Overview

This Privacy Policy explains how TFMECU ("we", "us") collects, uses, shares, and protects information when you use our website and application (the "Services").

Information we collect

We collect information you provide directly and information collected automatically when you use the Services.

• Account information: details used to create and manage your account (such as email address, username, and authentication/session information).
• Vehicle and configuration information: when you use creation/patching flows or manual services, we may collect vehicle-related selections such as make, model, engine version, ECU brand/model, vehicle type, selected modules/mod types, and notes you provide.
• Files and uploads: when you upload a file to patch or request a manual modification, we receive the file you upload and may generate an output file for you to download. If you attach files to support tickets, we receive those attachments too.
• Support communications: information you send through tickets, contact forms, and in-app messages (such as subject, message body, category/type, and any attachments).
• Billing and purchases: if you purchase credits, we receive information necessary to process the purchase (for example, which credit package you selected and payment status). Payment processing itself is handled by a third-party payment provider.
• Log and device data: IP address, browser and device information, request metadata, timestamps, and diagnostic logs used for security, abuse prevention, and reliability.
• Cookies and similar technologies: used to keep you signed in, maintain your session, and protect the Services.
• Local-only processing: some features (for example, file comparison/visualization tools) may process files locally in your browser. Those files are not uploaded to our servers unless you explicitly submit them through an upload flow.

How we use information

• Provide the Services (authentication, file patching, manual requests, downloads, and features you request).
• Respond to support requests and communicate about tickets.
• Process credit purchases and maintain credit balances, transactions, and spend records.
• Improve reliability and performance (debugging, monitoring, abuse prevention).
• Protect the platform (fraud prevention, security monitoring, enforcing acceptable use).
• Comply with legal obligations and enforce our terms.

How we share information

We do not sell your personal information. We may share information only in limited cases:

• Service providers that help us operate the Services (hosting, email delivery, file storage, and monitoring).
• Payment providers to process credit purchases (for example, Stripe). Payment providers may process your payment details directly. We typically store provider references and status information (and may receive webhook events) so we can confirm your purchase and credit your account.
• Legal or safety reasons when required to comply with law or protect users and the platform.
• Business transfers if we are involved in a merger, acquisition, or asset sale (you will be notified where required).

Data retention

We retain personal information for as long as needed to provide the Services and for legitimate business purposes such as security, dispute resolution, and compliance.

• Support communications: tickets and messages (including attachments) may be retained to maintain history and improve support continuity.
• Files uploaded for services: files uploaded for patching/manual services and the resulting output files may be retained to provide downloads, troubleshoot issues, prevent abuse, and support your account.
• Credits and purchases: wallet balances, ledger entries, spend records, and payment transaction records may be retained for accounting, fraud prevention, and legal compliance.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure; you use the Services at your own risk.

Your choices

• You can contact us to request access, correction, or deletion of certain personal information, subject to legal limits.
• You can avoid uploading sensitive data in tickets/attachments.
• You can sign out at any time; session cookies are used for authentication.

Children

The Services are not intended for children and we do not knowingly collect personal information from children.

International transfers

Depending on where you are located, your information may be processed in countries with different data protection laws.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date above reflects the latest version.

Contact

Questions about privacy can be sent via the Contact page.