Privacy

What we hold, and who sees it.

Last updated 7 August 2026. This describes EstimateLogic Pro as it actually works today, checked against the code rather than adapted from a template. Where something is imperfect it says so.

Who we are

EstimateLogic Pro is operated by Corsa Automotive, Orlando, Florida. Questions about anything on this page, including a request to delete data, go to [email protected].

What we collect

Accounts are created by hand, one at a time. There is no signup form, no trial funnel and no automated onboarding sequence.

Your account
Your email address, your name, your shop name, and the date you last signed in. Your password is stored only as a bcrypt hash at ten rounds. We never hold it in a form we can read, which is also why a forgotten password has to be reset rather than looked up.
Each estimate
The vehicle’s VIN, year, make, model and trim, the odometer reading if you enter one, the photos you take, the estimate the model produces, and any corrections you save. Corrections are stored alongside the original rather than replacing it, so the model’s first answer can be measured against what the shop actually decided the job was worth.
If you ask for access
The name, email, shop name, phone number and message you type into the request form.

The photos are of someone else’s car

This matters more here than in most software. The photographs you upload are of your customers’ vehicles, and a VIN identifies a specific car and, through it, often a specific person. A photograph of a damaged vehicle can also catch a licence plate, a driveway, or a document left on a seat.

You are responsible for having the right to photograph and upload the vehicles you put into this product. We use those photographs only to produce the estimate you asked for and to let you open it again later.

Who we send it to

This is the complete list. Every one of these is a service the product needs to do its job, and none of them is advertising.

Google (Gemini API)
Receives: The damage photos, and the vehicle year, make, model and trim.
Why: This is the model that reads the photos and writes the estimate. There is no estimate without it.
Cloudflare (R2)
Receives: The damage photos, stored.
Why: So an estimate can be re-run on the same shoot without walking back out to the car.
NHTSA vPIC (US Department of Transportation)
Receives: The VIN.
Why: It decodes the VIN into year, make and model. It is a free public government service.
VinAudit
Receives: The VIN and the odometer reading.
Why: Market value, so repair cost can be measured against what the vehicle is worth.
eBay, and Apify
Receives: Part names and vehicle details. No VIN, no photos, no customer information.
Why: Looking up what a part actually sells for.
Expo (push notifications)
Receives: A device push token, if you use the iPhone app and allow notifications.
Why: To tell you an estimate has finished. It carries no vehicle or customer data.

What we do not do

Two things you should know

Photo links are not password protected

Your photos are stored at web addresses containing a random identifier. The storage cannot be browsed or listed, so the addresses cannot be discovered or guessed in practice, but anyone you send one of those links to can open the photo without signing in. Treat a photo link like a document, not like a page behind your password. We intend to move these behind signed, expiring links.

Estimates are kept until you ask us to delete them

There is no automatic expiry today. Estimates and their photos stay on file so you can reopen a job months later, which is what a shop usually wants and is also, plainly, longer than some of them need to exist.

Closing your account, and erasing your data, are two different things

Closing your account can be done yourself, in the iPhone app under Settings, or by emailing us. It signs you out on every device and permanently removes your sign-in: your email address, your password and your name are deleted, and the account cannot be reopened. Estimates already written stay on file as the shop’s business records, still attributed to the shop, because a completed estimate is a record of work done on someone’s vehicle and closing a login is not a reason to destroy it.

Erasing your data is separate, and you are entitled to it. Email us and we will delete a single estimate, a vehicle, or everything we hold about you including the estimates, within thirty days. You do not need to give a reason, and you do not need to close your account to ask.

How it is protected

Everything travels over HTTPS. The database is not reachable from the internet. Passwords are bcrypt hashed. Sign-in attempts are rate limited. Your estimates are scoped to your account inside the database query itself, so another shop’s estimate is not merely hidden from you, it cannot be fetched.

No system is perfect and we will not pretend otherwise. If you find a way to reach data that is not yours, email us and we will treat it as the emergency it is.

Asking us to do something about it

Email [email protected] and ask for a copy of what we hold about you, a correction, or deletion. We will answer within thirty days. You do not need to give a reason, and asking will not affect your account.

The product is used by repair shops in the United States. If you are covered by a privacy law that gives you rights beyond the above, tell us which one and we will honour it.

Children

This is a tool for collision repair professionals. It is not directed at children and we do not knowingly collect anything from anyone under 13.

When this changes

If we add a service that receives your data, it gets added to the list above at the same time, not later. If a change is significant we will email the address on your account rather than quietly editing this page and moving the date.

EstimateLogic Pro · Corsa Automotive · Orlando, Florida