FAIRFIX.AI LLC (“FAIRFIX,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use the FAIRFIX.AI™ website, mobile applications, artificial-intelligence-enabled vehicle diagnostic tools, connected-vehicle and OBD-II functionality, and related products and services (collectively, the “Service”).
The Service is currently intended for users in the United States. This Policy also provides information concerning privacy rights that may apply under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and, where applicable to FAIRFIX's processing, the EU and UK General Data Protection Regulation (“GDPR”) and Brazil's Lei Geral de Proteção de Dados (“LGPD”).
Capitalized terms not defined here have the meanings provided in the FAIRFIX Terms of Service (“Terms”).
1. Scope; Relationship to the Terms
This Privacy Policy applies to personal information FAIRFIX processes in connection with the Service where FAIRFIX acts as a business, controller, or similar responsible entity under applicable privacy law.
The Terms govern access to and use of the Service. This Policy governs FAIRFIX's processing of personal information.
If this Policy and the Terms conflict concerning collection, use, disclosure, retention, or protection of personal information, this Policy controls with respect to that privacy issue, except where applicable law requires otherwise.
FAIRFIX.AI LLC is responsible for the personal information described in this Policy.
Privacy questions and requests may be directed to privacy@fairfixai.com.
2. Personal Information We Collect
The information FAIRFIX collects depends on how you use the Service and which features you choose to enable.
A. Information You Provide
We may collect:
name;
email address;
telephone number;
account credentials and profile information;
vehicle information;
VIN;
make, model, year, mileage, maintenance, and repair history;
vehicle symptoms and diagnostic information;
photographs and videos;
repair estimates, invoices, repair orders, inspection reports, and other documents;
prompts, questions, instructions, and other information submitted to AI-enabled features;
communications with FAIRFIX;
information submitted in connection with mechanics, repair facilities, technicians, consultants, or experts; and
other information you voluntarily provide.
B. OBD-II, Connected-Vehicle, and Telematics Information
If you choose to connect or enable an OBD-II device, connected-vehicle integration, telematics service, or similar functionality, FAIRFIX may collect information made available through the applicable vehicle, device, integration, and permissions.
This may include:
Vehicle diagnostic information, such as VIN, DTCs, warning indicators, engine parameters, sensor readings, emissions information, and battery information.
Location information, including general location and, where separately enabled, precise vehicle or device geolocation.
Trip and mileage information, such as mileage, trip duration, distance, timestamps, and related vehicle-use information.
Driving-related information, which may include speed, acceleration, braking, and similar information generated by the vehicle or connected device.
The particular information available varies by vehicle, device, integration, permissions, and features.
FAIRFIX does not represent that every vehicle or OBD-II device provides the same information or that vehicle-generated information is complete, current, or accurate.
C. Payment and Subscription Information
Payment information may be collected and processed by third-party payment processors, Apple, Google, or another applicable platform.
FAIRFIX generally does not receive or store complete payment-card numbers. We may receive transaction identifiers, subscription status, payment status, renewal or expiration information, and limited billing information.
D. Information Collected Automatically
We or our service providers may automatically collect IP address, device type, operating system, browser type, device identifiers, app version, language, timestamps, Service interactions, logs, crash reports, diagnostics, performance information, and similar technical information.
E. Information From Third Parties
We may receive information from payment processors, Apple App Store, Google Play, authentication providers, analytics providers, OBD or vehicle-integration providers, repair or service professionals, and other providers or integrations that you authorize or that are permitted by law.
3. Sensitive and Privacy-Sensitive Information
Privacy laws use different definitions of “sensitive” information.
Under the CCPA, precise geolocation information may constitute sensitive personal information.
Vehicle diagnostic information, VIN, mileage, trip information, speed, acceleration, braking, and other driving-behavior information may constitute personal information when reasonably capable of being associated with a consumer or household, but such information is not automatically “sensitive personal information” under the CCPA merely because it is vehicle or telematics information.
Similarly, vehicle location, trip, diagnostic, and driving-behavior information may constitute personal data under GDPR or LGPD but is not necessarily “special category personal data” under GDPR or “sensitive personal data” under LGPD.
Nevertheless, FAIRFIX recognizes that precise location, detailed trip history, and detailed driving-behavior information can create heightened privacy risks and treats such information as privacy-sensitive information even where a particular statute does not formally classify it as sensitive.
