Privacy Policy

Carlore operates this service and is responsible for the personal information described in this policy. Contact support@gearmind.live with privacy questions or rights requests.

• Account information: name, email address, authentication identifiers, profile details and records of the legal terms or privacy choices associated with your account.
• Vehicle information: registration, VIN where provided, make, model, year, engine or powertrain, mileage, saved-vehicle details, service notes and official MOT information requested for a vehicle.
• Buyer Check evidence: a registration or optional VIN, official MOT records, enabled market or vehicle-history evidence, and adverts, auction screenshots, documents or other evidence you deliberately submit for analysis.
• AI conversations and results: questions, symptoms, fault codes, follow-ups, repair requests, cost-estimate inputs, generated responses and feedback.
• Photos and files: images or other supported files you choose to submit to General Chat, Photo Diagnosis or evidence-analysis features, together with the description you provide.
• Voice input: when you use the microphone button, your browser or device may convert speech to text. Carlore receives the resulting transcript when it is placed into or submitted through the input. Carlore does not intentionally create a separate stored raw-audio recording through this feature.
• Location information: if you choose to allow browser location access, Carlore can use latitude and longitude to power Fuel Finder, Nearby Garages, Roadside Mode and nearby actions in General Chat. A recent location may be cached in your browser so those tools can work together without repeatedly asking for the same permission.
• Plan and payment records: plan, monthly allowance use, top-up balances, Stripe customer or transaction references and purchase history. Stripe receives card details directly; Carlore does not receive your full card number.
• Technical and analytics information: browser and device information, security events, error information, approximate usage patterns, page interaction information and diagnostics needed to keep the service reliable. Optional analytics are only enabled where the required consent has been given.
• Support and partnership information: messages and contact details you send when asking for support or submitting a business enquiry.

• To create, authenticate and secure your account.
• To provide General Chat and specialist automotive tools using the vehicle and problem context you choose to provide.
• To retrieve, save and interpret official MOT information requested for a registration.
• To run Buyer Check using the registration, optional VIN and evidence needed for the report you request, including enabled third-party vehicle-history, market or salvage services where applicable.
• To use an allowed location for nearby fuel, garage, roadside and directions-related features.
• To process subscriptions, one-off purchases, top-ups, cancellations, refunds where applicable and customer support.
• To remember saved vehicles, the account-wide current vehicle, account-based history, answer-detail preference and usage allowances across the service.
• To prevent fraud, abuse, unexpected automated cost and security incidents and to investigate failures.
• To understand product performance and improve reliability, usability and safety.
• To comply with legal, accounting, tax and dispute-handling obligations.

Depending on the activity, our lawful basis may be performance of a contract, legitimate interests in operating and securing Carlore, compliance with a legal obligation, or consent where the law requires it. Where we rely on consent, you can withdraw it for future processing.

Some Carlore features send the text, selected vehicle context and, where relevant, submitted images needed for your request to an AI model provider so the requested automotive guidance can be generated. AI output may be inaccurate or incomplete and is identified as AI-assisted guidance rather than a confirmed physical diagnosis.

Carlore does not use these automotive AI outputs to make solely automated decisions about you that produce legal or similarly significant effects. Avoid including unrelated sensitive personal information in prompts, photos or uploaded files.

Buyer Check is evidence-led. When you request a check, Carlore may send the minimum necessary vehicle identifier, such as the registration and optional VIN, to official or third-party vehicle-data services that are enabled for that report. Depending on the service, returned evidence may include MOT, listing, market, provenance or salvage-related information.

• A provider is only used when the relevant integration is enabled and needed for the feature you request. An account or API integration being configured does not mean every Buyer Check sends data to every provider.
• Carlore labels evidence according to its source and should not treat a missing or unavailable provider result as proof that a vehicle is clear.
• Provider licence and retention terms may limit how long some raw evidence, images or third-party fields can be cached or displayed. Carlore may retain a normalised report or source status only where permitted and necessary.
• If you upload an advert, auction screenshot or document, Carlore processes that evidence to answer your request. Do not upload information or images you do not have the right to provide.

Location access is optional. The browser controls the permission prompt. If you grant it, Carlore can reuse the granted permission and a recent browser-local location across Fuel Finder, Nearby Garages, Roadside Mode and nearby General Chat actions instead of treating every tool as a separate request.

• A recent location can be stored in your browser for up to seven days as a convenience cache. Carlore rounds the cached coordinates to five decimal places.
• When a nearby feature is used, coordinates may be sent to Carlore server-side functions and relevant data services only as needed to return the requested nearby result. For example, Google Places may receive a search location for an in-app nearby-garage search.
• Carlore does not intentionally create a permanent server-side journey or movement history from the shared nearby-tool location feature.
• You can deny or later withdraw location permission in your browser or device settings. Manual postcode/town entry or external map search remains available where the relevant feature supports it.

