Privacy Policy

We collect information in three categories.

a. Information you provide. When you create an account or use the Service, we collect your name, work or personal email, organization (for API customers), authentication credentials (password hash, time-based one-time-password secrets stored in encrypted form), billing contact, and any vehicle or diagnostic details you submit (year, make, model, VIN, trouble codes, symptoms, free-form questions, photos, audio, and video). For paid API access we also collect billing information through our payment processor; we do not store full payment card numbers on our systems.

b. Information from your device and use of the Service. We collect log and telemetry data necessary to operate and secure the Service: IP address, user agent, locale, device identifier, referrer, request path, model used, token counts, latency, error codes, and timestamps. For chat sessions we also store the conversation history under your account so you can return to it.

c. Information from third parties. If you sign in using a third-party identity provider (such as Sign in with Apple, Google, or a Firebase federated provider), we receive the identifiers, name, and email that the provider sends us. We may also receive data from sub-processors and integration partners (for example, vehicle reference data from NHTSA, retail product listings from Amazon or eBay, and repair-video metadata from YouTube) used to compose responses to your questions; that data is not personal to you.

• To provide the Service: answer your automotive questions, generate diagnostic recommendations, surface relevant products, videos, and recall notices, and keep your chat history available.
• To authenticate you, prevent abuse, rate-limit requests, and detect anomalous logins or suspicious activity.
• To meter usage and bill organizations whose API keys are calling the Service.
• To improve the Service: measure quality of responses, monitor reliability, debug errors, and evaluate prompts and retrieval changes.
• To send transactional notifications: sign-in links, security alerts, billing receipts, deliverability bounces, and changes to this Privacy Policy or the Terms of Use.
• To comply with legal obligations, respond to lawful requests, enforce our Terms of Use, and protect the rights, safety, and property of Innova, our users, and the public.

We do not use your content to train our own foundation models. Where third-party model providers offer an option to exclude customer content from their training data, we enable that option by default.

We share information only as described below.

a. Sub-processors. We rely on a small set of vendors to operate the Service. They process information only on our instructions and under data- processing agreements. Current categories include: cloud hosting and storage (Amazon Web Services), large-language-model inference (Anthropic, OpenAI, xAI, and the open-source Ollama embeddings we run ourselves), transactional email (Amazon SES), authentication (Firebase, Apple Sign-In), payment processing, search and product-data partners (BrightData, Tavily, retail APIs), and video metadata (YouTube). The list of sub-processors is current as of the effective date and may change as the Service evolves.

b. Organization administrators.If you use AskFixy under an organization-issued API key or a sub-account managed by an organization, that organization's administrators can see usage attributable to that key (endpoint, token counts, spend, and any user identifiers your administrator chooses to pass).

c. Service providers and affiliates. We may share information with Innova affiliates and with service providers acting on our behalf for hosting, analytics, customer support, fraud prevention, and similar operational purposes.

d. Legal and safety. We may disclose information to comply with law, respond to lawful requests by public authorities, enforce our agreements, protect rights and safety, or in connection with a corporate transaction (such as a merger or asset sale).

e. With your consent. We may share information with other parties when you instruct us to do so (for example, when you click through to a partner shop or share a diagnostic record).

We do not sell your personal information for monetary consideration. Certain analytics or advertising integrations may constitute a “sale” or “share” under California law as discussed in Section 8. You may opt out as described there.

We retain account, billing, and usage records for the duration of your account and for a reasonable period afterward to comply with legal, tax, and audit obligations, to resolve disputes, and to enforce our agreements. Chat sessions and uploaded media are retained until you delete them or close your account. Aggregated, de-identified analytics data may persist after account deletion.

We protect information in transit with TLS 1.2 or higher, encrypt sensitive credentials at rest with AES-256-GCM using per-purpose keys, and require multi-factor authentication for admin access. Production systems run in private network segments with restricted ingress. No system is perfectly secure; we take reasonable steps to protect your data and will notify affected users and authorities of a security incident as required by law.

You are responsible for keeping your password, multi-factor credential, and any API keys issued to your organization confidential. Notify us at security@askfixy.com if you suspect unauthorized access.

The Service is not directed to and not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us at privacy@askfixy.com and we will delete it.

The Service is operated from the United States. By using the Service you understand that your information will be transferred to, processed in, and stored in the United States and other jurisdictions where our sub-processors operate. These jurisdictions may have data-protection laws that differ from the laws of your country.

Depending on where you live, you may have rights with respect to your personal information. You can exercise them by emailing privacy@askfixy.com from the address associated with your account. We will respond within the time required by applicable law. We may need to verify your identity before acting on a request.

a. California residents (CCPA / CPRA).California residents may request to (i) know the categories and specific pieces of personal information we have collected about them, the sources, purposes, and recipients; (ii) delete personal information, subject to statutory exceptions; (iii) correct inaccurate personal information; (iv) opt out of any “sale” or “sharing” of personal information for cross-context behavioral advertising; (v) limit the use of sensitive personal information; and (vi) be free from retaliation for exercising these rights. We do not knowingly sell personal information for monetary value. To exercise these rights, email the address above. An authorized agent may submit a request on your behalf with proof of authorization.

In the prior twelve months we have collected the following categories of personal information: identifiers (name, email, account identifiers, IP address), commercial information (purchase history for API credits), internet activity (logs of API and chat usage), geolocation (only when you explicitly provide it for a question), and inferences drawn from the above (such as a vehicle’s likely fault). We collect this information directly from you, from your devices, and from third-party identity providers. We use it for the purposes described in Section 2 and share it as described in Section 3.

b. EU/EEA and UK residents (GDPR / UK GDPR). If you are located in the EU, EEA, or the UK, you may have rights of access, rectification, erasure, restriction of processing, data portability, and objection. The lawful bases on which we rely are: performance of a contract (to provide the Service you requested), legitimate interests (to secure and improve the Service), legal obligation (to comply with applicable law), and consent (for processing where required). You have the right to lodge a complaint with your local supervisory authority.

c. “Do Not Track”.Our Service does not currently respond to “Do Not Track” browser signals because no consistent industry standard exists.

We and our analytics providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, secure the Service, and measure aggregate usage. You can control cookies through your browser settings. Disabling cookies may affect parts of the Service.

The Service may link to third-party sites (retail product pages, repair-video pages, parts and service providers). Those sites are operated by third parties and have their own privacy practices. We are not responsible for the privacy practices of any third-party site.

Responses generated by the Service are produced by large-language models. We do our best to ground responses in authoritative automotive data, but AI responses can still be incomplete or wrong. Treat them as informational, and verify any technical recommendation with a qualified technician before relying on it. See Section 2 of the Terms of Use.

We may update this Privacy Policy. We will post any update at this URL with a new effective date and, for material changes, notify the email address on record or the organization administrator for API customers. Your continued use of the Service after a change takes effect constitutes acceptance.

Innova Electronics Corporation
Attn: AskFixy Privacy
17352 Von Karman Avenue
Irvine, California 92614
privacy@askfixy.com
support@askfixy.com