FAIRFIX uses such information only for disclosed purposes, which may include providing features you request, vehicle analysis, security, fraud prevention, troubleshooting, and other purposes permitted by applicable law.
FAIRFIX does not use precise geolocation or detailed driving-behavior information to infer sensitive characteristics about you except as expressly disclosed and permitted by applicable law.
Where applicable law grants a right to limit certain uses or disclosures of sensitive personal information, FAIRFIX will provide the required mechanism for exercising that right.
4. OBD-II and Telematics Notice and Consent
Connecting an OBD-II device or connected-vehicle feature does not necessarily require every available category of vehicle information.
Before collection through an activated OBD-II or connected-vehicle feature begins, FAIRFIX will provide notice, at or before collection as required by applicable law, concerning the categories of information to be collected and the purposes for which the information will be used.
Core Diagnostic Information
Where reasonably necessary to provide a diagnostic or vehicle-analysis feature requested by you, FAIRFIX may process information such as:
VIN or vehicle/device identification;
DTCs;
warning indicators; and
diagnostic and sensor information relevant to the requested feature.
Precise Location
Where a feature uses precise location and applicable law or device-platform rules require permission, FAIRFIX will request the applicable permission before collecting precise location information.
Where precise location is optional to the requested core diagnostic functionality, FAIRFIX will provide an appropriate means to enable or disable the location-dependent feature.
Trip and Driving-Behavior Information
Where FAIRFIX offers functionality involving trip history, speed, acceleration, braking, or other detailed driving-behavior information that is not reasonably necessary to provide the core diagnostic feature requested by you, FAIRFIX may provide a separate disclosure and control permitting you to enable or disable that functionality.
Background Collection
If a feature requires background or continuous collection of location or telematics information, FAIRFIX will provide any additional notice and obtain any permission or consent required by applicable law or applicable device-platform rules before such collection begins.
Withdrawal and Disconnection
You may disable applicable optional permissions, disconnect an OBD-II device or integration, or disable optional connected-vehicle functionality.
Doing so stops future collection through the disabled functionality to the extent technically feasible, but does not automatically delete information already collected. You may separately exercise applicable deletion rights as described below.
Disabling information necessary for a particular feature may prevent that feature from functioning.
5. How We Use Personal Information
We may use personal information to:
provide and operate the Service;
establish and maintain accounts;
authenticate users;
provide vehicle diagnostic and repair-related functionality;
analyze vehicle symptoms and diagnostic information;
generate AI Outputs, analyses, explanations, recommendations, and summaries;
personalize the Service;
provide customer support;
facilitate requested communications or consultations with independent repair shops, mechanics, technicians, consultants, or experts;
process payments and administer subscriptions;
communicate administrative, transactional, safety, support, and Service-related information;
provide marketing communications where permitted and subject to your choices;
conduct analytics and improve functionality;
debug and troubleshoot;
maintain security;
detect and prevent fraud, misuse, and unauthorized access;
enforce the Terms;
establish, exercise, or defend legal claims;
comply with legal obligations; and
carry out other disclosed purposes or purposes to which you consent.
6. Artificial Intelligence Processing and Model Training
FAIRFIX uses artificial intelligence, machine learning, automated systems, and third-party AI technologies to provide features of the Service.
Information submitted to AI-enabled features—including prompts, vehicle information, diagnostic data, documents, photographs, questions, and related information—may be processed by automated systems to generate AI Outputs.
As explained in the Terms, AI Outputs are informational and advisory and are not substitutes for physical inspection, professional diagnosis, manufacturer instructions, safety procedures, or qualified automotive judgment.
Third-Party AI Providers
FAIRFIX may use third-party AI, cloud-computing, data-processing, and machine-learning providers to provide AI-enabled functionality.
Such providers may process information contained in prompts, uploaded content, vehicle information, or other information necessary to provide the functionality requested by you.
FAIRFIX uses such providers subject to applicable contractual, confidentiality, security, and data-protection requirements.
Model Training and Improvement
FAIRFIX does not use identifiable personal information to train generalized FAIRFIX artificial-intelligence or machine-learning models unless FAIRFIX expressly discloses that use and obtains any consent or other authorization required by applicable law.
FAIRFIX may use aggregated, anonymized, or de-identified information to develop, evaluate, test, secure, maintain, and improve FAIRFIX models, algorithms, and Service functionality.
