Privacy policy
Last updated 7 October 2026
Draft: company details are still missing and the text hasn't been reviewed by a lawyer yet.
This policy explains what personal data TuneInspect stores, why, who else handles it, and how you see, download or delete it. The short version: we store what the site needs to work for you, your log files stay in your browser unless you attach one to an order, and you can close your account yourself.
1. Who is responsible
The data controller is [company name] (org. no. [org. number]), [address], email [contact email]. Contact us at that address with questions or requests about your data.
2. What we store and why
| What | Details | Why (legal basis) |
|---|---|---|
| Account | Email address, password (stored encrypted by our login provider), role (car owner, tuner, admin) and plan. | To give you an account and the features of your plan (contract). |
| Contact details | Name, phone number, address, and company name and registration number, if you enter them under Account. Admins can correct them on request. | To reach you about your account and orders, and for invoices once payments are on (contract). |
| Garage | Cars you add: name, make, model, engine, setup, mods and weight. | To save your cars and compare logs (contract). |
| Saved reports | The calculated result of each log you save: measurements, findings, charts and the log's file name, and a reduced copy of the logged channels over time (at most 3,000 points per channel) for the log viewer. The log file itself is read in your browser and isn't uploaded. Lines with VIN, plate or owner are removed when the log is read. | To show your history and changes between logs (contract). |
| AI reviews | The review text, and a count of how many you've used. | To give you the AI review and apply plan limits (contract). |
| Feedback | Your marks on findings (right, partly, wrong, missed) and the cause and fix you write. | To make your future AI reviews more accurate (contract). |
| Case summaries | What a tuner writes when delivering an order (symptom, cause, fix, result), the customer's answer whether it solved the problem, and the engine, flash tool and findings of the ordered report. | Shown to both sides of the order (contract). If the tuner chooses to share it, kept anonymously in a case library the AI review uses as examples (legitimate interest). |
| Orders | Orders, messages, offers, the tuner's assessment and ratings. Phone numbers, emails, links and handles are hidden automatically in text. | To run orders between you and a tuner (contract) and to keep deals on the platform (legitimate interest). |
| Files on orders | Files the customer or the tuner attach to an order, such as logs (with VIN, plate and owner lines removed) and tune files. | So both sides of the order can do and deliver the work (contract). |
| Tuner profile | Company, location, services and prices, the details given in the application, and the bootmod3 and EcuTek names (shown to a customer only inside an accepted order with that tool). | To show tuners, check applications and hand over tunes (contract, legitimate interest). |
| Shared links | Which report a link belongs to and how many times it was opened. | So you can share a report and turn the link off (contract). |
| Notifications | Messages in the bell, e.g. a new order or message. | To tell you when something happens (contract). |
| Support tickets | Tickets you open (subject, category, the order it's about) and the messages in them, plus earlier messages with our support (admins). | To answer questions and handle your account (contract, legitimate interest). |
| Admin records | Notes TuneInspect admins write about an account, a log of changes admins make (plan, status, roles, tuner approval, which contact details were changed, password reset emails sent), and attempts to share phone numbers, emails, links or handles in orders, offers, ratings or listings (the text as written; the other party only sees it masked). | To run the platform, keep it safe and enforce the terms (legitimate interest). |
| Account status | Whether the account is active, suspended or closed, when, and the reason. | To enforce the terms and handle closed accounts (legitimate interest). |
| Logs analyzed without an account | When TuneInspect lets visitors try it without an account, only the calculated result is kept: measurements, findings, charts, the logging tool and the engine typed. The file name and car name are replaced, the log file is never uploaded, and nothing links it to a person or device. | To improve the analysis, rules and limits for each engine and tool (legitimate interest). As it can't be linked to anyone, it isn't personal data. |
| Marketing emails | Whether you agreed to news and offers by email, and when. Off unless you tick the box at sign-up or under Account. | To send news and offers from TuneInspect and KingKong Tuning (consent, which you can withdraw any time under Account). |
| Technical data | IP address and browser information in server logs at our hosting provider; error logs. | Security and fixing problems (legitimate interest). |
Logs are read in your browser; the log file itself is never uploaded unless you attach it to an order.
Note that some tools put the car's ECU serial or similar in the file name. The file name is saved with the report, but it is replaced with "Shared log" when you share the report.
