Repair AI Privacy Policy

Last updated: October 22, 2026

This Policy is issued by CDATA AUTO INTELLIGENCE PTE. LTD., incorporated in Singapore and operating under the brand Repair AI (“we”, “us” or the “Company”). We determine the purposes and means of the personal information processing described here. This Policy explains how we collect, access, store, use and share information when you visit https://repairai.ai, https://www.cdata-auto.com or linked websites, use the Repair AI App or other applications linking here, or interact with us through marketing, events or other communications. Questions and privacy requests may be sent to contact@cdata-auto.com.

1. Information we collect

Information you provide

We collect information you voluntarily provide when registering, expressing interest in products, taking part in activities, contacting us or using forms. Depending on the interaction, it may include your name, company, business email, role, contact details and other submitted information. Please ensure it is accurate, complete and current and tell us of relevant changes.

We do not require unrelated sensitive information in ordinary diagnostic queries or refund emails. Do not upload full card numbers, CVV/CVC codes, verification codes, passwords, unrelated identity documents or unauthorised third-party personal information. If voluntarily supplied materials contain personal information, we handle it only as necessary under this Policy and law, obtaining additional consent or applying safeguards where required.

App data may include device identifiers, model and manufacturer, operating system and version, configuration, App identifiers, browser, hardware and internet or mobile provider details. Where relevant, access depends on permissions you choose to grant. We may request permission for account or feature-related push notifications; you can turn them off in device settings. This data supports operation, security, troubleshooting, internal analysis and reporting.

Payments, subscriptions and refunds

Depending on the actual channel and what is necessary, purchases, renewals, cancellations, refunds and disputes may involve your Repair AI account identifier and email; order or transaction number; product or plan; amount and currency; payment and refund dates and status; channel; subscription term and cancellation status; and necessary explanations or redacted transaction evidence. Channels may provide confirmations, refunds or dispute outcomes so that we can activate, correct or revoke benefits.

We may check entitlement activation, access times, paid-feature usage and allowance consumption for the relevant order to assess a refund and prevent duplicate claims. Query or fault content is reviewed only when necessary to investigate a specific service defect; a refund request does not permit unrestricted inspection of all your history. Redact unrelated transactions and sensitive fields before submitting evidence.

The provider operating the payment page or function processes the card, account and verification details it requests under its rules. We use necessary transaction results and billing information, and do not ask for full payment credentials or security codes by support email. If further identity or receiving-account information is genuinely required for a refund or compliance check, we explain the reason, recipient and necessary scope and use an appropriate collection method.

This Policy describes data processing, not a separate refund guarantee. Purchase, renewal, cancellation and refund conditions are in section 5 and section 6 of the User Agreement.

Automatically collected information

When you visit or use the Services, we may automatically receive IP address, browser and device characteristics, operating system, language, referring URL, device name, country or region and other technical information. It may not reveal your name or contact details directly, but can still be personal information. It supports security, operation, analysis and reporting. Cookies and similar technologies may also be used.

Logs and usage records may include IP address, browser, viewed pages, dates and times, time spent, activity reports, crash dumps and hardware settings. Device data may include computer, phone or tablet identifiers, hardware, operating system, configuration and network-provider details.

2. How we use information

We process information to deliver, improve and administer the Services, communicate, protect security, prevent fraud and meet legal duties. Other purposes requiring consent are pursued only with prior express consent. Uses include account creation, authentication and management; protecting vital interests, such as preventing harm; confirming payments, restoring benefits, managing subscriptions and cancellations, sending necessary order and renewal notices, reconciling accounts and handling refunds; investigating duplicate charges, non-delivery, unauthorised transactions and defects; preventing duplicate claims and fraud; necessary evidence exchanges with channels; and tax, accounting and other legal compliance. Order, refund and security communications do not constitute consent to marketing or AI training.

3. Legal grounds for processing

We process information only where necessary and supported by a valid basis under applicable law, such as consent, legal obligations, entering into or performing a contract, protecting rights or legitimate business interests.

EEA and UK

Under the GDPR and UK GDPR, our grounds may include: consent for specified purposes; legal obligations concerning tax, accounting, regulators or courts; contractual necessity for orders, benefits, subscriptions, cancellation, refunds and requested services; legitimate interests in security, fraud prevention, dispute assessment and legal claims, where lawful and not overridden by your rights and interests; and vital interests where necessary to protect someone, including serious safety threats. We assess necessity and impact and respect applicable rights to object.

Canada

Processing may rely on express consent or, where legally appropriate, implied consent. You may withdraw consent. Law may permit processing without consent in specific circumstances, including an individual's clear interests when timely consent cannot be obtained; investigations and fraud prevention; qualifying business transactions; witness statements needed for insurance claims; identifying injured, ill or deceased people and contacting relatives; suspected financial abuse; investigations of contractual or legal breaches where seeking consent would compromise information; subpoenas, court orders and production rules; information created in employment, business or a profession and used consistently with that purpose; journalism, art or literature; or information legally defined as publicly available.

We may share or transfer necessary information during a merger, asset sale, financing, business transfer or related negotiations. Providers, contractors or agents working for us may receive information necessary to perform their tasks, such as cloud hosting (for example AWS), AI providers (for example OpenAI), payment processing and analytics, only where actually used and necessary for the relevant purpose.