Where FAIRFIX maintains information as de-identified information under applicable law, FAIRFIX maintains it in de-identified form and does not attempt to reidentify it except as permitted by law.
Third-party AI providers may process personal information on FAIRFIX's behalf to generate requested AI functionality. Their processing is subject to applicable contractual restrictions and the data-processing practices applicable to FAIRFIX's use of those services.
FAIRFIX will not represent that a third-party AI provider is prohibited from retaining, reviewing, or using information for a particular purpose unless FAIRFIX has confirmed that restriction applies to FAIRFIX's use of that provider.
Nothing in this Policy changes the ownership and license provisions governing User Content and AI Outputs in the Terms.
7. Automated Processing
FAIRFIX may use automated systems to generate vehicle-related analyses, recommendations, classifications, and other AI Outputs.
These systems are intended to assist users with vehicle-related information and decisions.
FAIRFIX does not use its vehicle-diagnostic AI functionality to make decisions producing legal or similarly significant effects concerning employment, housing, credit, insurance eligibility, education, health care, or another legally protected significant decision unless separately disclosed and permitted by applicable law.
Where applicable law provides rights concerning automated decision-making, profiling, or automated processing, FAIRFIX will honor those rights as required.
8. Legal Bases for Processing — Where GDPR or LGPD Applies
Where GDPR, UK GDPR, or LGPD applies to FAIRFIX's processing, FAIRFIX will rely upon one or more lawful bases applicable to the particular processing activity, including performance of a contract, consent, legitimate interests, compliance with legal obligations, or another basis permitted by applicable law.
Where FAIRFIX relies upon consent, you may withdraw that consent, subject to applicable law. Withdrawal does not affect processing lawfully conducted before withdrawal.
Where information constitutes special-category or sensitive personal data under applicable law, FAIRFIX will satisfy any additional lawful-basis or consent requirements applicable to that information.
9. How We Disclose Personal Information
Service Providers and Processors
We may disclose information to providers performing services on FAIRFIX's behalf, including hosting, cloud storage, AI, payment, communications, customer support, cybersecurity, analytics, database, development, and other technical or operational services.
Repair Shops, Mechanics, Experts, and Service Professionals
When you request a connection, referral, consultation, estimate, inspection, or interaction involving a third-party provider, FAIRFIX may disclose information reasonably necessary to facilitate that interaction, including contact information, vehicle information, diagnostic information, photographs, estimates, repair records, AI Outputs, and other information you request us to transmit.
These providers may be independent third parties rather than FAIRFIX employees or agents. Their independent processing may be governed by their own privacy practices.
Payment and Platform Providers
We may disclose information to Apple, Google, payment processors, financial institutions, or similar providers to complete transactions, manage subscriptions, prevent fraud, or satisfy platform requirements.
Legal, Regulatory, and Safety Disclosures
We may disclose information where reasonably necessary to comply with law, respond to lawful legal process, investigate fraud or security incidents, enforce agreements, protect FAIRFIX or others, protect health or safety, or establish, exercise, or defend legal rights.
Business Transactions
Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, due diligence, sale of assets, or similar transaction.
Your Direction or Consent
We may disclose information when you direct or authorize us to do so.
10. Sale and Sharing of Personal Information
FAIRFIX does not sell personal information for monetary consideration.
FAIRFIX does not sell personal information or share personal information for cross-context behavioral advertising. FAIRFIX does not use targeted-advertising or retargeting tools at launch. If FAIRFIX changes this practice, it will update this Policy, provide any required notice and consent choices, and implement legally required opt-out mechanisms before the change takes effect.
FAIRFIX does not knowingly sell or share personal information of individuals under 16.
11. Global Privacy Control
Where required by applicable law, FAIRFIX recognizes legally valid opt-out preference signals, including Global Privacy Control (“GPC”), as a request to opt out of sale or sharing for the browser or device transmitting the signal.
12. Cookies, SDKs, and Similar Technologies
FAIRFIX and its service providers may use cookies, SDKs, local storage, device identifiers, and similar technologies only for authentication, security, user preferences, core functionality, diagnostics, performance measurement, service analytics, and disclosed operational purposes. At launch, FAIRFIX does not use these technologies for targeted advertising or cross-context behavioral advertising.
You may be able to control certain technologies through browser or device settings, application permissions, consent-management tools, or other methods FAIRFIX provides.
Disabling technologies may prevent portions of the Service from functioning.
