Privacy Policy

3. How We Use Your Data

• Vehicle Diagnostics: Provide diagnostic services, read and analyze fault codes, monitor vehicle health, generate repair recommendations, and maintain diagnostic history for trend analysis.
• Communication: Send waitlist updates, product news, service notifications, and marketing communications (with your consent). Every marketing email contains a one-click unsubscribe link.
• Service Delivery: Process payments, manage subscriptions, deliver hardware orders, provide customer support, and maintain your account.
• Site Improvement: Analyze usage patterns to enhance user experience, optimize website and app performance, and develop new features.

We never sell personal data or vehicle diagnostic data to third parties for marketing or advertising purposes. We may use anonymized, aggregated diagnostic data (with all personal identifiers removed) to improve our diagnostic algorithms and services, but this does not identify you or your vehicle.

Vehicle diagnostic data is used exclusively to provide diagnostic services, generate repair recommendations, track vehicle health over time, and improve our diagnostic algorithms. This data is stored securely and is only accessible to you and our support team when you request assistance.

4. Cookies & Similar Technologies

You can change your preferences at any time via the "Cookie Preferences" link in our footer. Most browsers also allow you to manage cookies through their settings.

5. Data Sharing & Processors

We share personal data only when necessary for:

• Service Providers: Third parties who help us operate our website and services (e.g., web hosting, analytics, email marketing)
• Legal Compliance: When required by law or to protect our legal rights
• Business Transfers: If we sell or transfer our business (with the same privacy protections)

Our main data processors include:

• Web hosting and CDN services (Vercel, Cloudflare)
• Analytics providers (Google Analytics, etc.)
• Email marketing and transactional email services (Brevo, etc.)
• Payment processors (Stripe, etc.)
• Customer support providers
• Cloud storage and database services (Supabase, etc.)

Some processors may be located outside the EEA. We ensure all transfers comply with applicable data protection laws.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Vehicle Diagnostic Data: Retained while your account is active to power features like trends, history, and predictive maintenance in your vehicle profile; deleted upon account deletion or within 30 days of request
• Account Data: Retained while your account is active; deleted within 30 days of account deletion request
• Payment & Billing Data: Retained as required by law (typically 7 years for tax/accounting purposes) or until account deletion if not legally required
• Waitlist Data: Until you request deletion or the product launches
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Typically 26 months (Google Analytics default setting) or until you request deletion
• Security Logs: Up to 12 months for detecting and preventing abuse

You can request data deletion at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Get your data in a machine-readable format
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent at any time

California Rights (CCPA/CPRA)

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of personal information
• Right to Opt-Out of Sale: Opt-out of selling personal information (not applicable - we don't sell data)

To exercise these rights, contact us at support@skanyx.com. We will respond within 30 days (or as required by applicable law).

8. Data Security

We implement appropriate technical and organizational security measures:

Technical Measures

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security monitoring and logging
• Penetration testing and vulnerability assessments

Organizational Measures

• Regular staff training on privacy and security
• Data protection policies and procedures
• Data processing agreements with third parties
• Incident response plans

While we strive to protect your data, no method of transmission or storage is 100% secure. We recommend you also take precautions to protect your information.

9. International Transfers

Skanyx operates from the European Union. Some of our service processors may be located outside the European Economic Area (EEA).

For transfers outside the EEA, we ensure appropriate safeguards are in place:

• European Commission adequacy decisions
• Standard contractual clauses
• Certifications and codes of conduct
• Specific assurances as appropriate

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Sending an email to your registered address
• Posting a prominent notice on our website
• Updating the "Last updated" date at the top

Your continued use of our services after such changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, you can contact us:

• Email: support@skanyx.com (for privacy inquiries and data rights requests)
• General Inquiries: team@skanyx.com
• Contact Form: Available on our website

We strive to respond to all inquiries within 30 days.