← Back

Privacy Policy

Last updated: July 2026

1. Overview

This Privacy Policy explains what information BMCoding ("the Platform", "we", "us", "our") collects when you create an account and use the Platform, why we collect it, and how it is stored and protected. It applies alongside our Terms of Service, which separately covers vehicle diagnostic data collected during a session.

2. Information We Collect

When you create and use an account, we collect:

  • Account information: email address, and a hashed password if you register directly. If you sign in with Google, we receive your Google account ID and email instead - we never see or store your Google password.
  • Session and authentication data: an HTTP-only refresh token cookie used to keep you signed in, and short-lived access tokens used by the Platform's interface.
  • Account activity: timestamps of account creation, Terms of Service acceptance, and account status (e.g. email verification, ban status).
  • License and purchase records: which features you've purchased or been granted, tied to the vehicle identifiers (VIN, serial number) they apply to, and any discount codes used.
  • Download analytics: if you download one of our free tools (e.g. the desktop Agent or SVT Extractor) from the Products page, we log the download - including IP address, browser user agent, and timestamp - to keep accurate download counts and detect abuse. This applies whether or not you are signed in.
  • Vehicle diagnostic data: data read from a connected ECU during a diagnostic session (VIN, serial numbers, software version lists, configuration files). This is covered in detail by Section 5 of our Terms of Service.

3. How We Use Your Information

We use the information above to:

  • Create and maintain your account, and keep you signed in;
  • Enforce per-vehicle, per-feature licensing and apply discount codes;
  • Send essential account emails (e.g. email verification, welcome message);
  • Detect and prevent abuse, fraud, or unauthorised access;
  • Measure usage of our free tools and improve the Platform;
  • Diagnose and fix issues with the Platform itself.

We do not use your information for advertising, and we do not sell it to anyone.

4. Cookies

The Platform uses a single essential, HTTP-only cookie to store your refresh token and keep your session active. This cookie is required for the Platform to function and is not used for tracking or advertising. We do not use third-party analytics or advertising cookies.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following categories of third parties, and only as needed to operate the Platform:

  • Google - if you choose to sign in with Google OAuth;
  • Our email delivery provider - to send verification and account emails on our behalf;
  • Our payment processor - to process license purchases. We do not store your card details ourselves;
  • Infrastructure providers hosting our servers and database.

We may also disclose information if required by law, or to protect the rights, property, or safety of BMCoding, our users, or others.

6. Data Retention

We retain account information for as long as your account is active. Vehicle diagnostic data and license records are retained to support ongoing access to purchased features and for platform development purposes. Download analytics (IP address, user agent) are retained for a limited period sufficient for abuse detection and accurate reporting.

You may request deletion of your account and associated personal data at any time by contacting us - see Section 9 below. Some information may be retained where required by law or for legitimate business records (e.g. purchase history).

7. Data Security

Passwords are stored as salted hashes, never in plain text. Authentication uses short-lived tokens with an HTTP-only refresh cookie. We take reasonable technical and organisational measures to protect your data, but no system can be guaranteed 100% secure, and we cannot guarantee absolute security of information you transmit to the Platform.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

9. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at support@bmcoding.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after changes are posted constitutes acceptance of the revised Policy. We will notify registered users of material changes by email.