Privacy

This page says what Itidem stores, why, where it goes and how long it stays. It describes the product as it is built today. If something here is unclear, write to us.

What we store about you

• Your account: your email, your account and company name, and the company details you fill in (VAT number, billing address, billing email).
• Your password, as a scrypt hash. We never store the password itself.
• Your sessions: the SHA-256 of each session token, when it started and was last used, and a coarse device label like “Chrome on macOS”.
• Failed sign-ins and sign-up attempts, counted per email in 15-minute windows, to slow down password guessing. When Itidem runs behind a proxy it trusts, the address you connect from is counted the same way.
• Your credits: every grant, hold, charge and return, so the balance can be checked.
• A contact message, if you send one: your name, email, company, topic and message. Behind a trusted proxy, also a SHA-256 of the address it came from, never the address itself, to limit how often one address can write.

Your photos and vehicles

The photos you upload, the vehicle records, the renders and the verdicts are stored by Itidem’s render service. Every job and upload carries your account, and another account cannot list, open or download them. An upload that no vehicle uses is removed after 24 hours (the default setting).

To make a render, the render service sends reference photos of your vehicle and an instruction built from the vehicle record to Google’s Gemini image API. The checks run on Itidem’s own machines.

How long it stays

• A session ends after 7 days, or when you sign out.
• Your account, vehicles, photos, renders, credit history, sign-in counts and contact messages have no automatic deletion yet. A sign-in count stops mattering after 15 minutes, but the row stays. All of it stays until it is removed by hand. Ask us, and we remove it.

Cookies

Itidem sets one cookie: the session cookie that keeps you signed in. It is httpOnly and SameSite=Lax. There are no analytics, advertising or tracking cookies, and the fonts are served by Itidem, not by a font service.

Who can see your data

People on your account, and the people who run Itidem when they need to help you or keep the service working. We do not sell your data.

Your choices

You can change your password and sign out of any session on the Account page. To change your email, close your account or get a copy of your data, contact us; these are not self-service yet.