Privacy policy
How your information is collected, used and protected.
Last updated: 4 November 2026Who we are
Carvexa – AI Car Check is operated by Gridex Labs LLC. This policy covers the Carvexa mobile apps, carvexa.app and the restricted team management panel. Contact us at info@gridexlabs.com or +1 307 381 4289 for privacy questions.
Data you provide
Account data includes your account identifier and, depending on your sign-in method and choices, name, email, phone number and profile image. Google and Apple provide only the profile fields they make available; Apple may provide a relay email. Optional profile fields can include country or city. We do not request precise GPS location in the current app. Vehicle and inspection data can include make, model, year, mileage, vehicle identifiers you enter, answers, notes, selected inspection package and inspection progress.
Photos, video, audio and permissions
We process photos and, where the selected capture task supports them, video or audio recordings that you choose to submit. They are used to check capture quality, prepare observations and maintain your report. Camera and microphone permissions are requested for those features. Avoid capturing people, personal documents or unrelated private information. Registration-document text recognition is performed on the device; the raw registration document is not part of the inspection upload flow. Vehicle fields you confirm may be sent to our service.
AI processing
Carvexa uses external AI processing through OpenRouter and the configured model provider, currently DeepSeek. Relevant inspection images or extracted video frames, vehicle context and derived observations may be sent to these providers to check quality and generate observations or report text. Account contact details are not intentionally included in AI requests; content visible in a submitted image can still contain personal information. AI results can be incomplete or incorrect. Do not upload content you are not authorized to share. Provider processing may occur outside your country. Our service requests analysis for your inspection; this policy does not promise that third-party providers have zero retention.
Other service providers
Google Firebase supports authentication and hosting; Google Cloud provides infrastructure. Apple and Google handle sign-in and in-app purchases where selected. We receive purchase identifiers, product, status and entitlement information to verify and deliver inspection credits; we do not receive your full card details. On-device Google ML Kit features may send SDK usage, device, installation and diagnostic information to Google. Hosting and security systems process technical request information such as IP address, browser/device information, timestamps and error or performance data. Authorized team members access data only as needed for operations, support, security or purchase administration.
Why we process data
We process data to provide accounts and inspections, generate and store reports, verify purchases, respond to support requests, prevent abuse and meet legal obligations. Where applicable, our legal bases are performing our agreement with you, legitimate interests in operating and securing the service, compliance with law, and consent for processing that requires it. Device permission is separate from any consent required for a particular use. You can revoke device permissions in system settings, which may disable the relevant capture feature.
Retention and deletion
We retain account, inspection and report information while needed to provide your account and requested service. You can request deletion of your account and associated inspection media, profile and reports using our Account deletion page or info@gridexlabs.com. We verify the request to protect your account. Purchase, accounting, fraud-prevention or legal-claim records may need to be retained where legally required or justified, with access restricted. Backup copies may remain until replaced under the backup cycle and are not used for ordinary product access. We explain any applicable exception when handling your request. Deleting the app alone does not delete server data.
Your choices and rights
Depending on where you live, you may have rights to access, correct, receive a copy of, delete, restrict or object to processing of your personal data, withdraw consent, and complain to a data-protection authority. Turkish users may make applicable KVKK requests using the same contact address. Send requests from the email associated with your account where possible. Do not send passwords, verification codes, payment-card details or identity documents unless we arrange a necessary, secure verification method.
Website storage and security
The public website does not use advertising trackers or analytics cookies. Team sign-in uses essential security and session cookies. Infrastructure providers may process request logs for delivery and security. We use transport encryption and access controls, including restricted team access. No service can guarantee absolute security. We do not offer an advertising-data sale or cross-app advertising-tracking feature.
Children and policy changes
Carvexa is intended for adults evaluating vehicles and is not directed to children. If you believe a child has provided personal information, contact us. We may update this policy when the service or applicable requirements change. The current version and date are published here; significant changes will be communicated where required.