Jagaux Doctor — how we handle your data

Last updated: 15 October 2026.

Jagaux Doctor is the fault-analysis service at jagaux.com/doctor. You describe a problem with your car, we ask a few questions, and you get a written assessment: how serious it looks, ranked explanations, and a procedure for checking them.

This part of the policy covers that service. Everything else in this policy — cookies, the shop, contact forms — still applies. Where this part is more specific, this part wins. The controller is the same as for the rest of this policy: JAGAUX OÜ, Ahtri tn 12, 15551 Tallinn, Estonia (registry code 16454335). Contact: [email protected].

If you pay for cases with PayPal, the data of that order (the payment and the order record) is controlled by ALEXANDER DRACHAN PR NOVI SAD, Serbia, as set out in the main part of this policy. What you write to the Doctor and your report are handled exactly as described below, whichever way you paid.

What we collect

What you write. Your description of the fault and your answers to our questions. This is free text and you decide what goes in it. Please do not paste names, addresses, phone numbers, plate numbers or anything about other people — none of it helps the analysis.

We keep the conversation for 180 days, privately. The questions the Doctor asked and your answers are saved with your case as the conversation goes — email addresses and phone numbers are stripped out before anything is saved, and a VIN is never accepted. We keep them for two reasons only: to rewrite your report when you come back to add or correct something, and so that we can check the quality of our reports. They are never shown on the report page, never used to train AI models and never passed to anyone else. They are deleted 180 days after the last thing you added to the case, or at once if you delete the case. If you stop before the end, the unfinished conversation is kept so you can pick it up from your personal link, on any device; if you do not come back within 30 days, the whole case is deleted, and your address with it. Cases started before 11 October 2026 were promised that nothing is kept, and for them nothing is. The report page itself is headed by a name for the fault written in our own words, never a sentence of yours.

An automatic filter also strikes out obvious email addresses, phone numbers and VINs before anything at all is stored or shown. It is a safety net, not a guarantee: it catches the common shapes and nothing else.

No photographs. We do not accept images at all: the service refuses any image sent to it. The reason is worth saying out loud: a photo taken on a phone usually carries the GPS coordinates of the place it was taken — the yard where your car is parked. Removing that would mean decoding the image, and we deliberately decode nothing. Rather than handle pictures carelessly, we do not handle them at all. Describe what you see; that is what the analysis works from.

Vehicle details. Model, year and engine — chosen from lists, not typed. The fuel type comes with the engine.

No VIN. We do not ask for one and we do not record one in any form. A VIN identifies one specific car and, through it, you; the lists above give the analysis everything it actually uses. If you mention a VIN while writing, the filter strikes it out before anything is stored or shown.

Your email address. The free case is no longer instant: it opens 24 hours after you ask, or at once if you pay instead, so the free branch needs an address to send your personal link to and, later, one question about how the fault turned out. If you stop halfway through the questions, it is also where we send one reminder of where your case is waiting — once, never again. Jagaux keeps your email address until the case has been delivered and you have been asked once how it ended — at most 30 days — and then deletes it. It is never used for anything else and never passed on. It is kept at Jagaux, in WordPress — the same place a shop order already keeps one. The Doctor service that does the reasoning receives the address only for a moment, to check that its domain can receive mail, and stores only a one-way hash of it, so it can recognise a case without knowing whose it is. If you buy instead of waiting, the order in the shop holds your address, as any shop order must.

Technical data. When the case was created, how many questions were asked, and token counts and cost for our own accounting. Your IP address is not stored as such. It is used only in hashed form: to count how many cases come from one connection in a day, and to slow down repeated requests. Both our website and the Doctor service salt that hash with a value that changes every day, so today’s hash cannot be linked to yesterday’s. The hash is not kept with your case.

Payment data. Handled by WooCommerce with Stripe or PayPal on jagaux.com. Card details never reach the Doctor service. When an order credits you with cases, our website records a one-way hash of the billing email address and the number of cases, so the credit is recognised when you start a case. The order itself, with your address on it, stays in the shop, where an order has to stay.

