Privacy Policy

Last updated: November 12, 2026

Autropy (the "Service") provides AI-assisted automotive diagnostics. The Service is operated by the individual owner of Syntropex, a sole proprietorship based in Tennessee, USA ("we", "our", "us"). This policy explains what we collect, why, and how it's handled.

1. Information we collect

Account information. Email address and password hash when you register. If you sign in with Google, we receive your name, email address, and profile identifier from Google — nothing more.
Vehicle & diagnostic data. Vehicle profiles you create (make, model, year, VIN if provided), trouble codes, symptoms, and media (images/audio) you submit for analysis.
Usage & technical data. Diagnostic request counts, approximate timestamps, and basic device/browser metadata needed to operate and secure the Service.
Billing data. Processed by Stripe; we store only your subscription status and plan tier — never full card numbers.

2. How we use it

To provide diagnostics, estimates audits, and related AI features.
To enforce usage quotas, prevent abuse, and keep accounts secure.
To process subscriptions and send essential service emails (verification, receipts, security notices).

3. AI processing

Your prompts, vehicle context, and submitted media are sent to our AI provider (Google Gemini) solely to generate the diagnostic responses you request. We do not use your submissions to train models, and we do not sell personal data.

4. Data sharing

We share data only with the subprocessors required to run the Service: Supabase (database & authentication), Google Cloud (AI inference), Stripe (payments), and Vercel (hosting). Each is bound by its own privacy obligations. We may disclose data if required by law. When you open a retailer link from the parts marketplace, that retailer receives the visit and may use affiliate tracking; we may earn a commission on purchases. See our Terms of Service.

5. Data retention & deletion

Account and vehicle data are kept while your account is active. You may delete individual vehicles or your entire account from the app's settings; deletion is applied to our live database promptly, with residual backups expiring on normal rotation (up to 30 days).

6. Security

Traffic is encrypted in transit (TLS), passwords are hashed by our auth provider, and AI provider keys are held server-side only.

7. Your choices

You may access, correct, or export your data by contacting us, or delete your account in-app. Email-verified accounts receive the full free tier; unverified accounts have limited access.

8. Changes

If we materially change this policy, we'll notify you via the email on your account.

9. Contact

Questions or requests: [email protected]