Privacy Policy

1. Purpose & Legal Basis of Processing

We process data strictly required to deliver and operate our automated B2B SaaS photo enhancement platform for automotive dealerships. This includes:

• Business account information: dealership name, corporate email address, and operational contact details for login authentication, verification codes, and service notifications.
• Vehicle imagery: source photographs of vehicle inventory submitted for processing to studio standards.
• Registration identifiers: strictly utilized for correct vehicle naming, sorting, and archival of enhanced media bundles.

2. Role as Data Processor (GDPR Compliance)

In respect of vehicle photographs and registration plates, AutoTopShot acts as a data processor pursuant to the General Data Protection Regulation (GDPR) on behalf of the automotive dealership (the data controller). AutoTopShot processes this imagery exclusively in accordance with Customer instructions and for the fulfillment of the service.

3. Rigorous Retention Schedules

We enforce strict retention schedules to safeguard data privacy and infrastructure hygiene:

• Original source media: retained for exactly 7 days post-delivery as a technical buffer for potential reprocessing, after which all source files are permanently erased.
• Comparison sheet: if the zip contains a comparison sheet, the crop of the original photo on it is retained for 30 days, as long as the zip itself, so the dealership can compare Plus and Ultra.
• Completed photo packages (ZIP downloads): available for download in the overview for 30 calendar days.
• Unstarted processing tasks: car batches never initiated are automatically purged after 24 hours.
• Archival records: inactive historical processing status records expire and are deleted after 90 days.
• Visit count: the daily count of page visits per campaign is automatically deleted after 400 days.

4. Zero Third-Party Advertising & Tracking

Your commercial data and automotive photographs are never sold, rented, or shared with third parties for commercial, marketing, or advertising purposes. This service uses no Google Analytics, no tracking pixels and no analytics or advertising cookies; nothing from Google or any other ad network is loaded, so there is no cookie banner either. If a visitor arrives through a link with campaign codes (utm_source, utm_campaign, utm_content and utm_term, plus a country code, for example from our mailing or an ad), those codes are sent along with the trial request and stored on our own server with the request and the account, so we know which campaign led to a sign-up. We do not store these codes in the browser. In addition, our own server records per day how often a page was requested and through which campaign (source, campaign, ad and country), without IP address, cookie, script or time of day, and not per visitor; signed-in users are not counted. The cookies and browser storage the service does use are functional: signing in, the chosen language, appearance and style, and, for a short time after a sign-in code or a sign-in link from our email, the pre-filled email address. Image processing runs exclusively on our own dedicated server infrastructure within the European Union.

5. Security & European Dedicated VPS Processing

Platform access is authenticated via temporary cryptographic single-use PIN codes dispatched directly to verified commercial email addresses. All media uploads are encrypted in transit via HTTPS. Image enhancements execute on dedicated VPS nodes with zero third-party cloud leakage and zero generative AI manipulation of automotive pixels.

6. Data Subject Rights & Inquiries

For inquiries concerning this privacy policy, data access requests, or complete account removal, contact our dedicated support desk directly at support@autotopshot.com.