estimates within 30 days, subject to legal hold requirements. Aggregated, de-identified data may be retained to improve the models.

Security

Passwords are stored as scrypt hashes with per-user salts. Sessions ride over HTTPS with HttpOnly, Secure, SameSite=Lax cookies. Verification codes are stored as SHA-256 hashes with short expiry and attempt limits. Photos and PDFs live in Cloudflare R2 behind signed access. We do not store cleartext passwords or verification codes.

Children

The Service is intended for users 17 and older and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, email support@collisionvision.app and we will delete it.

Your choices

• Decline or revoke push notification permission in iOS settings.
• Request a copy or deletion of your data at any time.
• Stop using the Service and delete the app.

International users

The Service is operated from the United States. If you use it from another country, you understand your data is processed in the United States, and you consent to that transfer.

Changes to this policy

We may update this policy. Material changes will be reflected by updating the date at the top of this page. Continued use of the Service after changes means you accept the revised policy.

Contact

Privacy questions, deletion requests, and complaints: support@collisionvision.app.