What you agreed to. When you tick one of our consent boxes, or pay with the confirmation text shown next to the Pay button, we store the fact, the time and the wording you agreed to, so that neither of us has to rely on memory about what was agreed.

We do not ask for and do not want special-category data such as health, religion or biometrics. Please keep it out of the free text.

Why we are allowed to process it

• Producing the case you asked for — performance of a contract with you. This covers both the paid case and the free daily one, which is the same service at no charge.
• Daily limits, abuse and cost control (the hashed IP and the counters) — our legitimate interest: without them a script can empty our budget in an afternoon.
• Recognising cases you paid for — performance of a contract. A one-way hash of your address is what does the recognising.
• Holding your address for the free branch — performance of a contract: the free case is delivered a day later, not at once, so we need somewhere to send the link, one reminder if you stop halfway, and the one question about how it ended. The address is deleted once those have happened, or after 30 days at most.
• Ratings left on a report page — our legitimate interest in knowing whether the analysis was any use, and the reader’s own interest in saying so. Anyone can leave one; we do not ask who they are and do not record it.
• Keeping the anonymised report and letting it be found — our legitimate interest. A report that stays put is a report someone else can be sent to, or can find by searching; a link that dies is worse than no link. By the time it is kept, there is no personal data in it to begin with, and the person it belongs to can delete it themselves at any time.
• Publishing your case, anonymised, in our library of faults — not your consent: what is published names no one, so the processing this section otherwise covers does not apply to it at all. You are told beforehand and can keep your case out with a tick-box next to the notice, or by deleting the report later; see «Consent, and taking it back» below.
• Accounting and tax records for paid orders — a legal obligation.

Who else sees your data

Anthropic, PBC, in the United States — our AI provider, acting as our processor under their commercial API terms and their data processing agreement. Your description and your vehicle details are sent to them to produce the analysis. Their commercial terms state that they do not train their models on customer content from those services.

No one else receives your description. Apart from Anthropic, the service only looks up whether your email’s domain accepts mail and loads a web font; it does no web search. Our reference material — manufacturer bulletins, wiring and fuse data, public complaint records, cases collected from owner forums — sits on our server and is only read, never sent anywhere.

The report page is part of jagaux.com and uses the same site-wide analytics as the rest of the site, on the terms of the cookie section of this policy. Your description is never sent to them.

Stripe or PayPal, with WooCommerce, handle payment, for paid cases only. Emails to you are sent through our mail provider, Zoho. Hosting: a virtual server we rent from Vultr (The Constant Company, LLC), acting as our processor; the site and the Doctor service both run on it. Traffic to jagaux.com passes through Cloudflare.

Transfer outside the EEA

Sending your text to Anthropic means a transfer to the United States. We would rather say that plainly than bury it. The transfer is covered by the safeguards in our agreement with them, and you can ask us for the details of those safeguards.

How long we keep it

Two of those are worth explaining.

The report is kept with no end date, and search engines may list it. That is deliberate: the value of these pages is that the next owner with the same symptom can find one instead of starting from nothing, and a link that expires turns into a dead end for everyone who follows it later. It is a defensible thing to do because the report holds no personal data in the first place: there is no conversation to keep, no VIN, and what remains is the type of car, the fault in our words, and our reasoning. If you would rather it did not exist, delete it — see below.

A paid balance expires after a year. It has to have an end, even though what it holds is a hash rather than an address. Unused cases from an expired pack are refundable; the refund terms say how.

Your report link

Your report lives at an unguessable address. We do not publish a list of reports.

Search engines can find the public page, and in time may list it. That is deliberate — see “The report is kept with no end date” above. Your private page, the one with the key, tells search engines not to index it. Crawlers that collect training data for AI models are asked, in our robots.txt, not to crawl the site.

Anyone who has the link can read the page, and can also leave a rating on it — “this helped”, “this did not”, and what actually fixed the car. That is deliberate: the next owner with the same symptom learns more from an outcome than from the analysis alone. What is on that page is the type of car, your account of the fault as we retold it, our analysis, and whatever ratings people have left. Its preview image, used when the link is shared, shows the car, the name of the fault in our words and the verdict — nothing you typed.

