FORECOURT / CUSTOMER POLICY

Privacy Policy

This policy explains how personal data, uploaded vehicle images, listing inputs and generated outputs are handled when you use Forecourt.

1. Who is responsible

JPM ASSOCIATES SCOTLAND LTD. is the data controller for account, billing, support and service-operation data. It determines why and how that data is used. The address and direct contact channels appear at the end of this policy.

2. What we collect and collection sources

Provided by you: user input such as your name, email, telephone number, account and subscription details, support correspondence, vehicle descriptions, condition notes, prompts, uploaded photographs and example data, saved templates, and export requests. We collect generated images, videos and download records when you use the workspace. Photographs may incidentally contain registration plates, faces, reflections, location clues or other identifiers; Forecourt asks you to blur them and requests privacy treatment by default.

Collected automatically: your device, browser and hosting logs provide IP address, device type, request time, pages used, error and security events, cookie choices, and approximate location derived from IP. Received from service providers: payment providers send transaction identifiers, subscription status, amount, currency and limited billing information; hosting, email and AI providers return delivery, security and task-status records. We do not receive or store complete card numbers or card security codes.

3. Why we use it and legal bases

• Contract: create your account, run the chat–image–video workflow, deliver Listing Kits, administer subscriptions and provide support.
• Legitimate interests: secure the service, prevent misuse and misrepresentation, diagnose failures, measure capacity and improve reliability without overriding your rights.
• Legal obligation: retain invoices, respond to lawful requests and meet accounting, tax, consumer and data-protection duties.
• Consent: non-essential analytics or marketing where required. Consent can be withdrawn without affecting earlier lawful processing.

4. User input, files, AI-provider processing and generated results

Vehicle descriptions, condition notes, prompts, uploaded files and any example data you submit are sent to our AI provider only to create the requested output, apply safety controls and return task status. The provider processes this user input on our instructions as a service processor. Forecourt does not use private workspace content to train its models, and we do not authorise the AI provider to use customer inputs, files or results for model training. Generated results remain associated with a task long enough to deliver and download them.

You can avoid submitting optional personal details, remove workspace files, or contact us to request deletion. Uploaded working files, user input and generation caches are retained for up to 30 days, then deleted or de-identified unless a shorter provider expiry applies, you delete them sooner, or retention is required for security or a legal dispute. Temporary provider file links may expire much sooner. Product example images are separate production assets and contain no customer data.

5. Who we share it with

We use processors for cloud hosting and deployment, database and file storage, AI generation, transactional email, security monitoring and customer support. Stripe or PayPal may process payments under their own privacy notices; Forecourt receives status and identifiers but never handles full card details. Processors are authorised only for defined services and must protect the data. We may disclose data to professional advisers, regulators, courts or law enforcement where legally required. We do not sell personal data.

6. International transfers

Some processors may handle data outside the United Kingdom or European Economic Area. Where a destination lacks an adequacy decision, we use an appropriate transfer mechanism such as the UK International Data Transfer Addendum or approved standard contractual clauses, with supplementary safeguards where needed.

7. How long we keep it

Account and subscription records are kept while the account is active and generally for six years afterwards where required for tax, accounting or dispute records. Support correspondence is normally kept for two years. Security logs are normally kept for up to twelve months. Cookie preferences persist for their stated lifespan. AI working files and output caches follow the 30-day limit above. Backup copies age out under the provider backup cycle.

8. Security

We use access controls, encrypted transport, secret isolation, provider security measures, audit logging and least-privilege service credentials. Payment secret keys remain server-side. No online service can guarantee absolute security; report suspected unauthorised access promptly.

9. UK/EU GDPR rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. You may complain to the UK Information Commissioner’s Office or your local supervisory authority. We may verify identity and retain limited records where deletion conflicts with a legal duty.

10. CCPA rights and Do Not Sell or Share

California residents may request categories and specific pieces of personal information, correction, deletion and information about disclosures, and may exercise rights without discriminatory treatment. Forecourt does not sell personal information and does not share it for cross-context behavioural advertising. Therefore no sale opt-out is required; a request may still be sent using the contact details below. An authorised agent may act with valid authority.

11. Cookies and analytics

Strictly necessary cookies maintain security, administrator sessions and user choices. Optional measurement tools, if enabled, require the consent described in our Cookie Policy where law requires it. We do not use uploaded vehicle content for advertising profiles.

12. Automated decisions and children

AI assists with creative output and safety refusals but does not make legal or similarly significant decisions about people. Forecourt is not available to children under 13. Users aged 13–17 require permission from a parent or guardian; the service is designed primarily for adult sellers and businesses.

Contact

The service is provided by JPM ASSOCIATES SCOTLAND LTD., 8 Harmony Court, Loanbank Place, Govan, Scotland, G51 3HN. Questions may be sent to support@jpmassocscott.shop or raised by telephone at +44 7723916821.