Gremlin Hunter privacy notice
Draft · October 2026
DruOps Garage Consulting Ltd, 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE is responsible for the information Gremlin Hunter ("Gremlin") keeps. Contact: gremlin@druops.net.
What we keep
- Your account: name, email address, a scrambled (hashed) version of your password — never the password itself — your invite code if you have one, and when you confirmed you're 18+ and agreed to the terms.
- Your subscription: its status and dates, and when you agreed to the subscription terms. Card details are held by Stripe, not by us.
- Your jobs: vehicle details, fault codes, your description, Gremlin's suggestions, your test results, questions and notes, what fixed each job, and how much AI each job used.
Photos
Photos you take are sent to the AI to help with the diagnosis. Gremlin does not store them. Avoid photographing number plates, people or customer documents.
Registrations
If you look up a registration, it is sent to Zyfy (zyfy.uk) to fetch the vehicle's public DVLA and DVSA record. Gremlin keeps the vehicle details but not the registration itself.
Please don't enter
Customer names, phone numbers or addresses. Gremlin doesn't need them.
Who processes it
Vercel (hosting), Supabase (database), Anthropic (the AI model), Zyfy (vehicle lookups), Stripe (payments) and Resend (account emails). They process data on our behalf under contracts that protect it. Some are based in the USA; transfers are covered by the UK's data adequacy arrangements or standard contract clauses.
Why, and our legal basis
To provide the service you signed up for (contract); to take payments and keep tax records (legal obligation); and to measure whether Gremlin is accurate and improve it (our legitimate interest in a better tool). Fix data may be used without personal details to improve Gremlin's knowledge of common faults. When you log what fixed a job, the vehicle, fault codes, complaint and fix (never your name, email, the registration or photos) can be shown to other Gremlin users as a "Seen before" match on similar jobs, so don't put customer names in those boxes.
Emails
We only send emails about your account: confirming your address, password resets, trial and payment reminders, and important changes. No marketing unless you ask for it.
How long we keep it
For as long as you have an account. When you delete your account, your account and jobs are deleted straight away. Payment records are kept by Stripe for 6 years because tax law requires it.
Your rights
You can see, correct or delete your data, object to how we use it, or ask for a copy. Delete your account yourself at Delete account, or contact us at gremlin@druops.net. You can also complain to the Information Commissioner's Office (ico.org.uk).