Privacy Policy

Last updated: 11 May 2026

1. Who we are

Velocito.ai is a vehicle diagnostic assistance service. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data we collect

We collect the following information:

  • Account data: email address, garage name (if provided), phone number (if provided)
  • Usage data: number of diagnoses run, dates of usage, last active date
  • Diagnostic data: vehicle registration numbers, fault codes, symptoms, and vehicle details submitted for diagnosis
  • Technical data: authentication cookies required to keep you signed in

3. How we use your data

We use your data to:

  • Provide the diagnostic service and generate reports
  • Manage your account and enforce usage limits
  • Send you verification codes for sign-in
  • Monitor and improve the quality of our service
  • Contact you about your account or service updates

4. Legal basis for processing

We process your data on the following legal bases:

  • Contract: processing necessary to provide the service you signed up for
  • Legitimate interest: improving our service, preventing misuse, and ensuring security
  • Consent: where we send you marketing communications (you can opt out at any time)

5. Data sharing

We do not sell your personal data. We share data only with the following third-party services that are necessary to operate Velocito.ai:

  • Authentication provider: to manage sign-in and account security
  • Hosting provider: to run the application
  • AI processing: vehicle and fault data is sent to an AI provider to generate diagnostic reports. No personal data (name, email) is included in these requests — only vehicle and fault information.

6. Vehicle data

Vehicle registration numbers are used solely to look up vehicle details (make, model, year, MOT history) from official government APIs. We do not store vehicle keeper or owner information. Registration numbers are stored only in your diagnosis history for your reference.

7. Cookies

We use essential cookies only. These are required for authentication (keeping you signed in) and are not used for tracking, advertising, or analytics. By using the service, you consent to the use of these essential cookies.

8. Data retention

We retain your account data for as long as your account is active. Diagnostic usage logs are retained for billing and service improvement purposes. If you request account deletion, we will remove your personal data within 30 days.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request a copy of your data in a portable format
  • Lodge a complaint with the Information Commissioner's Office (ICO)

10. Data security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure server-side storage of credentials, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

11. Contact

For privacy-related enquiries or to exercise your rights, contact us at velocito.ai@gmail.com.