AutoCalcul

Privacy policy

The short version: without an account, your data stays in your browser; with an account, it is stored in the European Union, partitioned per user, and never resold.

Last updated: August 2026.

This translation is provided for information purposes. The French version prevails in case of discrepancy.

Data controller

The controller of your data is Stella Advisory SRL, Rue de Nieuwenhove 16, boîte 4, 1180 Uccle, Belgium — CBE 1021.145.526.

For any question about your data: contact@autocalcul.be.

Without an account: everything stays in your browser

The TCO calculation and the comparison are available without an account. In this mode, your vehicles, your assumptions profile and your results are stored only in your browser’s local storage (localStorage). Nothing is sent to our servers, with two exceptions, always at your initiative: the content you explicitly submit for AI analysis (see below), and the snapshot of a calculation you choose to share by link or to receive by e-mail (see “Share link and report by e-mail”).

Clear your browser’s storage and this data disappears — we keep no copy of it. If you later create an account, it is imported into your space at your first sign-in, within the limits of your plan.

Share link and report by e-mail

When you share a result (“Share” button) or request the PDF report by e-mail, we record a snapshot of the calculation: the vehicle’s characteristics, the profile’s assumptions and the reference year — without any account identifier if you are not signed in. This snapshot is accessible to anyone who has the link (random, unguessable token); it is not indexed by search engines.

Without an account, the snapshot is automatically deleted after 90 days. With an account, it is deleted together with the account.

The e-mail address you provide is used to send you the requested report (performance of your request, Art. 6.1.b GDPR). A single reminder, three days later, is sent to you only if you ticked the corresponding box (consent, Art. 6.1.a); each e-mail contains a one-click unsubscribe link. E-mails are sent via Resend (EU region).

With an account: your data at Supabase, in the European Union

If you create an account, your vehicles, tax profiles and comparisons are stored in a Supabase database hosted in the European Union.

This data is accessible only to your account: each record is partitioned by user identifier, and the database refuses any direct access from the browser.

Deleting a vehicle, a profile or a comparison takes effect immediately.

Authentication, payment and invoicing: Clerk, Stripe and Billit

Account creation and sign-in are handled by Clerk; the Pro and Firm subscriptions and card payment by Stripe (including billing address and, for professionals, VAT number). We never see or store your password or your bank card details.

From Clerk we keep only your user identifier and your subscription level, which are necessary for the service to operate.

Structured electronic invoices for Belgian business customers are issued and transmitted via the Peppol network by our provider Billit (Belgium). It receives only the invoicing data required: name, VAT number, address and amounts.

AI extraction and estimation: Anthropic API

When you paste the URL or the text of a listing, its content is sent to the Anthropic API (Claude) to extract the vehicle’s characteristics, or to estimate the missing fields.

In accordance with the terms of the Anthropic API, this content is not used to train the models.

Do not paste personal data into the analysis field: only the content of the listing is useful for the calculation.

To improve extraction, we keep a log of the analyses: address of the analysed listing (never the pasted text or the PDF), extracted vehicle characteristics, result and any error. It is linked to your account if you are signed in, otherwise anonymous (no IP address). Failures are also sent to PostHog (hosted in the EU) to monitor the quality of the service.

Transfers outside the European Union

Some of our providers are established in the United States: Vercel (site hosting), Clerk (authentication and subscriptions), Stripe (payment), Anthropic (AI), Resend (e-mail sending, data stored in the EU) and, if you have consented to audience measurement, Google (Google Analytics). Your application data remains stored in the EU (Supabase, PostHog), but these providers may process certain data (account identifiers, payment data, content submitted to the AI, browsing data) from the United States.

These transfers are governed by the mechanisms provided for in Chapter V of the GDPR: certification under the EU-U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses, incorporated into the data processing agreements concluded with each of these providers.

Why we may process your data (legal bases)

Performance of the contract: management of your account, provision of the service, calculations, subscriptions and support (Art. 6.1.b GDPR).

Legal obligation: invoicing and accounting (Art. 6.1.c GDPR).

Legitimate interest: security of the service and prevention of abuse, such as limiting the number of AI analyses without an account and submissions of the Enterprise form, and improving the reliability of listing analysis (analysis log, failure monitoring) (Art. 6.1.f GDPR).

Consent: audience measurement (PostHog, Google Analytics, Hotjar) is only activated after your explicit agreement via the cookie banner (Art. 6.1.a GDPR). You can withdraw this consent at any time (button at the bottom of this page).

How long we keep your data

Data in your space (vehicles, profiles, comparisons): as long as your account exists. If you delete your account, it is erased within 30 days.

Invoices and accounting data: 10 years, as required by Belgian tax and accounting legislation.

Contact details left via the Enterprise form: 12 months after the last exchange, then deletion.

Log of listing analyses (listing address, extracted characteristics): 24 months. It is anonymised when your account is deleted.

Calculation snapshots shared or sent by e-mail without an account (and the associated e-mail address): 90 days, then automatic deletion.

Anti-abuse counters per hashed IP (quota of AI analyses without an account, Enterprise form): automatically purged within 48 hours. The IP address is hashed with a salt before any storage: it is never recorded in clear text and cannot be recovered from the hash.

Cookies

Strictly necessary cookies (exempt from consent): Clerk’s session and security cookies, essential for signing in, and the local storage of your preferences (active profile, cookie choice).

Audience measurement (subject to your consent): with your agreement via the cookie banner, we use PostHog (hosted in the European Union), Google Analytics (anonymised IP addresses) and Hotjar to understand how the site is used and improve it. Until you have accepted, none of these tools is loaded and no measurement cookie is set.

No advertising cookie is set, whatever your choice. You can change or withdraw your consent at any time via the button at the bottom of this page.

What we do not do

We do not sell or rent your data to anyone. We do not display advertising. We do not send you unsolicited e-mails: apart from e-mails related to your account or to an explicit request on your part, no reminder is sent without your consent.

Contact details left via the Enterprise form are used only to process your quote request.

Manage your cookie consent

You can change or withdraw your consent to audience measurement at any time — the choice banner will be shown to you again.

Current choice: no choice recorded (banner shown)

Your rights and contact

You have the rights of access, rectification, erasure, portability, restriction and objection regarding your data. You can at any time view, correct or delete your data from your account, or write to us at contact@autocalcul.be (or via the contact form). We reply within 48 working hours, and at the latest within the one-month period provided for by the GDPR.

If you believe your rights are not being respected, you can lodge a complaint with the Data Protection Authority (Rue de la Presse 35, 1000 Bruxelles — autoriteprotectiondonnees.be).