Privacy Policy
Effective date: May 1, 2026 Last updated: May 1, 2026
The short version
- Who we are. RedlineX is a platform for documenting real vehicle builds and work. RedlineX LLC is responsible for your data.
- What we collect. The account and profile info you give us, the vehicles and work you document, the media you upload, your messages, what you do on the platform, and limited technical/device data. If you verify your identity or pay for a subscription, our payment and verification providers handle that data.
- Why. To run the platform, keep it safe and authentic, process payments, and improve the product.
- AI. Our AI features (Q&A and recommendations) use your content to answer you — we do not use your content to train AI models.
- Sharing. We don't sell your personal information. We use a short list of vetted service providers, named in our Sub-processors list.
- Your rights. You can access, export, correct, or delete your data — directly in Settings → Privacy. EU/UK and California residents have additional rights described below.
- Contact.
privacy@redlinex.app.
1. Who we are (data controller)
RedlineX LLC ("RedlineX", "we", "us", "our"), a Delaware limited liability company located at [PRINCIPAL ADDRESS], is the controller of personal data processed through the RedlineX website, web app, and mobile apps (together, the "Service").
- EU representative (GDPR Art. 27): [EU REPRESENTATIVE]
- UK representative (UK GDPR Art. 27): [UK REPRESENTATIVE]
- Data Protection contact:
dpo@redlinex.app
2. The information we collect
2.1 Information you give us
- Account & authentication. When you sign up, we use our authentication provider to create and secure your account. We receive your email address, a unique identifier, and authentication metadata. If you sign in with a social or third-party login, we receive the basic profile data you authorize.
- Profile. Username, display name, bio, avatar, location, website, and your interests.
- Vehicles & work content. The vehicles you add (year/make/model/trim, type, specs) and the work you log (modifications, maintenance, upgrades, parts, performance data, notes, stories) — the core of what RedlineX is for.
- Media. Photos and other media you upload. Media files can contain embedded metadata (for example, EXIF data such as capture time and, in some cases, location). See §2.4.
- Communications. Direct messages, comments, group posts, support requests, and reports you submit.
- Marketplace & business data. If you operate a business entity (Garage, Dealer, or Parts Shop) or create listings, the information you provide for those, including specialties, categories, and listing details.
- Identity verification. If you choose to verify your identity, our identity-verification provider collects and verifies government ID documents and a selfie/biometric check. We do not receive or store your raw ID documents — we receive only the verification result (verified / not verified) and limited associated metadata.
- Payments. If you subscribe to a paid plan or buy promoted placement, our payment processor collects your payment details. We do not receive or store your full card number — we receive limited billing metadata (e.g., plan, status, last four digits, country).
2.2 Information we collect automatically
- Usage data. Pages and content you view, actions you take (reactions, follows, comments, votes), feature use, and timestamps.
- Device & technical data. IP address, device and browser type, operating system, app version, language/locale, and similar diagnostic data.
- Cookies & local storage. See our Cookie Policy.
- Error & performance data. We use our error- and performance-monitoring provider to capture crash and error diagnostics. We configure it to minimize personal data (PII collection off, session replay off); some technical identifiers may still be processed.
- Product analytics. With your consent, we use our analytics provider to understand feature usage and (at a sampled rate) record session replays to improve the Service. This is off until you accept non-essential cookies.
- Logs. Server logs (via our cloud infrastructure provider) used for security, debugging, and abuse prevention.
2.3 Information from third parties
- Identity and login data from our authentication provider and any social login you use.
- Subscription/payment status from our payment processor.
- Vehicle catalog reference data we obtain from public and third-party vehicle data sources used to enrich the vehicle catalog — this is reference data about vehicles, not about you.
2.4 Location & media metadata
We do not require precise GPS tracking. Location may be processed when: (a) you enter a location in your profile or a listing; (b) you use map features powered by our maps and geocoding provider; or (c) media you upload contains embedded location metadata. You can remove location metadata from files before uploading.
3. How we use your information
We use personal data to:
- Provide the Service — create your account, host your vehicles, work, media, messages, listings, groups, and events.
- Operate AI features — power Q&A and recommendations (see §5).
- Keep RedlineX authentic and safe — detect spam, fake engagement, duplicate/stolen content, and abuse; moderate content (including automated image moderation via our image-moderation provider); enforce our Terms of Service and Community Guidelines.
- Process payments and verification — manage subscriptions, promoted placements, and identity verification.
- Communicate with you — service notifications, security alerts, support replies, and (where permitted) product updates, via our email delivery provider and in-app notifications.
