Privacy Notice
Last updated: June 16, 2026
Collision Sciences respects the privacy of the people and organizations that use our websites, applications, diagnostic tools, APIs, and related services. This Privacy Notice explains how we collect, use, disclose, retain, and protect personal information when you use Collision Sciences services, including the CrashScan app and our secure web portals.
By using Collision Sciences services, you agree to the collection, use, and disclosure of information as described in this Privacy Notice.
Scope of This Notice
This Privacy Notice applies to Collision Sciences websites, applications, secure portals, APIs, diagnostic tools, support channels, and related services. It is intended to be domain-neutral and region-neutral so it can apply across Collision Sciences services and deployments.
If you use Collision Sciences through your employer, insurer, repair facility, fleet, reseller, or another organization, that organization may also have its own privacy practices and policies. In many cases, we process information on behalf of that organization so that we can provide the requested services.
Information We Collect
The information we collect depends on how you use our services. It may include the following categories:
Account and user information: name, email address, phone number, organization, role, login credentials, account status, and user preferences.
Organization and billing information: organization name, account identifiers, subscription or purchase information, invoices, payment status, and billing contact details. Payment card processing may be handled by third-party payment processors; we do not need to store full payment card numbers for normal payment processing.
Vehicle, scan, and report information: vehicle identifiers, diagnostic scan results, event data recorder information, uploaded files, report data, timestamps, and information needed to generate, review, deliver, or support reports.
Location information: where enabled or required by your organization, the CrashScan app may collect location information to support workflow, audit, service delivery, or other authorized business purposes.
Technical and usage information: IP address, device and browser information, operating system, pages or features used, log data, cookies or similar identifiers, error reports, and information used for authentication, security, diagnostics, performance, and service improvement.
Communications: messages, support requests, emails, call notes, and other information you provide when you contact us or when we contact you about the services.
How We Use Information
We use information for purposes including:
providing, operating, maintaining, and improving Collision Sciences services;
creating and managing user accounts, authentication, permissions, and organization access;
processing scans, reports, purchases, subscriptions, invoices, and service requests;
communicating with users about account activity, password resets, service updates, support requests, reports, billing, and administrative matters;
monitoring, auditing, troubleshooting, securing, and preventing misuse of the services;
meeting contractual, legal, accounting, tax, regulatory, security, and compliance obligations; and
developing aggregated or de-identified information that does not reasonably identify an individual.
Cookies and Similar Technologies
We may use cookies, local storage, and similar technologies to keep users signed in, remember settings, protect accounts, measure service performance, and understand how the services are used. Some cookies or similar technologies are necessary for core functionality. If you block or delete them, parts of the services may not work properly.
How We Share Information
We do not sell personal information. We may share information only where reasonably necessary for the purposes described in this Privacy Notice, including:
With your organization or authorized users: where the information relates to services requested by, administered by, or paid for by your organization.
With service providers: such as cloud hosting providers, database and storage providers, email delivery providers, payment processors, analytics or logging providers, security providers, and support tools. These providers may access information only as needed to provide services to us.
With resellers, partners, or integration providers: where needed to provide or support services requested by you or your organization.
For legal, safety, and security reasons: where required or permitted by law, court order, regulatory request, contract enforcement, fraud prevention, security investigation, or to protect the rights, property, or safety of Collision Sciences, our users, our customers, or others.
For business transactions: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and privacy protections.
With consent: where you or your organization authorize us to share information for another purpose.
Data Residency, Cross-Border Processing, and Service Providers
Collision Sciences may operate services using multiple hosting regions. Depending on the services used, customer configuration, contractual commitments, or applicable requirements, certain operational service data may be assigned to a specific regional deployment. Where regional deployment applies, we use reasonable measures designed to store and process that operational service data in the assigned region, subject to the design of the services, support access, backups, logs, security monitoring, incident response, legal obligations, and the use of third-party service providers.
Some information, including account information, support information, administrative records, billing information, security logs, or service metadata, may be transferred to, processed in, or accessed from locations outside the region assigned to an organization. When we use service providers or support personnel in other locations, we take reasonable steps designed to protect personal information in accordance with this Privacy Notice and applicable requirements.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These measures may include encryption in transit, access controls, authentication controls, monitoring, backups, and internal policies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
You are responsible for keeping your login credentials confidential and for signing out when using a shared device.
Retention
We retain personal information for as long as reasonably necessary to provide the services, maintain business and legal records, resolve disputes, enforce agreements, support security and audit requirements, and comply with legal, tax, accounting, regulatory, or contractual obligations. Retention periods may vary depending on the type of information, the services used, customer instructions, and applicable requirements.
Your Choices and Access Rights
Depending on your location and the nature of your relationship with us, you may have rights to request access to, correction of, deletion of, or information about the personal information we hold about you. Some requests may need to be handled through your organization if your organization controls the relevant account or service data.
You may update certain account information through your account settings where available. You may also contact us using the contact information below. We may need to verify your identity before responding to a request, and some information may be retained where required or permitted by law or contract.
Communications
We may send transactional or service-related communications, such as password reset emails, account notices, report notifications, billing notices, security alerts, and support messages. These communications are part of the services. Where we send optional marketing communications, you may opt out using the instructions included in those communications or by contacting us.
Children
Collision Sciences services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children through the services.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, technology, legal requirements, or business practices. The updated version will be posted through the services with an updated “Last updated” date. Unless otherwise stated, the updated Privacy Notice applies from the date it is posted.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Notice or our privacy practices, please contact us at support@collisionsciences.ca.