Privacy Policy

1. Who we are & our role

Digital Kings LLC, registered in the State of Washington, United States, is the operator of RimFit.

For our own marketing site and shop accounts, we act as a data controller. When a wheel/tire shop uses RimFit to process information about their customers (for example, a customer's name and vehicle photo), the shop is the controller and RimFit acts as a processor on the shop's behalf and instructions.

2. Data we collect

• Shop account data: name, email, shop/organization name, and login credentials (handled by our authentication provider, Clerk).
• Customer & vehicle data uploaded by shops: customer name, contact details a shop chooses to add, and photographs of vehicles uploaded for visualization. Vehicle photos may incidentally include license plates, location, or other people — shops are responsible for the content they upload.
• Generated content: AI-rendered visualizations and associated render metadata, and any quote/parts information the shop adds.
• Communications: emails we send (share links, confirmations) and messages you send us.
• Usage & device data: with your consent, analytics and session-replay data via Microsoft Clarity (see our Cookie Policy). Essential cookies are used for authentication and security.

3. AI image processing

To create a visualization, the uploaded vehicle photo and the selected rim image are sent to our AI provider, Google (Gemini API), which generates the composited result. Images are transmitted for the purpose of producing your render. We do not use your or your customers' photos to train our own models.

4. How we use data & legal bases

• To provide and operate the service — performance of a contract.
• To generate, store, and share renders — contract / shop's instructions.
• To send transactional emails — contract / legitimate interests.
• To run analytics and session replay — consent (you can withdraw it anytime).
• To secure the service and comply with law — legitimate interests / legal obligation.

5. Sharing & subprocessors

We do not sell personal data. We share data only with the service providers below, who process it on our behalf under appropriate agreements:

6. International transfers

Our providers are primarily located in the United States. If you access RimFit from the UK, EEA, or Canada, your data may be transferred to the U.S. Where required, such transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses or equivalent mechanisms).

7. Retention

We retain account data for as long as an account is active. Customer vehicle photos and renders are retained for the shop's use and deleted on request or when the related account or record is deleted. We may keep limited records as required for legal, tax, or security purposes.

8. Your rights

Depending on where you live (UK/EU GDPR, Canada PIPEDA, California CCPA/CPRA, and other US state laws), you may have the right to access, correct, delete, port, or restrict the use of your personal data, to object to certain processing, and to withdraw consent. California residents have the right to know, delete, and opt out of any "sale" or "sharing" — we do not sell personal data.

To exercise any right, email privacy@rimfit.app. If your data was uploaded by a shop, we may direct your request to that shop as the controller. You also have the right to lodge a complaint with your local data-protection authority.

9. Security

We use encryption in transit, access controls, and reputable infrastructure providers to protect personal data. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.

10. Children

RimFit is a business tool not intended for children, and we do not knowingly collect data from anyone under 16.

11. Changes & contact

We may update this policy; we'll revise the "Effective" date above and, where appropriate, notify you. Contact us at privacy@rimfit.app.