- Improve the Service — understand usage and fix problems. (We do not use your content to train AI models — see §5.)
- Comply with law — meet legal obligations and respond to lawful requests.
4. Legal bases for processing (EU/UK — GDPR)
Where the GDPR or UK GDPR applies, we rely on:
| Purpose | Legal basis |
|---|---|
| Providing the Service you sign up for | Performance of a contract (Art. 6(1)(b)) |
| Payments, verification, subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Security, anti-abuse, moderation, product improvement | Legitimate interests (Art. 6(1)(f)) |
| Non-essential cookies & optional marketing | Consent (Art. 6(1)(a)) |
| Legal/regulatory compliance | Legal obligation (Art. 6(1)(c)) |
| Identity/biometric verification | Consent and/or legal obligation; special-category safeguards where applicable (Art. 9) |
You may withdraw consent at any time where processing is based on consent.
5. AI features and your content
RedlineX offers AI-powered features, including a Q&A assistant and recommendations, built using our AI provider and vector search over content on the platform.
- We send relevant content to our AI provider's API to generate responses to you.
- We do not use your content, photos, or work to train AI models, and our AI provider processes this content via its API without using it to train its models.
- AI outputs can be imperfect; do not rely on them for safety-critical mechanical decisions.
6. Service providers and sub-processors
We share personal data with a short list of vetted providers who process it on our behalf under contract — for example, our authentication provider, payment processor, cloud infrastructure provider, and AI provider. We do not sell your personal information.
The current, named list — including each provider's role and the data involved — is maintained in our Sub-processors document, which we update as our providers change.
7. How we share information
We do not sell your personal information. We share it only:
- with the service providers in our Sub-processors list;
- publicly, for content you choose to make public (your public profile, public vehicles, work, listings, comments) — this is visible to anyone;
- with other users, per your settings and actions (e.g., messages, group posts, followers);
- for legal reasons — to comply with law, enforce our terms, or protect rights, safety, and security; and
- in a business transfer — if RedlineX is involved in a merger, acquisition, or sale of assets, subject to this policy.
8. International data transfers
RedlineX is based in the United States and uses providers in multiple countries. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) and, where applicable, the UK Addendum.
9. Data retention
We keep personal data only as long as needed for the purposes above, then delete or anonymize it. In general:
| Data | Retention |
|---|---|
| Account & profile | While your account is active |
| Vehicles, work, media, posts | While your account is active, unless you delete them sooner |
| Soft-deleted content (trash) | Recoverable for a limited window, then purged |
| Direct messages | While your account is active |
| Identity verification result | As required for verification and legal/compliance purposes |
| Payment/subscription records | As required by tax, accounting, and legal obligations |
| Server/security logs | A limited rolling period |
| Abandoned uploads | Cleaned up automatically by routine jobs |
When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or fraud-prevention reasons.
10. Your rights and choices
You can access, export, correct, and delete your data directly in Settings → Privacy, which provides self-service data export and account deletion.
10.1 EU/UK (GDPR) rights
You have the right to: access; rectification; erasure ("right to be forgotten"); restriction; data portability; objection (including to processing based on legitimate interests); and to withdraw consent. You may also lodge a complaint with your local supervisory authority.
10.2 California (CCPA/CPRA) and other US state rights
If you are a California resident (or covered by a similar US state law), you have the right to: know/access the personal information we collect; delete it; correct it; and opt out of "sale" or "sharing" of personal information and of targeted advertising. We do not sell your personal information, and we honor opt-out preference signals (e.g., Global Privacy Control) where required. We will not discriminate against you for exercising these rights.
10.3 How to exercise your rights
Use Settings → Privacy for export and deletion, or contact
privacy@redlinex.app. We may need to verify your identity before acting on a
request. You may use an authorized agent where the law allows.
11. Security
We use technical and organizational measures to protect your data, including encryption in transit, access controls, rate limiting, automated abuse detection, and a reputable identity provider. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you and regulators of breaches where required by law.
12. Children
RedlineX is not intended for anyone under 16. We do not knowingly collect
personal data from children under 16. If you believe a child has provided us
personal data, contact privacy@redlinex.app and we will delete it.
13. Changes to this policy
We may update this policy. If we make material changes, we will notify you (for example, by in-app notice or email) and update the "Last updated" date. Your continued use after changes take effect means you accept the updated policy.
14. Contact us
- Privacy questions:
privacy@redlinex.app - Data Protection:
dpo@redlinex.app - Mailing address: RedlineX LLC, [PRINCIPAL ADDRESS]