Summary: AccidentIQ collects the minimum data needed to provide forensic accident analysis. Your images and incident data are sent to our AI provider for analysis only — they are not sold, shared with advertisers, or permanently stored by default. Your mobile number is used to secure your session and stamp your reports.
Section 1
Who We Are
AccidentIQ ("we", "us", "our") is an AI-powered road accident analysis service operated at accidentiqweb.com. The service is operated by an individual proprietor based in India.
For privacy enquiries, contact us at the details in Section 11.
Section 2
What We Collect
Information you provide
- Mobile number — used to verify your identity and stamp your generated reports as an authenticity record
- Accident photos — vehicle damage images and road/terrain photos you upload for analysis. This app accepts vehicle photos only — every photo is automatically screened before use (see below) and rejected if it shows a face, another visible person, explicit content, or a license plate/other readable signage
- Incident details — date, time, GPS coordinates, vehicle make/model/year/plate, driver names (and optionally: license numbers, registration IDs, contact details)
- Witness and police report details — if voluntarily provided; never required
Information collected automatically
- IP address — used to detect your approximate location for displaying local currency and relevant legal terms; not stored permanently
- Session data — a signed session token stored in your browser memory for the duration of your session; expires when you close the tab
- Usage logs — server logs including timestamps and request counts for rate limiting and abuse prevention; retained for 30 days
Automated photo content screening
Every photo you upload is automatically analyzed before it is used, to confirm it shows a vehicle and not a person or other prohibited content. This screening checks for faces, other visible people (even without a visible face), explicit/NSFW content, and license plates or other readable signage/text. A photo matching any of these is rejected outright and is not used in your report or retained — it is not partially blurred or edited and kept. This screening runs either in your own browser (face, person/body, and explicit-content checks) or on our server (the plate/signage text check) — in both cases, the analysis is used solely to make this accept/reject decision and does not extract, store, or retain any biometric identifier, facial recognition data, or record of who was in a rejected photo.
What we do NOT collect: We do not collect payment card numbers (handled entirely by Dodo Payments, our payment processor), government-issued ID document images, or browsing history. Our automated photo screening (above) does not extract or retain facial recognition data or any other biometric identifier — it only detects whether a face or person is present, in order to reject the photo, and never identifies who it is.
Section 3
How We Use Your Data
- To provide the service — your photos and incident data are sent to our AI service (Claude and/or Gemini, depending on current configuration) to generate your forensic report
- To screen uploaded photos — every photo is automatically analyzed as described above, solely to confirm it shows a vehicle and reject it otherwise
- To verify your identity — your mobile number is used to send a one-time verification code via Twilio, or your email via our notification service if you sign in that way instead
- To stamp your reports — your masked mobile number and agreement timestamp are printed on every report you generate as an authenticity record
- To process payment — if you select a paid tier, your payment is processed by Dodo Payments; we receive confirmation of payment but never your card details
- To prevent abuse — rate limiting by phone number prevents excessive API usage
- To display local pricing and terms — your IP-derived country is used to show prices in your local currency and display jurisdiction-relevant legal terms
We do not use your data for advertising, profiling, or any purpose beyond operating this service.
Section 4
Who We Share Your Data With
Sub-processors
- Anthropic (Claude API) and Google (Gemini API) — receive your photos and incident data to generate the forensic analysis, depending on current provider configuration. Anthropic's privacy policy: anthropic.com/privacy · Google's privacy policy: policies.google.com/privacy
- Twilio Verify — receives your mobile number to send OTP verification codes. Twilio's privacy policy: twilio.com/legal/privacy
- Dodo Payments — processes payments for paid reports, as our Merchant of Record. Dodo Payments' privacy policy: dodopayments.com/legal/privacy-policy
- Supabase — stores account, session, and report data on our behalf, including reports saved for tiers where retention is enabled (see Section 5). Supabase's privacy policy: supabase.com/privacy
- livingiq-auth — our own central service (shared internally across our LivingIQ apps) that relays authentication, payment, and notification requests to Twilio, Dodo Payments, and our email provider on AccidentIQ's behalf; it does not independently retain your data beyond what's needed to complete those handoffs
- Vercel — hosts the frontend application. Vercel's privacy policy: vercel.com/legal/privacy-policy
- Render — hosts the backend API. Render's privacy policy: render.com/privacy
Legal disclosure
We may disclose your data if required by applicable law, court order, or government authority. We will notify you where legally permitted to do so.
We do not sell your data to any third party.
Section 5
Data Retention
Session data — exists only in your browser memory and is cleared when you close the tab or refresh the page.
Uploaded images and incident data — sent to our AI service (Claude and/or Gemini) for analysis. How long the images themselves persist depends on that provider's own processing, not something we control beyond the request itself.
Generated reports — retention is configured per tier and may change; where enabled for a tier, a saved report (including its photos and the vehicle information you entered) is stored on our servers so it remains accessible via a shareable link after your session ends, for a defined number of days before automatic deletion. Where retention is not enabled for a tier, nothing is retained beyond generation; downloading the PDF is the only way to keep a copy in that case.
Server logs — retained for up to 30 days for security and rate-limiting purposes, then deleted.
Payment records — Dodo Payments retains payment transaction records as required by applicable financial regulations. We retain transaction IDs (not card details) in server logs for the same 30-day period.
Section 6
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to access — request a copy of data we hold about you
- Right to erasure — request deletion of your data (note: session data is already ephemeral)
- Right to rectification — request correction of inaccurate data
- Right to object — object to certain uses of your data
- GDPR rights (EU residents) — all of the above rights apply under the General Data Protection Regulation
- DPDPA rights (India residents) — rights under India's Digital Personal Data Protection Act 2023 apply
To exercise any of these rights, contact us at the details in Section 11. We will respond within 30 days.
Section 7
Security
- All data is transmitted over HTTPS (TLS encryption)
- Our API key (used to call Claude) is stored server-side only — never exposed to your browser
- Session tokens are cryptographically signed (HMAC-SHA256) and expire after 24 hours
- Rate limiting prevents brute-force attacks on OTP verification
No system is 100% secure. If you discover a security vulnerability, please contact us responsibly at the details below.
Section 8
Cookies
AccidentIQ does not use tracking cookies or advertising cookies. The application uses in-memory session state (not cookies) to maintain your login session. No data is written to your browser's persistent storage (localStorage or cookies) by default.
Section 9
Children
AccidentIQ is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our service, please contact us and we will delete it promptly.
Section 10
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will display a notice within the application. Continued use of the service after a change constitutes acceptance of the updated policy.