Who operates VEDAR
DCR VEDAR LTD, registered in Scotland, company number SC906562. Registered office: Clyde Offices, 48 West George Street, Glasgow, Scotland, G2 1BP. Contact and privacy enquiries: account@dcr-vedar.com.
Information used to provide the service
Accounts use an email address, authentication records and workshop profile information. Investigations can contain vehicle registration and application details, symptoms, fault codes, measurements, technician notes, uploaded evidence, AI answers, saved conversations and confirmed repair outcomes. Avoid unnecessary customer names, contact details and other identifying information. Only provide information you are authorised to use.
We use this information to authenticate users, provide requested diagnostic support, save investigations, protect accounts, investigate service problems and handle support, privacy requests and AI-answer reports. Usage records can contain account and investigation identifiers, operation/model names, timing, token counts, cost estimates and errors. A failed request does not necessarily have a known cost.
Website and device storage
The public website does not use advertising trackers, analytics, third-party embedded media or marketing cookies. Railway processes web requests, including network and request information. The diagnostic application separately uses necessary authentication storage, preferences, private saved-case copies, recovery drafts, original files and offline application caches. Read Cookies & device storage before clearing site data or changing device.
Case text saved successfully to the cloud can be recovered on another signed-in device. Original uploads may exist only in IndexedDB on the original device. Signing in elsewhere does not move them. Signing out does not erase every retained case or original file. An inactive recovery draft is held for a decision after 24 hours; it is not silently deleted.
Suppliers and recipients
Supabase provides authentication, the database and storage services. Railway hosts the application and website. OpenAI processes relevant submitted context and, where used, images to provide AI answers. Registration lookup sends the registration to the DVSA MOT history service. Public email is forwarded through Porkbun to a Gmail destination mailbox. These suppliers process information to operate the service; we do not claim that data is never shared with suppliers. We do not sell data or use advertising tracking.
Deleting an application record does not establish that a supplier-held log, backup or support message has also been deleted. Supplier retention, contractual safeguards and international processing details are still being verified; we do not promise a particular AI-training setting, processing region for every supplier or immediate deletion from supplier systems.
Private completion and optional sharing
Completing an investigation saves a private outcome. A technician may separately enter and preview a technical repair account and explicitly choose to share that exact summary with signed-in workshops. Useful make/model, year, engine and measured findings may be included. Private conversations, AI answers and original attachments are not automatically copied. Registration, VIN, names, contact details and identifying stories must be omitted. Automated checks cannot guarantee anonymity; the technician must also consider indirect identification.
Historical shared records remain contained. A restricted owner/source link supports withdrawal and privacy review. Withdrawal blocks future shared-history access but cannot recall screenshots or copies someone already made.
How long information remains
There is currently no automatic age-based deletion schedule for accounts, saved investigations, original evidence or usage records. Retention periods remain under review; no proposed period is presented here as active policy. Device copies can remain until deliberately removed. Encrypted USB and other owner-controlled backups also exist and must not be assumed to have expired. Contact us to discuss a record or retention concern.
Requests, reports and complaints
App Settings provides a verified account-deletion request route. An authorised administrator reviews requests; actual account erasure is not enabled. Cancellation of a request is separate from deletion. AI-answer reporting sends the selected answer and the information shown in the report form, not the entire case or original evidence automatically. Reports and requests are restricted to the authorised reviewer.
For access, correction, deletion or other applicable data rights, see Account deletion & data requests. Identity and workshop authority may need verification. You may raise a concern with the UK Information Commissioner’s Office.
Review still required
Processing lawful bases, workshop/controller responsibilities, supplier safeguards and retention decisions require owner and legal review before the commercial service opens. Contact us for the current position rather than relying on an assumed retention promise. This information does not ask you to consent to optional marketing.