Privacy Policy

• Account: your email and password, handled by our login provider (Supabase Auth). We never see your password. If you bought before registering, the address you typed at checkout is held as a label on your garage until you set a password on it.
• Your plan: the car you pick (name, brand, a photo link, target price), how much you've saved, your target date, and your contribution settings.
• Savings entries: the amounts you log and any short note you add to them.
• Budget: the monthly income figure you enter, your budget lines and their amounts, any limits you set for a specific month, and the transactions you record (amount, date, category and note).
• Kept notes: the short takeaways you save from the coach or write yourself.
• In-app AI chat: your messages and the AI's replies, so you can see your history.
• Guest chat & car research (before you sign up): tied to a temporary anonymous session in your browser, not to any account.
• Purchases: identifiers from Stripe (checkout and payment IDs), the amount, currency, and status. We never receive or store your card number — Stripe handles card details.
• Anti-abuse: a one-way hashed (HMAC) form of your IP address, used only to rate-limit abuse of the AI. The raw IP address is never stored or logged.

We use a small set of service providers to run the app:

• Supabase (United States) — database and login.
• Cloudflare — hosting, served from its global edge network.
• Stripe — payments. Your card details are entered on Stripe and never reach our servers.
• Anthropic (Claude) — powers the AI answers. For car research, and for coach questions about the outside world (prices, models, rules), it may run a web search: your question is sent to the search tool, along with an approximate location — the country you confirm or change in the funnel, plus a US state only if an older saved draft of yours still carries one. Your savings figures are not part of that search.
• Mixpanel (United States) — product analytics. It receives no email, no savings amounts, and no chat text — only a small set of anonymous events.
• Sentry (European Union) — error monitoring. Reports are stripped down and don't include your personal content.
• Resend — sends account emails such as sign-up confirmation and password reset.
• Wikimedia Commons — the source of representative car photos. Every file, its author and its licence are listed on our photo credits page.

Photo credits: every car photograph and its licence.

Our database and most processing are in the United States; error monitoring is in the European Union; hosting is served from Cloudflare's global edge network.

• Guest chat and car research: access expires 24 hours after it's created, and the data is removed by a scheduled cleanup.
• Account data (your plan, savings, and AI chat history): kept while your account exists, and deleted when you delete your account.
• Purchase records: kept for our records. When you delete your account we keep only a minimal pseudonymous marker (a checkout session ID) needed to handle any later refund.
• Anti-abuse hashes: short-lived — they expire automatically.

From Settings you can:

• Export your data as a JSON file — your account email, goals, savings entries, your budget (income, lines, month limits and transactions), your kept notes, your AI chat, and a safe billing summary (no card data or payment tokens).
• Delete your account and its data permanently. You re-enter your password to confirm, and the deletion can't be undone. A garage bought but not yet claimed has no password, so it has to be claimed first — or ask us and we will delete it for you.

We keep this minimal:

• Necessary: login/session cookies from Supabase (names beginning with sb-), and short-lived secure cookies for guest chat (ar_guest), car research (ar_research), and an email-confirmation marker (ar_auth_confirmed).
• Marketing measurement: if you arrive from an ad, ar_attr records which campaign sent you, for up to 90 days, so we can tell which advertising works. It holds campaign identifiers from the link you arrived on — never your name, address or anything about you.
• Marketing measurement: if you arrive from a Google ad, Google's own advertising cookies (names beginning with _gcl) record that click so the purchase can be matched back to it. They hold Google's click identifier, nothing about you.
• Analytics: where product analytics is enabled, Mixpanel stores an anonymous ID in your browser's local storage — not a cookie. It contains no email or personal data.

We aim to collect as little as possible and to handle it carefully. We don't claim formal certification under any specific regulation. If you have data rights under your local law, or any privacy question, contact us and we'll help.

Privacy questions? Email support@aisance.io.

Refund requests go to the same address — email support@aisance.io and we'll reply. The refund terms themselves are in Terms of Service — Refunds.

Aisance Road is operated by EuroAFF.com S.à r.l., a Société à responsabilité limitée (S.à r.l.) registered in Luxembourg.

• Registered office: Atrium Business Center, 21 rue du Puits Romain, L-8070 Bertrange, Luxembourg
• Trade and Companies Register (RCS Luxembourg): B280385
• VAT (TVA): LU35193630
• Contact: support@aisance.io — we answer every message that reaches it

If something goes wrong, write to us first — that is the fastest route and the one we actually read. We are not obliged to take part in dispute resolution before a consumer arbitration board and do not currently do so; your statutory rights and the courts named in the terms are unaffected.