Privacy policy

This policy explains how NYXCore LLC ("we") processes personal data in the Veltro app and website (the "Service"). We act under the Law of Georgia on Personal Data Protection. Data controller: NYXCore LLC, identification number 406574390, registered address: Georgia, Tbilisi, Isani district, Vazisubani settlement, II micro-district, building I, floor 1.

1. What we collect

Account: phone number or Google account e-mail and name, language, device push token.

Vehicle: make, model, year, VIN, plate, mileage, photos and document photos you upload (registration, insurance, inspection), service history.

Bookings and requests: description, photos, address or district, quotes, bills, payment status (we never store card data: payments are handled by a licensed provider).

Location: only with your consent, to show nearby workshops.

Technical: app version, error logs, IP address, usage statistics.

2. Why we use it

To provide the Service: bookings, quotes, communication with partners, payments, reminders (inspection, insurance, maintenance).

AI features: photo analysis and the assistant run at your request; photos are processed on Google Cloud (Vertex AI) and are not used to train models.

Improving the diagnosis (separate, optional consent): anonymous data about finished repairs — car make, model and year, a mileage band, the problem description, fault codes read and what was fixed — may be used to evaluate and improve the diagnosis. Names, phone numbers, plates, VINs and prices are not kept; withdrawing the consent deletes this data.

Security and fraud prevention, legal obligations, improving the Service.

Marketing: only with a separate consent you can withdraw at any time.

3. Who we share it with

Partner workshops: only what the job needs (vehicle, request, photos); your phone number is visible only after a confirmed booking.

Processors acting on our instructions: Google Cloud (hosting, database, files, AI; EU region), Vercel (web hosting), Expo (push notifications), payment providers, SMS provider.

Public authorities: only where the law requires.

We do not sell personal data.

4. How long we keep it

Account data while the account exists; after deletion personal data is erased or anonymised within 30 days, except what tax and accounting law obliges us to keep.

Photos and requests: up to 3 years after the job, for warranty and dispute purposes.

5. Your rights

You can ask to access, correct, delete, restrict or export your data and withdraw consent at any time. The account can be deleted in the app (Profile → Privacy) or on the website.

You may complain to the Personal Data Protection Service of Georgia (pdps.ge).

6. Security

Data travels encrypted, access is restricted, payment credentials are encrypted with a separate key, and every sign-in is a separate session you can revoke.

7. Children

The Service is for people aged 18 and over.

8. Changes and contact

We notify you in the app when this policy changes. Questions: use the Help section in the app.