Privacy Policy

Last Updated: 5/15/2025

Welcome to the Customer Vehicle Inspection application. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Application includes:

• Personal Data: Personally identifiable information, such as your first name, last name, and Motor Vehicle Accident (MVA) number or similar identifier, that you voluntarily give to us when submitting an inspection.
• Inspection Data: Details about vehicle damage, including descriptions, severity, type, location coordinates (x, y percentages), and uploaded images related to specific damages.
• Generated Media: Images generated by the application, such as damage diagrams based on the provided inspection data.
• Derivative Data: Information our servers automatically collect when you access the Application, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Application. This includes request IDs, request duration, status codes, content length, referrer URLs, and user-agent strings, primarily collected for logging and security purposes.
• Session and Security Data: We use session cookies to manage your login state and CSRF tokens stored in cookies to protect against cross-site request forgery attacks.

2. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Application to:

• Create and manage vehicle inspection records.
• Generate damage diagrams based on your input.
• Ensure the security and operational integrity of the application, including rate limiting and protection against malicious requests.
• Monitor and analyze usage and trends to improve your experience with the Application.
• Maintain application logs for debugging, monitoring, and security auditing.
• Respond to your requests and resolve issues.
• Comply with legal obligations and enforce our terms and policies.
• Manage data retention and deletion according to defined policies (e.g., soft delete, permanent delete based on retention periods).

3. How We Share Your Information

We do not sell your personal information. We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including data storage (database providers), logging services (like Grafana Loki), web hosting, and security monitoring. We require our third-party service providers to use your personal information only to provide the services we've requested.
• [Other Potential Sharing?]: For example, sharing with insurance companies, body shops, etc?

4. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. These include:

• Using secure connections.
• Implementing security headers via middleware.
• Protection against common web vulnerabilities.
• Rate limiting to prevent abuse.
• Secure session management practices.
• Input validation for submitted data.
• Regular logging and monitoring for security incidents.
• Controlled access to data stores.
• Defined data retention and deletion procedures.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

5. Data Retention

We will retain your inspection data, including personal details and images, for a default period of [Update this information. 7 to 10 Years?] unless otherwise configured or required by law. After this period, data may be subject to soft deletion or permanent deletion according to our data management policies. Logs may be retained for a different period based on system and security requirements.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal and contractual restrictions.
• Request restriction of processing of your personal data.
• Object to the processing of your personal data.
• Request data portability (to receive your data in a structured, commonly used format).

To exercise these rights, please contact us using the contact information provided below. We may need to verify your identity before processing your request.

Our application includes functionality to export your inspection data and manage deletion.

7. Policy for Children

We do not knowingly solicit information from or market to children under the age of 18. If you become aware of any data we have collected from children under the relevant age, please contact us using the contact information provided below.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Budget Las Vegas Privacy Inquiry

privacy@budgetlasvegas.com

[Mailing address. PO Box?]

[Phone Number?]