13. California Privacy Notice
If FAIRFIX is subject to the CCPA with respect to your personal information, California residents may have applicable rights under that law.
Depending on use of the Service, FAIRFIX may collect categories including:
identifiers;
customer-record information;
commercial information;
internet or electronic activity;
geolocation information;
sensory information;
vehicle and diagnostic information;
inferences; and
sensitive personal information, including precise geolocation where collected.
FAIRFIX may obtain information from you, your device, your vehicle or connected device, service providers, integration providers, app stores, payment platforms, repair professionals, and other authorized sources.
FAIRFIX uses these categories for purposes described in this Policy and may disclose them to recipients described in Section 9.
14. Your Privacy Rights
California
Subject to applicable law, California residents may have rights to:
know categories of personal information collected;
access specific personal information;
know sources, purposes, and categories of recipients;
request deletion;
request correction;
opt out of sale or sharing;
limit certain uses or disclosures of sensitive personal information; and
receive equal service without unlawful discrimination for exercising privacy rights.
California residents may use authorized agents as permitted by law.
EEA and United Kingdom
Where GDPR applies, individuals may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to an applicable supervisory authority.
Brazil
Where LGPD applies, individuals may have rights including confirmation of processing, access, correction, anonymization, blocking or deletion where applicable, portability, information concerning disclosures, withdrawal of consent, review of certain automated decisions, and other rights provided by applicable law.
Other Jurisdictions
Individuals in other jurisdictions may have additional privacy rights. FAIRFIX will honor legally applicable rights.
15. Exercising Privacy Rights
Submit privacy requests to:
FAIRFIX may verify identity before responding to requests and may require evidence of an authorized agent's authority.
FAIRFIX will respond within timeframes required by applicable law and will not unlawfully discriminate against you for exercising applicable privacy rights.
Nothing in the Terms, including the arbitration agreement, prevents you from communicating with a governmental, regulatory, supervisory, or law-enforcement authority where that right cannot lawfully be waived.
16. Account Deletion
You may request deletion of your FAIRFIX account using available account controls or by contacting FAIRFIX.
Account deletion generally disables the account and initiates deletion or de-identification of associated personal information, subject to applicable exceptions.
FAIRFIX may retain information where reasonably necessary or legally permitted to complete transactions, maintain financial and tax records, comply with law, maintain security and fraud-prevention records, resolve disputes, enforce agreements, establish or defend legal claims, honor legal holds, maintain privacy-request records, preserve backups until overwritten through normal cycles, or maintain de-identified information.
Deleting a FAIRFIX account does not automatically cancel or delete information independently maintained by Apple, Google, payment processors, repair shops, experts, or other third parties.
A subscription purchased through a third-party platform may need to be separately cancelled through that platform.
17. Data Retention
FAIRFIX retains personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate contractual, security, legal, accounting, regulatory, and dispute-resolution purposes.
Retention depends on factors including account status, nature of information, collection purpose, contractual obligations, security requirements, statutes of limitation, regulatory requirements, disputes, and legal holds.
When information is no longer reasonably necessary and no legal hold or other lawful exception applies, FAIRFIX deletes, anonymizes, or de-identifies it in accordance with the schedule below.
Account and profile information: retained while the account is active and for up to three years after account closure or deletion, unless earlier deletion is required or a lawful exception applies.
Repair cases, estimates, approvals and declines, orders, invoices, payment and payout records, transaction records, consent records, and material audit records: retained for seven years after the applicable transaction or case closes.
Call and video recordings and transcripts: retained for up to twelve months after creation, unless a dispute, safety investigation, legal hold, or other lawful need requires longer retention.
Raw OBD and connected-vehicle telemetry: retained for up to ninety days. Diagnostic results and repair-history records may be retained while the account is active and for up to three years after account closure, subject to deletion rights and lawful exceptions.
Precise location, background location, and driving-feature data: retained only while necessary to provide the user-enabled feature and ordinarily for no more than thirty days, unless the user saves the information as part of a case or a safety, dispute, legal, or regulatory need requires longer retention.
AI interaction records, AI-output reports, customer-support communications, security logs, and fraud-prevention records: ordinarily retained for up to twelve months, except that records tied to an unresolved case, dispute, safety matter, or legal hold may be retained until the matter is resolved.
Backup copies: retained in rolling backup systems for up to ninety days before being overwritten through normal backup cycles.
