Privacy Policy 2026 - European Collision Center

European Collision Center (“European Collision Center,” “we,” “us,” or “our”) operates the European Collision Center mobile application (the “App”) and related services (together, the “Services”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

The App is invite-only. Customer accounts are created by the European Collision Center team, and invited users receive an email link to complete their account setup. The App does not offer public self-registration.

By creating an account or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Who we are

The data controller responsible for your personal information is:

European Collision Center

180 12th St., San Francisco, CA 94103

200 Shaw Road, South San Francisco, CA 94080

Email: info@europeancollision.com

Phone: 415.551.9700

Website: https://www.europeancollision.com

2. Information we collect

2.1 Information you provide

Account and profile information — your name, email address, and phone number. For business (B2B) accounts, this may also include your business name, business phone, and business email. You may add a profile picture.
Authentication information — a password you create (stored only in hashed form) and one-time verification codes sent to your phone or email to confirm your identity.
Estimate request information — the Vehicle Identification Number (VIN) and vehicle details (year, make, model, trim, body class, engine, vehicle type, doors); whether the vehicle is drivable, when the damage occurred, and whether it is insurance-related; insurance company name and claim number (if you provide them); the damage areas and any description or notes; and your preferred contact method and shop location.
Photos and documents — vehicle and damage photos you capture or upload through the App’s guided photo categories, and documents associated with your request. Estimate documents prepared for you are made available in the App.

2.2 Information collected automatically

device type (iOS, Android, or web), device model, and operating system version;
App version and build number;
a device identifier and locale/language setting;
browser user-agent (for web access);
a push notification token (if you enable push notifications);
log and diagnostic data such as activity timestamps and approximate network information (e.g., IP address) used to operate and secure the Services.

2.3 Camera and photo access

The App uses your device camera and photo library only to let you scan a vehicle barcode/VIN and capture or select vehicle and damage photos for your estimate request. Barcode/VIN scanning and on-device photo-framing guidance are processed on your device; the photos you choose to submit are uploaded to our Services as part of your request. We do not access your camera or photos for any other purpose.

2.4 Information from third parties

Vehicle data — when you enter or scan a VIN, we may retrieve vehicle specifications from the U.S. National Highway Traffic Safety Administration (NHTSA) vehicle database.
Invitation information — the administrator who invites you provides your initial name, email, and (optionally) phone number so your account can be created.

We do not collect precise (GPS) location, contacts, health data, or financial/payment information. The App contains no advertising and does not sell your personal information.

3. How we use your information

create and manage your account and verify your identity;
receive, process, review, and respond to your vehicle damage estimate requests;
prepare and deliver estimate documents and track request status;
send service communications (verification codes, status updates) by push, email, or SMS per your preferences;
decode VINs and pre-fill vehicle details;
operate, maintain, secure, troubleshoot, and improve the Services;
keep records for audit, dispute-resolution, and legal-compliance purposes.

Our legal bases (where applicable) are performance of our agreement with you, your consent (e.g., for push notifications), our legitimate interests in operating and securing the Services, and compliance with legal obligations.

4. Notifications and communications

With your permission, we send push notifications (request and estimate status updates) and email/SMS (verification codes, invitations, status updates). You can manage email, SMS, and push preferences in the App or your device settings. Certain essential messages (such as security or verification codes) are required to use the Services and cannot be turned off while your account is active.

For SMS specifically, message frequency varies and message and data rates may apply. You may opt out of SMS at any time by replying STOP, or reply HELP for help.

5. How we share information

We do not sell your personal information. We share it only as follows:

Service providers under contract: Amazon Web Services (AWS) (secure cloud storage and transactional email), Google Firebase Cloud Messaging (push notifications), our SMS provider (one-time codes and text notifications), and NHTSA (VIN decoding).
Within European Collision Center — staff and administrators access your request information to prepare your estimate.
Legal and safety — when required by law or to protect rights, property, or safety.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

6. Data retention

We retain your personal information for as long as your account is active and as needed to provide the Services, and thereafter as required for legitimate business purposes such as recordkeeping, dispute resolution, and legal compliance. When information is no longer needed, we delete or de-identify it. You may request deletion as described in Section 8.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (HTTPS/TLS), hashed password storage, access controls, and role-based access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, object to or restrict certain processing, withdraw consent, and request data portability.

California residents (under the CCPA/CPRA) have the right to know what personal information we collect and how it is used and shared, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising.

To exercise any right, or to delete your account, contact us at info@europeancollision.com. We will verify your request and respond within the time required by applicable law.

9. Children’s privacy

The Services are intended for adults and are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. International users

We operate in the United States, and your information is processed and stored there. If you access the Services from outside the United States, you understand your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the App or by email. Continued use after an update means you accept the revised policy.

12. Contact us