Privacy Policy

CarDrishti ("we", "our", or "us") operates the website cardrishti.nl (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Dutch implementation act (*Algemene Verordening Gegevensbescherming* - AVG).

1. Information We Collect

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

• Account Details: Email address, name, and login credentials managed securely through our authentication provider.
• Vehicle Specifications & RDW Data: License plates entered by you. We retrieve technical vehicle specifications (such as fuel type, empty weight, and APK expiration dates) from the open registry of the Dutch Vehicle Authority (*Rijksdienst voor het Wegverkeer* - RDW). RDW data is publicly accessible data in the Netherlands.
• Uploaded Maintenance Invoices: Invoice files, photos, or PDFs uploaded by you to parse costs and maintenance details. These invoices may contain your name, address, license plate, mechanic details, and costs. **We strongly recommend blurring or removing any sensitive personal addresses on the invoice before uploading.**
• Usage Data: Cookies, IP address, browser type, pages visited, and timestamps of your requests.

2. How We Use Your Information

We use the collected data for various purposes:

• To provide and maintain our Service, including running AI models to analyze invoices and estimate maintenance cost fairness.
• To notify you about changes to our Service or upcoming vehicle APK inspection deadlines.
• To compile anonymous, aggregated statistics regarding local car maintenance rates in the Netherlands.
• To provide customer support and detect, prevent, and address technical issues.

3. AI Processing & Third-Party Services

Our Service uses advanced Artificial Intelligence (AI) and Optical Character Recognition (OCR) APIs to parse text from uploaded invoices.

When you upload an invoice, the text is extracted and processed using external LLM APIs (such as OpenAI or Anthropic). We structure our APIs to ensure that user data transmitted to these processors is not utilized to train public, foundation models. However, we suggest users omit personal physical addresses from uploaded documents for privacy protection.

4. Your GDPR/AVG Rights

If you are a resident of the European Economic Area (EEA), you have specific data protection rights under the GDPR/AVG. You have the right to:

• Access: Request copies of your personal data.
• Rectification: Request correction of any information you believe is inaccurate.
• Erasure (Right to be Forgotten): Request that we erase your personal data and delete your account.
• Restrict Processing: Request that we restrict the processing of your personal data.
• Data Portability: Request that we transfer the data we have collected to another organization or directly to you.

If you wish to exercise any of these rights, please email us at admin@cardrishti.nl. We will respond within one month as mandated by law.

5. Data Retention & Security

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Secure database storage is maintained to protect your credentials, license plates, and uploaded reports. We implement industry-standard encryption protocols to protect your data during transfer and at rest.

6. Cookies Policy

We use cookies to maintain your login session. These are strictly necessary functional cookies required for the Service to work. We do not use third-party tracking or advertising cookies.

7. Contact Information

For any questions, concerns, or requests regarding your personal data and this Privacy Policy, please contact us at: admin@cardrishti.nl.