How AutoDash handles your information

Who we are

AutoDash (“we”, “us”) is a service that helps people turn vehicle photos into short listing videos. It is operated by Hristo Lilkin, an individual based in Bulgaria currently operating as a sole trader, who is the controller of your personal data. For privacy questions or data requests, email hristo@autodashapp.com.

Information we collect

Depending on how you use AutoDash, we may process: account details from our sign-in provider (such as name and email); listing links and details you enter or import (for example vehicle model, year, mileage, and price); photos, logos, captions, and videos you create; payment and credit-purchase records handled by our payment processor; optional marketing attribution parameters (for example UTM tags); and basic technical data needed to run and secure the service (such as IP address, device/browser type, and error logs).

How we use information

We use this information to provide and improve AutoDash: create and store your projects, generate and edit on-screen text with automated tools, process payments and credits, keep the service secure and reliable, and respond to support requests. Uploaded photos and related listing details may be sent to third-party processing services solely to generate suggested text for your videos. You can edit or replace that text before creating a video.

Connecting AutoDash to ChatGPT

If you connect AutoDash to ChatGPT, you authorize access to your AutoDash account within the permissions shown during consent. These permissions cover reading your account and projects, importing photos and saving project choices, and generating videos using your existing credits. Clerk handles sign-in and the authorization connection. AutoDash verifies that each request has the required permission.

ChatGPT receives the results of the tools you use, including your connected account identity and email, credit balance, vehicle details, captions, and job status. The result card also receives temporary links for playing and downloading your videos. Photos you import from ChatGPT are stored and processed by AutoDash using the providers described below. Your use of ChatGPT is also subject to OpenAI’s own terms and privacy policy.

When you provide a public car listing link, AutoDash fetches its page and sends relevant listing text to Google Gemini to suggest vehicle details. Listing photos are not imported. The returned details are saved to your reel project automatically when you use the ChatGPT integration. On the website, they are suggestions until you save the project. Unavailable or missing facts can be entered manually, and saved facts can be corrected.

To diagnose integration failures, AutoDash keeps a minimal operation history: a random support correlation ID, tool name, project ID when known, caller category, outcome, a limited error code, duration and time. This history does not store tool inputs, listing or download URLs, photos, captions, credentials or raw error messages. It is used for troubleshooting and reliability, not advertising or behavioral profiling.

Disconnecting an integration or letting a download link expire does not delete the photos, projects, or videos stored in AutoDash. Use the project or account deletion controls described below to remove them, or contact us with a data request.

Connecting AutoDash to Cursor, Grok Bot, and other apps

You can connect AutoDash to Cursor, Grok Bot, grok.com, and other apps that register themselves to use your account. Only return addresses we allow can register. During consent, the app receives the permissions you approve:

• autodash:read — read your account, projects, vehicle details, captions, credit balance, and render status, including temporary links to your videos.
• autodash:write — create and edit projects, save vehicle details, captions, and photo order, and upload photos.
• autodash:render — start a reel from a project you have prepared.
• offline_access — a refresh token so the app can keep using the connection after you leave the consent screen.

Photos from these apps are sent to a signed upload address that expires after 15 minutes. The file is stored in your own AutoDash storage, under your account and the project it belongs to, and is processed with the providers described above. The connected app cannot buy credits. Each new reel uses one credit you already have. If that render fails, the credit is refunded. Reading a project, checking status, refreshing a download link, or retrying the same render request does not use another credit.

grok.com is a read-only connection until it has been tested: it can read your projects and videos, but cannot edit projects, upload photos or start renders.

Clerk issues the connection tokens. An access token expires after one day. A refresh token has no expiry of its own and stays valid until you disconnect the app or the token is revoked. An authorization code expires after 10 minutes. Disconnect Cursor in Cursor’s MCP settings. Disconnect Grok Bot under Connect apps in Grok Bot. Disconnect grok.com in grok.com. Disconnect any other connected app in that app. Disconnecting stops that app from continuing to use the connection. Photos, projects, and videos already stored in AutoDash stay until you delete them with the controls described below, or until you contact us with a data request.

A self-registered app that is never used is deleted after 30 days, together with its sign-in registration. A self-registered app that has been used is kept.

Legal bases

Where the GDPR applies, we rely on the following legal bases:

• Performing our contract with you: running your account, projects, videos, and credits.
• Our legitimate interests: keeping the service secure, preventing fraud and abuse, monitoring errors, measuring use with privacy-friendly analytics, and remembering marketing attribution.
• Legal obligations: keeping payment and tax records.

Cookies and similar technologies

We use essential cookies for sign-in and security. We may also set a short-lived first-party cookie to remember marketing attribution (such as UTM parameters) until you create an account. Our website analytics (Vercel Analytics) is designed to work without cookies. Our error monitoring (Sentry) may store a session identifier in your browser so an error can be linked to its session replay. We do not use advertising cookies.

Sharing

We do not sell your personal data. We share information only with service providers that help us operate AutoDash, and only as needed to provide the service:

• Clerk: sign-in and accounts.
• Vercel: hosting, website analytics, and the computing environment that processes photos and renders videos.
• Neon: our database.
• Cloudflare R2: storage for photos, logos, and videos.
• Stripe: payments.
• Google Gemini API: reads your selected photos to suggest on-screen captions, and reads listing page text you import to prefill vehicle details.
• Sentry: error monitoring, including session replays of a sample of visits with all on-screen text and media masked.

These providers process data under their own terms and policies. Some providers are based in or process data outside the EU/EEA (for example the United States). Where they do, transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Retention and your choices

Projects, photos, captions, and videos are kept until you delete them or delete your account. You can delete a project in the app. You can delete your whole account from the account menu, which permanently deletes your projects, photos, videos, and remaining credits. Photos you remove, and uploads that fail, are deleted automatically. Payment records are kept by our payment provider for as long as the law requires. Under our current service plans, new Sentry monitoring events, including errors and session replays, are retained for 30 days, and Vercel runtime logs for one hour. Older monitoring events may retain the retention period that applied when they were collected. Download-link expiry does not delete the underlying photo or video.

Integration operation history is scheduled for deletion after 30 days. Daily cleanup runs in bounded batches, so records may remain longer while a cleanup backlog is processed. Contact us using the privacy address below to exercise your data rights.

Your rights

You have the right to access your personal data, have it corrected or deleted, restrict or object to its use, and receive a portable copy. To exercise any of these rights, email hristo@autodashapp.com. We will respond within a reasonable time. You also have the right to complain to the data protection authority in your country.

Changes

We may update this policy as AutoDash evolves. The “Last updated” date at the top will change when we do. Continued use of AutoDash after an update means you accept the revised policy.

Contact

Privacy requests: hristo@autodashapp.com. See also our Terms of use.