Privacy Policy

Last updated 6 August 2026. This policy explains what AutoBrain collects, why, and how it is kept safe.

What we store

AutoBrain stores the data you enter about your vehicles and activity, in the database you choose to run on:

  • Account details — email, display name, security settings (including MFA).
  • Vehicle records — registration (rego), VIN, make, model, year, colour, body type, odometer.
  • Maintenance data — service history, fuel logs, logbook trips, parts inventory, modifications, receipts.
  • Receipt and document images you upload for scanning.

We never store your payment card details. Payments on the hosted service are processed by Stripe.

What the AI sees

When you use an AI feature (diagnostics, service prediction, receipt OCR, fuel OCR, odometer reading, resale estimate or mod impact), the relevant snippet of your data is sent to the AI router configured for that server to produce the result. See How the AI uses your data for the full breakdown.

  • We do not sell your data, and we do not use it to train models.
  • Self-hosted instances never send anything anywhere unless you configure an AI router.
  • If the AI router is unreachable, the app falls back to on-server rules — your data stays put.

How we keep it secure

  • Passwords are hashed; two-factor authentication (TOTP) is enforced on the hosted service.
  • Role-based access control — only administrators can provision accounts on self-hosted instances.
  • Data is stored on your chosen infrastructure; the hosted service runs in your operator's own environment.
  • Daily encrypted backups with retention, plus one-click full profile export.
  • Self-hosting means you can keep everything completely air-gapped if you want.

The hosted service

When you use AutoBrain's hosted plans, your data lives in our managed environment — we run the same open-source engine for you, and we are responsible for keeping it up, secure and backed up.

  • Full isolation between accounts — every record is scoped to your account and your vehicles. No user can see, search or access another user's data, and only your own credentials can reach your account.
  • Login security — MFA (TOTP) is required, sessions are short-lived, and access is role-based and admin-provisioned.
  • Backed up across physical locations — regular backups are stored across physically separate locations, so a single site failure cannot lose your records.
  • Your data stays yours — export a full profile any time, or delete your data and we remove it.

Who runs AutoBrain

AutoBrain is a product of Perfection IT Services, based in Victoria, Australia.

Your rights & contact

You can export or delete your data at any time from the app, or email us and we will help.

Contact us about your data