Privacy Policy

Wheel Be Fine (“we”, “us”, or “our”) provides AI-assisted reports to help buyers evaluate used bicycles. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what choices you have.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch privacy law. If you have questions, contact us at support@wheel-be-fine.com.

We collect the following categories of information:

• Account details — email address, password (stored securely by our authentication provider), and basic profile data linked to your account.
• Uploaded content — photos of bicycles, advert links, advert text, and any details you enter about a bike (make, model, year, size, asking price, and similar fields).
• Generated reports — analysis outputs, previews, and unlocked reports associated with your submissions.
• Payment information — we do not store full card numbers. Payments are processed by Stripe. We may receive transaction identifiers, payment status, amount, and billing-related metadata needed to fulfill your purchase.
• Technical and usage data — IP address, browser type, device information, timestamps, and server logs generated when you use the site. We may also collect aggregated usage data to understand how features are used and to keep the service reliable.
• Support and feedback — messages you send us, including optional contact details in product feedback forms.

You choose what advert content to submit. Photos and listing details may contain information about sellers or third parties visible in adverts — please only upload content you have the right to share with us for report generation.

We use personal data to:

• Create and deliver AI-generated bike evaluation and comparison reports.
• Operate your account, save submissions, and show your report history.
• Process payments and unlock paid reports.
• Provide customer support and respond to feedback.
• Improve accuracy, reliability, and usability of the service.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell or rent your personal data. We do not use your uploaded bike photos or advert content to train public AI models unless we clearly tell you otherwise and, where required, obtain your consent.

Reports are generated using automated AI systems and may contain inaccuracies. Important purchasing decisions should not rely solely on the generated report.

Where GDPR applies, we rely on the following legal bases:

• Contract — to provide the service you request (account, reports, payments).
• Legitimate interests — to secure the platform, prevent abuse, improve the product, and understand aggregated usage, balanced against your rights.
• Legal obligation — where we must retain or disclose data to comply with law.
• Consent — where required for optional cookies or communications. You may withdraw consent at any time.

We use trusted providers to run Wheel Be Fine. They process data on our behalf and only as needed to provide their service:

• Supabase — authentication, database, and file storage for account data, submissions, and uploaded images.
• Stripe— payment processing. Stripe's privacy policy governs payment data they collect directly from you.
• OpenAI — used to process the text and images you submit in order to generate reports. We do not permit providers to use customer content to train public AI models unless explicitly stated otherwise.
• Jina AI (r.jina.ai) — when you paste an advert link, we may pass that URL to a reader service that fetches and cleans up the listing page for us. This happens for listings we cannot read directly (for example, sites behind bot protection). Only the advert URL is shared — never your account details, uploaded photos, or payment information.
• Hosting provider — our application is hosted on cloud infrastructure (currently Render) that processes requests and may log technical data such as IP addresses.
• Analytics — we may use privacy-oriented analytics tools in the future to measure site usage. If we do, we will update this policy and, where required, ask for consent before non-essential tracking cookies are placed.

These providers may process data in the EU, the UK, the United States, or other countries. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

We use cookies and similar technologies to:

• Keep you signed in and maintain your session.
• Remember preferences such as display currency where applicable.
• Protect the service from abuse and support secure checkout flows.
• Understand how the site is used, if analytics are enabled.

Essential cookies are required for the site to function. Non-essential analytics cookies, if introduced, will be used only with your consent where required by law. You can control cookies through your browser settings, though disabling essential cookies may limit functionality.

We keep personal data only as long as necessary:

• Account and reports — while your account is active and for a reasonable period afterward so you can access past reports, unless you delete them or ask us to delete your account.
• Uploaded images and submission inputs — for as long as needed to generate and store your reports, unless deleted earlier at your request where technically feasible.
• Payment records — as required for accounting, tax, and fraud prevention, typically up to seven years where law requires.
• Server logs — for a limited period for security and troubleshooting, then deleted or aggregated.

We may retain anonymised or aggregated data that no longer identifies you for analytics and product improvement.

You may request deletion of your account at any time, subject to legal, tax, accounting, fraud-prevention, and other obligations that may require us to retain certain records.

If you are in the EEA, UK, or another region with similar privacy laws, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data in certain circumstances.
• Restrict or object to certain processing.
• Receive a portable copy of data you provided.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (AP). To exercise your rights, email support@wheel-be-fine.com. We may need to verify your identity before responding.

We use appropriate technical and organisational measures designed to protect personal data, including encryption in transit, access controls, restricted production access, and secure infrastructure. No online service can guarantee absolute security, but we work to reduce risk and respond to incidents promptly.

You are responsible for keeping your account credentials confidential and using a strong, unique password.

Wheel Be Fine is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at support@wheel-be-fine.com and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the “Last updated” date. Continued use of the service after the effective date of an updated policy will be subject to the revised Privacy Policy where permitted by applicable law.

See also our Terms of Service.

For privacy questions or requests relating to your personal data, contact:

Wheel Be Fine
Sole proprietorship registered in the Netherlands
Contact: support@wheel-be-fine.com