RSDiag Privacy Policy
Updated 8 October 2026.
1. Who handles your data
SIA CarContact, registration no. 40003334158, VAT number LV40003334158, Rudens iela 3–38, Rīga, LV-1082, Latvia, is responsible for data in the RSDiag application and website. Send privacy enquiries and requests to [email protected] or the address above.
2. Data and purposes
| Data | Purpose |
|---|---|
| Email, name, account ID and sign-in information | Registration, authentication and account management |
| VIN, vehicle label, licences, ECU and software information | Garage, access and compatibility checks, file selection |
| Orders, amounts, payment and refund statuses and identifiers | Providing purchases, accounting and resolving disputes |
| App installation and device identifiers, access-verification data, IP address, browser and request information, download and error history | Service security and troubleshooting |
| Uploaded calibration files and selected options | Requested file processing |
| Correspondence, contact details, submitted files and logs | Support |
Data comes from you, the app, browser, connected vehicle and payment provider. For calibration processing, the file, VIN and selected options are sent to RSDiag. Starting with app build 51, successfully completed firmware reads made while signed in are saved on the phone and automatically uploaded to that account. Offline uploads retry when the app is open, online and no vehicle operation is active. A full read contains the supported external flash region, not EEPROM or internal ECU flash. Files are listed by account; VIN is retained as file metadata. A dealer you connect to can access your uploaded files and logs until the connection is revoked. Logs and files may contain VINs and other personal data; sharing them gives the chosen recipient access to that information.
Starting with app build 53, signed-in sessions automatically send a technical support history linked to the account: connections, vehicle VIN and ECU identifiers, diagnostic trouble codes, operation stages and progress, read/write/recovery results, and technical error codes. Delivery waits until vehicle work finishes and an internet connection is available. Guest activity is not attached to a later sign-in. This history is available to authorised RSDiag support staff, not automatically to linked dealers. It is kept for up to 90 days (cleanup runs hourly), with at most 10,000 events per account; deleting the account removes it. The phone queue is limited to 500 events or 1 MiB, so older unsent events may be dropped.
3. Legal grounds
Accounts, licences and selected online features are provided to perform the contract; abuse prevention and troubleshooting rely on the legitimate interest in service security; mandatory financial records are processed to meet legal obligations. Where processing relies on consent, you can withdraw it.
Without necessary account and vehicle data, the related online features cannot be provided. Supported free offline diagnostics do not require an account. Licence and compatibility checks are automated; you can ask support to review a disputed result. We do not sell data or use it for advertising profiling.
4. Recipients
We use technical service providers to operate the service, Stripe for payments and Google Gmail for support correspondence. Card details are entered on the payment provider's page; RSDiag receives payment information. Support staff, advisers handling a particular dispute and authorities with a lawful basis may also receive data.
Google and Stripe may process data outside the EEA. Information about their international-transfer safeguards is available in Google's policy and Stripe's policy. You can request information from us about transfers affecting your data.
5. Retention and deletion
| Data | Retention |
|---|---|
| Account, garage and licences | For providing the account and purchases; removed when account deletion completes successfully |
| Profile reads and returned dealer files | Until deleted from the profile or the account is deleted; phone copies are managed separately |
| Calibrations sent for processing | Temporarily for processing; no permanent development archive of these uploads is maintained |
| Financial records | For accounting, refunds and disputes; periods depend on the document and legal requirements |
| Other technical logs, backups and correspondence | For support, security, recovery and related claims; fixed automatic-cleanup periods are not established in the current version |
| On-device files and exported copies | Until removed by you or through device features |
Some VIN-bearing technical history may remain after account deletion, and backups are not erased immediately. Contact support to delete remaining data or if automatic deletion fails. When handling your request, we will explain any records that need to be retained on a lawful basis. Latvian accounting rules prescribe, among other periods, minimum retention of 5 or 10 years depending on the document type.
You can request deletion in the app, on the website or by email. Account deletion ends licence access but does not request a refund. Uninstalling the app does not delete the account; exported copies must be removed separately.
6. Cookies
Sign-in uses a necessary cookie for the browser session. Selecting “Remember me for 7 days” keeps the cookie for up to 7 days; signing out removes it. Some browsers may restore sessions after restarting. Your chosen language is kept while the tab remains open. The “Remember my choice” switch in the language menu saves it for 6 months; turning it off removes the saved preference. You can also remove this data in browser settings. The website does not use advertising analytics. Stripe’s payment page has its own cookie rules.
7. Permissions and security
Bluetooth, USB and local-network permissions support adapter connections; notifications report ongoing operations. You can change access in device settings. Files are selected and exported through system features.
API connections use HTTPS, passwords are hashed and access requires authentication. Sign-in data on the phone uses secure storage; “Remember me” may save the email and password there. You can clear operation history in app settings.
8. Your rights
Where provided by law, you may request access, a copy, correction, deletion, restriction or portability, object to processing based on legitimate interests and withdraw consent. Additional information may be needed to verify ownership; do not send your password.
We normally respond within one month. Any lawful extension and its reason will be communicated. You may complain to Latvia's Datu valsts inspekcija or another competent authority. We will notify you of material processing changes; revised policies carry an update date.