Legal
Privacy Policy
Last updated: 1 August 2026
This policy explains what personal data Weglam processes when you buy credits, run a diagnosis or contact support, why we process it, and the rights you have over it.
01Who we are
Weglam provides AI-assisted vehicle diagnostics. The service is operated by Weglam sp. z o.o., Wrzosowa 15, 58-100 Pszenno, Poland — the data controller for the personal data described in this policy.
Contact: [email protected] · +48 74 857 50 14 · weglam.app.
02Data we collect
We keep collection to the minimum required to deliver a diagnosis and an order.
- Account data: first name, last name, email address and a hashed password.
- Order data: credits purchased, currency, promo code, payment method and payment status.
- Vehicle data: make, model, year, engine, mileage and optional VIN.
- Diagnostic uploads: photos, audio recordings, symptom descriptions and OBD-II readings.
- Technical data: device type, browser, IP address and essential cookie identifiers.
03How we use your data
We process diagnostic uploads to produce a diagnosis, account and order data to fulfil credit purchases and issue invoices, and technical data to keep the service secure and available.
04Legal bases
Performance of a contract for account, order and diagnostic processing; legitimate interest for security, fraud prevention and service improvement; consent for optional analytics cookies; and legal obligation for accounting records.
05AI processing
Diagnostic uploads are processed by AI models to generate an assessment. Output is informational and does not replace an inspection by a qualified mechanic. We do not use your uploads to train third-party public models.
06Sharing
We share data with hosting, payment and email providers acting as processors under contract. We do not sell personal data and we do not share it with advertisers.
07Retention
Diagnostic uploads are retained for 24 months so you can revisit your vehicle history. Order and invoice records are retained for the statutory accounting period. Deleting your account removes diagnostic data within 30 days.
08Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. You can also withdraw cookie consent at any time and lodge a complaint with your supervisory authority.
09Security
Data is encrypted in transit, access is limited to the staff who need it, and passwords are stored using one-way hashing with a minimum length of eight characters.
10Changes
If this policy changes materially we will notify you by email before the change takes effect.