Privacy notice

What we collect

• Photographs you upload — the photo of your car and the reference photo of the car you like, plus the preview images generated from them.
• What you tell us about your car — the make, model, year or version you confirm or correct, your answers to fitment questions, and your edits to the suggested modification list.
• Your builds — the parts plans produced for you and the selections you make within them.
• Account information — if you sign in, an identifier from our authentication provider. ModMatch does not store passwords.
• Purchase records — a reference to the payment held by our payment provider, and your build-credit balance. We never receive or store your card details.
• Technical and anti-abuse data — request and error records, and irreversible keyed digests used to count usage and limit automated abuse rather than the raw network address in those counters.
• Optional analytics — only if you consent. Analytics are off until you choose, and you can change your choice from any page.

Please think about what is in the photo

A photo of a car often also contains a number plate, a house, a street or other people.

Uploaded JPEG, PNG and WebP images may keep the metadata your camera or phone attached, which can include location. ModMatch does not strip that metadata from every image, so please avoid uploading photos whose surroundings or metadata you would not want stored.

Why we use it

• To interpret your photographs and suggest modifications.
• To filter and rank parts for the car you confirmed, and to build your parts plan.
• To generate your preview image and to show your own work back to you.
• To take payment for an additional build and to credit it to your account.
• To keep the service available and to limit automated abuse and runaway cost.
• To understand how the product is used — only with your consent.

Who else processes your data

We use these providers to run ModMatch:

• OpenAI — receives your car photo and your reference photo to interpret them, and your car photo to generate a preview. We ask OpenAI not to retain this content for its own purposes.
• Paddle — takes the payment and collects the card and billing details needed for it. Paddle has its own privacy notice, shown at checkout.
• Auth0 (Okta) — handles signing in.
• Cloudflare Turnstile — checks that preview requests from visitors without an account are not automated.
• Render — hosts the application and the database, in its Frankfurt region.
• Object storage — holds uploaded and generated images in a private bucket, not a public one.
• PostHog — product analytics, only if you consent. Photo and media areas are excluded from session recording and typed values are masked.

Some of these providers operate outside the UK and EEA, so your data may be processed outside those areas.

How your data is kept separate

• Uploads are stored privately and served only to the account that owns them. Knowing or guessing an image address is not enough to open it.
• Your guest trial credential is encrypted in a cookie that scripts on the page cannot read, and it stops working once attached to an account.
• Secrets stay on the server, and we scrub credential-like values out of our logs.

Deleting things

• You can delete an uploaded photo from the journey. Replacing your car photo also removes the one it replaced.
• Generated preview images cannot be deleted from that control, because a build refers to them.
• Deleting a photo does not delete the build or the parts plan that was produced from it.

We do not yet publish a retention period, and we do not yet have a complete self-service account-erasure process covering backups and every provider listed above. If you want your data removed, contact us and we will tell you what we can remove.

Your rights

Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict how it is used, and to withdraw consent to analytics at any time. You can withdraw analytics consent yourself from any page. For anything else, contact us.

Privacy requests and questions

Email ayushproton25@gmail.com. Please include the date of any payment you are asking about. Never send card details by email.