Privacy Policy

This policy explains how MachMatch ("we", "us") collects and uses your personal data when you use our part identification service.

The data controller is Chris Powell, Llanthony, Abergavenny. You can contact us about anything in this policy at machmatchapp@gmail.com. Registration with the Information Commissioner's Office (ICO) is pending.

• Account details — your name and email address when you register.
• Photos you upload — images of parts you submit for identification. These are sent to our AI provider to generate a result; we don't keep a copy of the photo.
• Scan history — the identifications, specifications, and part details generated from your scans.
• Fleet information — any equipment details you choose to add to your profile.
• Feedback — whether you found a part, where you sourced it from, and how long delivery took, if you choose to answer the feedback prompt.
• Payment data — subscription and billing records for Pro plans. Card details are handled by Stripe and are never stored by us.

We use your information to:

• Provide and operate the part identification service;
• Maintain your scan history and fleet records;
• Enforce free/paid plan limits and manage billing;
• Send you account and service emails;
• Understand which parts are hardest to source, using aggregated, anonymised feedback;
• Keep the Service secure and prevent misuse.

We use the following providers to run the Service. They process data on our behalf under their own security and data-processing terms:

• Supabase (EU) — database and authentication; stores your account, scan history, fleet, and feedback data.
• Anthropic — AI provider that processes the photos you submit to generate identifications.
• Stripe — payment processing for Pro subscriptions.
• Vercel (EU) — website hosting.
• Resend — email delivery.
• Cloudflare — Turnstile security check on free trial scans, which processes your IP address and browser information to tell people from automated abuse. Cloudflare may process this data outside the UK.

We do not sell your personal data.

• Scan history — kept for 7 days on the Free plan and 30 days on the Pro plan.
• Account data — deleted 30 days after you close your account.
• Payment records — kept for 7 years to meet legal and accounting obligations.
• Free trial scans — the anonymous result is kept for up to 90 days; the hashed IP address for 24 hours; the detailed result for 7 days unless you create an account. Photos are not stored.

We apply reasonable technical and organisational measures to protect your data, including row-level access controls so scan history and feedback are only readable by the account that created them. No method of transmission or storage is 100% secure.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Have your data deleted;
• Export your data in a portable format.

To exercise any of these rights, email us at machmatchapp@gmail.com. We will respond within 30 days. If you're unhappy with how we've handled your data, you can also complain to the ICO.

We only use cookies that are strictly necessary: session cookies to keep you signed in, and, if you try a free scan without an account, cookies that limit how many free scans a device can run (to prevent abuse) and let us save that scan to your account if you sign up. We do not use advertising or tracking cookies.

If you try a scan without an account, we don't store your photo. We keep the anonymous result (the part identified, its make, your device type and country) for up to 90 days to improve the service.

To prevent abuse, we keep a one-way hashed version of your IP address for 24 hours; we never store the IP itself.

We set a small cookie that limits how many free scans each device can run and, if you then create an account in the same browser, lets us save that scan to your history. If you don't sign up within 7 days, the detailed result is deleted.

The Service is not directed at children, and we do not knowingly collect personal data from children.

We may update this policy from time to time. We'll update the effective date above when we do.

Questions about this policy or your data? Contact us at machmatchapp@gmail.com. See also our Terms of Service.