A separate private link, with a key in it, is yours alone: it is the only way to open the box where you tell us what the fault turned out to be, and the only way to delete the report. Someone holding the public link sees a page with no such box and no hint that one exists. The choice about the open library, by contrast, is offered earlier, before your first message — see «Consent, and taking it back» below. Keep the private link to yourself.

Consent, and taking it back

You are asked for two different things, before your first message and at checkout, and told — not asked — about a third.

• Before your first message, you confirm you understand where your text goes: to Anthropic in the United States for the reasoning, stored by us on the terms in the table above. Without that, the case does not start.
• When you pay, the text next to the Pay button asks us to begin at once and tells you what that does to your 14-day right of withdrawal. That one is explained in the refund terms, where it belongs.
• Also before your first message, you are told — not asked — that your case will be added, anonymised, to our open library of faults: the kind of car, the fault in our words, what was checked, what it turned out to be — and never the VIN in any form, your email address, the links to your report, your own wording, or photographs. Because nothing in it identifies you, there is nothing to consent to; that is why it is a notice and not a tick-box you must actively check. Next to the notice is a box to keep your case out instead, unticked by default, so publishing is what happens unless you say otherwise. Ticking it, or deleting the report later, are the only ways to keep a case out of the library.

If you leave a rating on someone else’s report

Every report page can be rated by whoever reads it — “this helped”, “this did not”, and a line about what actually fixed the car. You do not need an account and we do not ask who you are.

What happens to what you write. It is published on that page for anyone to read, and it stays as long as the report does. A person at Jagaux reads it before it appears, usually within a day; we publish it or we do not, and we do not edit it into something you did not write. Email addresses, phone numbers and VINs are struck out of the text automatically before it is stored at all, and links are made non-clickable.

What we keep about you. The text, whether you said it helped, the date, and a one-way hash of your connection with a salt that changes every day — that hash exists so one person cannot post a hundred times, and it stops being linkable to you when the day ends. No name, no email address, no account, no stored IP address, no tracking of any kind.

Why we are allowed to. Our legitimate interest, and yours, in knowing whether the analysis was any use: an outcome someone confirmed is worth more to the next owner than the analysis on its own. Posting is entirely voluntary and nothing on the page depends on it.

Taking it back. Write to us, quote the page and the words you wrote, and we will remove it. We cannot identify you from our side, so the text itself is how we find it. If the owner of the case deletes their report, every rating on it goes with the page.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our processing, or hand it over in a portable form. Use the contact details in this policy. We answer within one month.

You can also complain to a data protection authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), which supervises us, or the authority in the country where you live or work.

Deleting a case — you do it yourself. When your report is written you get a personal link with a key on the end. On that page there is a delete button: it removes the report, the PDF, the preview image, the saved conversation and every rating left on it. Both links stop working at once — a copy cached along the way may take up to ten minutes to disappear — and it cannot be undone. The saved conversation goes with it.

That button is the only way you can have a case deleted, and the reason is the rest of this page: we hold no name and no other identifier for you, and even the email address we hold for a free case is kept only long enough to deliver it and ask how it ended, never as a way to identify you afterwards — so a request by email is one we could neither verify nor act on. Keep the personal link if you might ever want the page gone. If you have lost it and the report is still up, write to us and say which car and roughly when — we will tell you honestly whether we can match it, and usually we cannot.

If you never press it, the report stays, and that is the consent. It stays public at its own address, anyone holding the link can read it and leave a rating on it, and in time search engines may list it. There is nothing on it that identifies you. That is a different question from the open library, above: there, the tick-box is real and unticked by default, so it publishes unless you say otherwise. Here, on the report’s own page, there is no such box — the page exists until you delete it, and that is the whole choice.

An AI writes the analysis

We say so on the page itself, and we repeat it here. The model produces a written opinion for you to act on or ignore. It makes no decision about you: it grants nothing, refuses nothing, and nothing about your case is decided automatically.

Changes

If we change what we collect, who it goes to, or how long we keep it, we change this page and date it.