3. Who can see your data
- You. Your garage, reports and feedback are visible only to you.
- A tuner you order from sees the report you ordered a review of, files you attached, and the messages in that order, while the order is open or delivered. Tuners don't see your name, email or the rest of your garage.
- Anyone with a share link you created sees that report (and the AI review if you included it), until you turn the link off.
- Everyone can see approved tuner profiles and ratings, without the name of the person who rated.
- The AI review, for other users uses case summaries that tuners chose to share, without names, the chat, the car's name or plate, or who the customer was.
- TuneInspect admins can see accounts (email, contact details, plan, status, log-in dates), cars, saved reports, tuner applications, orders and messages, to run the platform, help you and handle misuse.
How we use data to improve TuneInspect
TuneInspect is free, and part of how we keep improving it is by learning from the logs analyzed on it. We use the calculated results of saved reports, anonymous results of logs analyzed without an account, and the feedback you give on findings to check and adjust the analysis: the rules, the limits per engine and tool, how columns are recognized, and how the AI review explains findings. Wherever possible we do this with data that can't be linked to you, and we publish only summaries that can't be traced to a car or a person (for example, typical boost deviation on a certain engine).
This is based on our legitimate interest in making the analysis more accurate. You can object at any time by contacting us; we then stop using your saved reports for this. We don't sell your data, and we don't train our own AI models or let our AI provider train on it.
Messages and the AI
The messages between a customer and a tuner are only used to run the order, and read by admins only for support or to handle misuse. They are never sent to the AI or used to improve it. What improves the analysis is the feedback you give on findings and the case summaries tuners choose to share anonymously.
4. Providers that handle data for us
| Provider | What for |
|---|---|
| Supabase | Database, login and file storage |
| Vercel | Hosting of the website and its server functions |
| Anthropic | The AI review: receives the calculated analysis (findings, downsampled charts, the car's setup, your recent results and your feedback), never the raw log file or your name or email. Anthropic doesn't train its models on this data. |
They process data on our behalf under data processing agreements. Some of them are based in the US. When data is transferred outside the EU/EEA, the transfer relies on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. When payments are switched on, Stripe will handle card payments; card details never reach TuneInspect. This list will be updated before any new provider is used.
5. Cookies and browser storage
TuneInspect uses no advertising or tracking cookies and no analytics tools. Your browser stores your login session and, for logs from unknown tools, the column mapping you confirmed, so you don't have to confirm it again. Both are needed for the site to work and stay on your device.
6. How long we keep data
- Your data is kept as long as you have an account. You can delete single cars, reports and share links at any time.
- When you delete your account, it is closed straight away: you can't log in, share links are turned off and a tuner profile is hidden. For 30 days nothing else is removed, so we can reopen the account if you change your mind.
- After 30 days (or sooner if you ask us) your identity is removed: login, email, profile, contact details, admin notes and recorded contact sharing attempts, tuner profile, notifications and messages with us are deleted. The technical data from your cars, saved reports and feedback is kept without any link to you; car names and file names are replaced first. Data that can't be linked to a person is no longer personal data, and we use it to improve the analysis.
- Finished orders stay for the other party (the tuner or the customer), without your account attached, so they keep their history. Your messages in them stay, without your name. Ratings stay, without your account. Shared case summaries stay in the library; they never contained your name. Log files attached to orders stay with the order, with VIN, plate and owner lines already removed.
- If we suspend an account for breaking the terms, its data is kept until the account is reactivated or closed.
- Backups at our database provider are overwritten within a few weeks.
- When payments are switched on, payment records are kept as long as Swedish bookkeeping law requires (seven years).
7. Your rights
- See and download your data: under Account you can download everything we store about you as a file.
- Correct it: edit your cars, profile and tuner profile directly on the site, or contact us.
- Delete it: delete reports and cars yourself, or your whole account under Account. If you want your identity removed straight away instead of after 30 days, write to us.
- Object or restrict: contact us if you think we use your data in a way we shouldn't.
- Complain: you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
8. Security
Data is sent encrypted (HTTPS). The database only lets each user read and change their own data, attached log files are private and downloaded through links that expire after 60 seconds, and the AI provider is only reached from our server.
9. Changes
We update this policy when the way we handle data changes, and tell you on the site or by email about important changes.
See also: Terms of service · Privacy policy