Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data Dede Customs collects, why, and what rights you have. Dede Customs is run by André Caetano, a private individual, Porto, Portugal, the "controller" of your data under the EU General Data Protection Regulation (GDPR). Questions: andre@dedecustoms.com.

1. What we collect

• Account: your email address and a password (stored encrypted), or your name and email from Google if you sign in with Google.
• Your cars, photos and results: the car details you choose or enter, the photos you upload, and the images and videos we generate from them.
• Wallet: your balance and a history of top-ups, renders and videos. Card details are handled entirely by Stripe; we never see or store them.
• Shared builds: when you share a build, the images and car details on that public page.
• Usage: which options you try, and basic technical logs (IP address, browser) kept for security.
• Country and language: worked out from your connection or your choice, to show the site in your language.

2. Why we use it (and the legal basis)

• To provide the service you signed up for: your account, garage, renders, videos and wallet (performance of a contract).
• To process payments and keep accounting records (legal obligation).
• To send emails you need, such as confirming your account (performance of a contract).
• To keep the service secure, prevent abuse and improve it, e.g. seeing which features are used (legitimate interest).

We do not sell your data, and we do not use your photos to train AI models.

3. Who we share it with

Only with service providers that run parts of Dede Customs for us, under data processing agreements:

• Supabase: database, login and file storage.
• Vercel: website hosting, and anonymous visit statistics (no cookies, no personal profile).
• WaveSpeed AI: generates the images and videos, using AI models such as Google's. Your photo and the chosen options are sent to it for processing.
• Stripe: payments.
• Resend: sends our emails, like account confirmation.
• Google: only if you choose "Continue with Google".

Car details (make, model, year) are looked up with Wheel-Size; no personal data is sent to them. Some of these providers process data outside the European Economic Area. Where they do, the transfer is protected by the EU Standard Contractual Clauses or an adequacy decision.

4. How long we keep it

• Account, cars, photos, renders, videos and garage details: until you delete them or your account.
• Shared build pages: until you or we remove them, or your account is deleted.
• Payment and wallet records: as long as tax law requires (usually up to 10 years).
• Security logs: a few weeks.

5. Cookies

We only use cookies that are needed for the site to work: to keep you signed in and to remember your language and country. We do not use advertising or tracking cookies.

6. Your rights

You can ask to see, correct, download or delete your data, or object to how we use it, by emailing andre@dedecustoms.com. You can delete cars and photos yourself at any time in your garage, and your whole account on the wallet page. If you are unhappy with how we handle your data, you can complain to your data protection authority (in Portugal: CNPD, www.cnpd.pt).

7. Children

Dede Customs is not meant for children under 16, and we do not knowingly collect their data.

8. Our visualiser on other shops, and the Shopify app

Wheel shops can put our visualiser on their own website, among others with our Shopify app "See it on your car". If you use it there, you have no account with us and this is all we handle:

• From shoppers: the photo of the car you upload, the picture we make from it, a random number kept in your browser to count your pictures for the day, and a scrambled form of your IP address to stop abuse. No name, email or order details.
• How long: photos and pictures are deleted after 30 days. They are sent to WaveSpeed AI to make the picture and are not used to train AI models.
• From shops on Shopify: the shop's address, its plan, and access to read its products (title, photo, sizes). We ask for no access to customers or orders, so we hold no customer data from Shopify. Shopify handles the billing.
• When a shop removes the app: the visualiser stops at once, and everything we hold for that shop, its shoppers' photos and pictures included, is erased 48 hours later.

9. Changes

If we change this policy in an important way, we will tell you by email or on the site before it applies.