Privacy Policy

MAP SENSE MEDIA CORP., a British Columbia corporation, operates LotStudio AI. For questions about this policy or about data we hold, contact privacy@lotstudio.ai, or write to 32835 South Fraser Way, Abbotsford, British Columbia, Canada.

As a business operating in British Columbia, we are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

This policy covers the LotStudio AI web application and the integration API. It applies to our own handling of data. Where we process photographs on behalf of a dealership, we act as a processor and the Data Processing Addendum governs that relationship.

Account data. The email address used to sign in, and the dealership it belongs to. Authentication is handled by Supabase; we do not store passwords ourselves.

Photographs you upload. The original image, the processed output, a thumbnail, and an audit file recording that the vehicle was unchanged. These are stored against your account.

Job metadata. The preset chosen, the processing mode, timestamps, status, approval state, and any error message.

Technical data. Standard server logs generated by our hosting provider. We do not run advertising or analytics trackers, and the only cookies we set are the session cookies required to keep you signed in.

This is worth stating plainly. Vehicle photographs frequently contain information that counts as personal information — most obviously registration plates, which the service deliberately preserves rather than removes, and sometimes people, reflections, or documents visible in the frame.

We process that content only to produce your output image. We do not read plates, index them, or attempt to identify anyone. But because it is present, uploading photographs is a processing activity you should account for in your own privacy practices, and you should not upload images containing personal information you have no basis to process.

If you need plates or other details removed, do that before upload — the service does not edit the vehicle.

• To provide the service — processing uploads and returning results.
• To authenticate you and keep your account secure.
• To produce the per-image audit that evidences the vehicle was not altered.
• To bill you and keep accurate financial records.
• To diagnose faults, and to protect the service against misuse.

We rely on the following sub-processors:

• OpenAI — image processing. Your uploaded photograph is transmitted to OpenAI’s image API to generate the replacement background. This is the core of how the service works.
• Render — application hosting and data storage, in the US (Oregon) region.
• Supabase — authentication and account records.

An up-to-date list is maintained in the Data Processing Addendum.

Our infrastructure runs in the United States. If your dealership is in Canada, the EU, or the UK, your photographs and account data are transferred outside your jurisdiction and are subject to the laws of the country where they are held, including lawful access requests by authorities there.

For Canadian customers, this is the cross-border disclosure that PIPEDA — and, in British Columbia, PIPA — expects to be made clear to you. For EU and UK customers, transfers rely on the UK and EU Standard Contractual Clauses.

Photographs and job records are retained for 90 days after the job is created and then deleted. You can delete individual photographs, or select and delete them in bulk, from the dashboard at any time; deletion removes the original, the output, the thumbnail, and the audit file.

Account records are kept while your account is open and for 12 months afterwards. Billing records are kept for as long as tax law requires.

Note that backups persist for a short period after deletion and are overwritten on a rolling basis.

We do not use your photographs to train, fine-tune, or improve any model, and we do not sell or share them with anyone other than the sub-processors listed above for the purpose of running the service.

Depending on where you are, you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict its processing, or receive it in a portable form. You may also withdraw consent where processing relies on it.

Contact privacy@lotstudio.ai to exercise any of these. We will respond within the period the applicable law requires. If you are unhappy with our response you may complain to your supervisory authority — in Canada, the Office of the Privacy Commissioner; in BC, the Office of the Information and Privacy Commissioner for British Columbia.

If you are an employee of a dealership using the service, direct your request to that dealership first — they control the account.

We describe our technical and organisational measures in the Security document.

We will update this policy as the service changes. Material changes will be notified by email or in-app before they take effect, and the date at the top of this page always reflects the current version.