Payment channels and disputes

When you actually choose a channel, we may exchange necessary collection, settlement, entitlement, cancellation, refund and dispute information with participating payment service providers, acquirers and banks, or Apple App Store, Google Play, RuStore or another store actually billing the order. Information is limited to relevant account or order identifiers, amounts, currencies, status, requests and evidence necessary for a particular dispute. Handling a transaction does not justify sharing unrelated diagnostic history.

Providers may independently process payment, fraud-prevention or identity information under their own legal duties and policies. Review the provider and policy shown at checkout. We remain responsible for our own processing and disclosures; use of a third party does not remove that responsibility. Contact the provider about its independent processing or ask us for assistance.

International processing

We operate in Singapore and may use cloud, AI, distribution and payment providers elsewhere, so information may be processed outside your location. Transfers are limited to necessary stated purposes. We implement legally required notices, valid consent or other lawful grounds, contracts, safeguards and procedures. This Policy does not replace separately required consent, local storage or cross-border procedures. Contact us to learn about relevant recipient categories and safeguards.

5. Cookies and similar technologies

Cookies, web beacons, pixels and similar technologies may store or collect information and support useful functions. Analytics may examine pages, time spent and usage patterns to improve the Services and reporting. Advertising cookies may support targeted ads based on activity on our Services and other sites. Third-party technologies are also subject to their providers' policies.

Where law requires consent for non-essential analytics, advertising or tracking, we use them only after valid consent and provide required refusal or withdrawal options. Accepting this Policy alone does not replace that choice. You can manage cookies in your browser; disabling necessary cookies may affect functionality.

6. AI features

We offer products, functions and tools using AI, machine learning or similar technology (“AI Products”), including document generation, AI applications, natural-language processing and analysis. Personal information used with these tools is processed under this Policy and the purposes for which it was provided.

AI training and opting out

We may use information, text, diagnostic queries or images you input to train, improve and fine-tune our AI and machine-learning models. Before doing so, we take reasonable steps to de-identify or anonymise personal identifiers. If you do not want your inputs used for our model training, you may opt out at any time by emailing contact@cdata-auto.com.

If you sign up or sign in using a provider such as Google or Apple, we may receive profile information such as name, email, picture and information you choose to make public. We use it only for purposes stated here or clearly explained in the Services. We do not control other information collected by the sign-in provider; consult its policy and privacy settings.

8. Retention

We retain information only as long as needed for the stated purposes, unless law requires or permits longer retention. Orders, payments, cancellations, refunds and dispute records may remain after account deletion for tax, accounting, lawful channel requirements and unresolved claims. We determine retention by record type, legal periods and outstanding matters, without keeping all usage content indefinitely merely because the account was closed.

Account deletion, deletion of personal information and stopping renewal are separate. Cancel with the original channel under section 5.4 of the User Agreement; we assist with directly managed subscriptions. Retaining records does not authorise further charges, and account deletion does not remove lawful refund claims.

When continued processing is no longer legally justified, we delete or anonymise information. If deletion is temporarily impracticable, for example in backups, we securely retain and isolate it from further processing until deletion is possible.

9. Minors

We do not knowingly collect or request information from, or market to, children under 18 or minors under the applicable equivalent local age. If we discover such collection, we delete it as soon as practicable. Report concerns to contact@cdata-auto.com.

10. Your rights

Depending on your location and law, you may have rights to access and obtain a copy, review, correct, update or delete information; restrict or object to processing; and obtain portability. These rights apply in particular in the EEA, UK and Canada subject to local conditions. Send requests to contact@cdata-auto.com. We may verify identity and will respond within applicable legal deadlines.

You may withdraw consent by contacting us where processing relies on it; withdrawal does not affect prior lawful processing. Opt out of marketing using an unsubscribe link or the same email. Necessary account, security, support and other non-marketing communications may continue.

11. Do Not Track and other signals

Some browsers and mobile systems offer Do Not Track (DNT). There is no uniform technical standard for responding to general DNT signals, so we do not ordinarily respond unless law requires it. This does not affect legally required recognition of valid opt-out preference signals or other privacy choices; required mechanisms will be provided.

12. US state rights

Residents of California or other states with applicable comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah and Texas, may have rights to know about collection, use and sharing; access, correction and deletion subject to exceptions; and freedom from discrimination for exercising privacy rights. We do not deny goods or services, change prices or provide lower quality because you exercise those rights.

We do not sell personal information for direct financial gain. Some state laws may define sharing for targeted advertising or AI training more broadly as a sale or sharing. You may opt out where applicable by sending a verifiable request to contact@cdata-auto.com.

13. Updates

We may update this Policy to reflect relevant changes and law, identifying revisions by the last-updated date. Material changes to purposes, recipients or other processing will be notified in advance as required, with fresh valid consent where necessary. Publishing a revised policy does not replace those requirements. Please review the Policy periodically.

14. Contact

Privacy questions and requests to our data protection officer (DPO): contact@cdata-auto.com
CDATA AUTO INTELLIGENCE PTE. LTD.
18 KAKI BUKIT ROAD 3, #05-17, ENTREPRENEUR BUSINESS CENTRE
SINGAPORE 415978
Telephone: +65 8982 6881