Privacy Policy

Last updated: 25 September 2026

This policy explains what personal data Dede Customs collects, why, and what rights you have. Dede Customs is run by a private individual based in Portugal, the "controller" of your data under the EU General Data Protection Regulation (GDPR).

1. What we collect

• Account: your email address and a password (stored encrypted), or your name and email from Google if you sign in with Google.
• Your cars and photos: the car details you enter, the photos you upload and the images we generate from them.
• Wallet: your balance and a history of top-ups and renders. Card details are handled entirely by Stripe; we never see or store them.
• Usage: which parts you try on and which "Buy" links you click, and basic technical logs (IP address, browser) kept for security.
• Country: worked out from your connection or your choice, to show shops that deliver to you.

2. Why we use it (and the legal basis)

• To provide the service you signed up for: your account, garage, renders and wallet (performance of a contract).
• To process payments and keep accounting records (legal obligation).
• To keep the service secure, prevent abuse and improve it, e.g. seeing which features are used (legitimate interest).

We do not sell your data, and we do not use your photos to train AI models.

3. Who we share it with

Only with service providers that run parts of Dede Customs for us, under data processing agreements:

• Supabase: database, login and file storage.
• Vercel: website hosting, and anonymous visit statistics (no cookies, no personal profile).
• WaveSpeed AI: generates the renders. Your photo and the chosen parts are sent to it for processing.
• Stripe: payments.
• Google: only if you choose "Continue with Google".
• Shops you click through to receive the fact that you came from Dede Customs (for affiliate commission), not your account details.

Some of these providers process data outside the European Economic Area. Where they do, the transfer is protected by the EU Standard Contractual Clauses or an adequacy decision.

4. How long we keep it

• Account, cars, photos and renders: until you delete them or your account.
• Payment and wallet records: as long as tax law requires (usually up to 10 years).
• Security logs: a few weeks.

5. Cookies

We only use cookies that are needed for the site to work: to keep you signed in and to remember your country. We do not use advertising or tracking cookies.

6. Your rights

You can ask to see, correct, download or delete your data, or object to how we use it by contacting us. You can delete cars and photos yourself at any time in your garage. If you are unhappy with how we handle your data, you can complain to your data protection authority (in Portugal: CNPD, www.cnpd.pt).

7. Children

Dede Customs is not meant for children under 16, and we do not knowingly collect their data.

8. Changes

If we change this policy in an important way, we will tell you by email or on the site before it applies.