The microphone control relies on browser or device speech capabilities. Depending on your browser, operating system and settings, the browser or its speech-service provider may process audio to create a transcript under its own privacy terms. Carlore uses the transcript as text input. You can always type instead and can deny microphone permission.

We share personal information only where needed to provide, secure, measure or administer Carlore. Provider use depends on the feature and current integration state and can include:

• Supabase — database, authentication and storage infrastructure.
• Vercel — application hosting, deployment, Web Analytics, Speed Insights and related service infrastructure.
• Sentry — error monitoring and performance diagnostics used at all times to keep Carlore reliable and secure. This is configured not to collect your name, email, cookies or full request headers, and any session replay masks on-page text and inputs and blocks media.
• Google — services used for Google sign-in, Gemini AI processing, nearby garage search through Places where configured and, where consented, Google Analytics.
• Microsoft Clarity — optional product-usage analytics where you have consented to analytics.
• Stripe — subscription, one-off purchase, top-up and billing processing.
• Email service providers — sending account, transactional and support-related email.
• Official vehicle and fuel-data services — requests necessary to retrieve MOT information or official Fuel Finder information for features you ask Carlore to use.
• Vehicle-history, market and salvage data providers — where a Buyer Check provider is enabled, the vehicle identifier needed to request the selected report fields. Carlore can change or disable providers as integrations, licences, availability or economics change.

When you deliberately open an external YouTube search, Google Maps result, directions link, garage website or public evidence search, that external service receives the normal information your browser sends when visiting it. Carlore does not sell personal information to advertisers.

We may also disclose information where required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a genuine business transfer subject to appropriate protections.

Some providers may process information outside the United Kingdom. Where UK data protection law requires a transfer safeguard, we use the applicable adequacy arrangements or recognised contractual safeguards and related technical or organisational protections supplied by the provider.

Contact support@gearmind.live if you want more information about safeguards used for a particular provider.

We keep personal information only for as long as it is reasonably needed for the purposes described above. Typical periods include:

• Account and saved-vehicle data: while the account remains open, then removed through the account-deletion process unless a limited record must be retained.
• Saved diagnoses and repair results: Carlore may keep a rolling set of recent account-based results rather than unlimited history. Current product limits may automatically remove the oldest saved items as newer ones are added. You can also delete saved results yourself.
• Recent Chat history: Carlore keeps a bounded rolling set of up to 24 recent account-backed Chat conversations so recent history can follow you across devices. The oldest conversation may be removed automatically as newer conversations are saved, and browser storage may also be used as a local cache or temporary fallback. You can delete a Chat yourself.
• Browser location cache: the shared nearby-tool location is designed to expire locally after seven days and can also disappear earlier if you clear site data.
• MOT reports: an owner report may be retained so you can reopen the same saved MOT Intelligence without paying for or requesting the same official history again, subject to account deletion, storage limits and legal exceptions.
• Buyer Check and third-party vehicle evidence: retained only to the extent needed to deliver and reopen the report and only where the relevant provider licence or terms permit. Some raw fields, URLs or images may expire or need to be re-requested.
• Uploaded diagnostic or buyer-evidence images: while needed for the feature and saved record they belong to; temporary or orphaned uploads may be cleaned up earlier.
• Allowance top-up records: kept while needed to fulfil the purchase and afterwards where transaction, fraud, accounting or dispute records are required.
• Billing, tax and accounting records: generally retained for the period required by UK tax and accounting law, which may be around six years.
• Security, operational and email-delivery logs: normally kept for a limited operational period and may be retained longer where an incident, fraud concern or legal claim requires it.
• Backups: removed through normal backup rotation rather than necessarily disappearing immediately from every backup copy at the moment of deletion.

You can request deletion through Account settings. We aim to process valid deletion requests without undue delay. Some transaction, tax, fraud-prevention, security or legal records may need to be retained after the main account data is removed. If you cannot access the account, contact support@gearmind.live.

Depending on the circumstances, UK data protection law may give you rights to be informed, access your personal information, correct it, request erasure, restrict processing, object to certain processing and receive certain data in a portable form. You may withdraw consent where consent is the lawful basis.

Send requests to support@gearmind.live. We may need to verify your identity. You can also complain to the UK Information Commissioner's Office if you believe your information has been handled improperly.

We use authentication, access controls, server-side entitlement checks, usage limits and provider security features designed to protect information and service costs, but no internet service can guarantee absolute security. Keep your login secure and avoid putting faces, identity documents, payment details or unrelated personal information into automotive photos, prompts or files.

Where optional analytics or similar technologies require consent, the relevant preference control is provided separately and can be changed for future use. Browser permissions such as location and microphone can also be changed in your browser or device settings.

We may update this policy when Carlore, our providers or applicable law changes. The latest update date is shown above. Material changes may also be communicated in the service or by email where appropriate.