Mobile telephone numbers and SMS consent records are not sold or shared with third parties or affiliates for their marketing or promotional purposes. Service providers may process this information only to provide communications and related operational services for FAIRFIX.
18. De-Identified and Aggregated Information
FAIRFIX may create aggregated, anonymized, or de-identified information.
Where information is maintained as de-identified information under applicable law, FAIRFIX will take reasonable measures to prevent association with an individual or household, maintain it in de-identified form, and not attempt reidentification except as permitted by law.
FAIRFIX may use de-identified or aggregated information for lawful purposes including analytics, research, product development, model evaluation and improvement, benchmarking, safety, and Service improvement.
19. International Data Transfers
FAIRFIX is based in the United States.
If applicable privacy law governs a transfer of personal information to the United States or another jurisdiction, FAIRFIX will use an appropriate transfer mechanism where required, which may include Standard Contractual Clauses, a UK Addendum or International Data Transfer Agreement, an adequacy mechanism, consent where legally permitted, or another lawful mechanism.
The Service is currently intended for users in the United States. Before actively offering or directing the Service to individuals in jurisdictions requiring additional transfer disclosures, representatives, or other compliance measures, FAIRFIX will implement applicable requirements.
20. Data Security
FAIRFIX uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.
Measures may include encryption in transit, access controls, authentication controls, credential and secret management, logging, monitoring, vendor-management procedures, and security and incident-response practices.
No information system, internet transmission, mobile device, connected vehicle, or storage system can be guaranteed completely secure. FAIRFIX therefore cannot guarantee absolute security.
21. Third-Party Services and Links
The Service may permit interactions with third parties including repair facilities, mechanics, technicians, experts, manufacturers, dealers, insurers, parts providers, and other businesses.
This Policy governs FAIRFIX's processing of personal information. It does not necessarily govern information independently processed by third parties.
The Service may also contain links to third-party websites or applications FAIRFIX does not control. FAIRFIX is not responsible for their privacy practices.
22. Apple App Store and Google Play
If you download, purchase, or use the Service through Apple App Store, Google Play, or another platform, that platform may independently process information concerning your account, device, purchases, subscriptions, and use.
Such processing is governed by the applicable platform's terms and privacy policy.
23. Communications and Marketing
FAIRFIX may send transactional or administrative communications concerning your account, subscriptions, purchases, security, vehicle information, Service functionality, support, or changes to the Service or agreements.
Where permitted, FAIRFIX may also send promotional communications.
You may opt out of marketing emails through the unsubscribe mechanism or by contacting FAIRFIX. Opting out of marketing does not prevent necessary transactional or administrative communications.
SMS/Text Message Communications. By checking this box, you agree to receive transactional and service-related text messages from FAIRFIX.AI regarding your account, repair case, appointments, estimates, towing, parts coordination, expert consultations, and service updates. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of purchase. See our Terms of Service and Privacy Policy.
24. Children's Privacy
The Service is intended for adults and is not intended for individuals under 18.
FAIRFIX does not knowingly collect personal information from children under 13 and does not knowingly permit individuals under 18 to establish accounts contrary to the Terms.
If you believe a minor has provided personal information to FAIRFIX, contact privacy@fairfixai.com.
25. California “Shine the Light”
California Civil Code § 1798.83 may permit qualifying California residents to request information concerning certain disclosures for third-party direct-marketing purposes.
FAIRFIX does not disclose personal information to third parties for their own direct-marketing purposes in a manner subject to those requirements.
For the California consumer notice under Civil Code § 1789.3, see the Terms.
26. Changes to This Privacy Policy
FAIRFIX may revise this Policy from time to time.
We will post the revised Policy and update the “Last Updated” date. If changes materially affect our processing of personal information, FAIRFIX will provide additional notice or obtain consent where required by applicable law.
27. Contact Us
Privacy questions, complaints, or rights requests may be directed to:
Registered Office and Legal Notice Address:
Registered Agents Inc.
30 N Gould St, Suite R
Sheridan, WY 82801
United States
Email: privacy@fairfixai.com
Legal: legal@fairfixai.com
Website: https://fairfixai.com
The Service is currently intended for users in the United States. If FAIRFIX later actively offers or directs the Service to individuals in the EEA, United Kingdom, Brazil, or another jurisdiction requiring a local representative, data-protection contact, regional notice, or other additional disclosure, FAIRFIX will provide the applicable information as required by law.