Privacy Notice

1. Who we are. WILLIAM Clark is the data controller for the personal data processed through the WILLIAM Clark service.

2. Data we collect.

• Account data — email address, authentication identifiers, timestamps.
• Vehicle data — year, make, model, mileage, and nickname you save.
• Diagnosis data — the symptoms you describe, ZIP code (if provided), and the AI-generated diagnosis output.
• Usage and device data — IP address, browser and device information, timestamps, and technical logs for security and troubleshooting.
• Payment data — collected by Paddle (our Merchant of Record), not by us. We only receive a transaction identifier and status.

3. How we use your data.

• To provide the Service (generate diagnoses, save your vehicles, remember your account).
• To operate the paid Lifetime tier and enforce entitlement.
• To improve the Service, monitor for abuse, and secure our systems.
• To communicate with you about your account and service updates.
• To comply with legal obligations.

4. Legal basis (UK/EEA). We process personal data to perform our contract with you (providing the Service), on the basis of our legitimate interests (security, product improvement), and to comply with legal obligations. Where required, we rely on your consent.

5. Data sharing. We share personal data with:

• Hosting and infrastructure providers who run our servers and databases.
• AI model providers who process your diagnostic inputs to produce outputs.
• Paddle.com, our Merchant of Record, for payments, tax compliance, subscription management, and invoicing.
• Professional advisers (legal, accounting) when required.
• Authorities where required by law.

6. International transfers. Your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Retention. Account and diagnosis data is retained while your account is active and for a reasonable period after closure, then deleted or anonymised.

8. Your rights. Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or port your data; to object to processing; to withdraw consent; and to complain to a supervisory authority. Contact us to exercise these rights. We respond within one month.

9. Security. We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect your data.

10. Cookies. We use strictly necessary cookies to keep you signed in and to secure sessions. We do not use advertising cookies.

11. Contact. For privacy questions or requests, contact us via the support link in the app.