Privacy Policy

Last updated: 14 July 2026

This policy explains how Scrapbot ("we", "us") collects, uses and protects your personal data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It covers the public parts-search chat at scrapbot.ai, the seller/breaker waitlist, and the Scrapbot yard application.

Who we are

Scrapbot is a service operated by BAMBAM LLC, a limited liability company registered in Wyoming, USA. BAMBAM LLC is the data controller for the personal data described in this policy. If you have any questions or want to exercise your rights, contact us at admin@scrapbot.ai.

What data we collect

Parts-search chat (public). When you use the chat on the home page, we process the messages you send (for example a part description or a vehicle registration you type in) so we can answer them. We do not require an account and we do not ask for your name or email to use the chat.

Waitlist. If you join the seller/breaker waitlist, we collect the details you provide:

• Your name and email address
• Your business name and website, if you provide them (optional)
• Any additional information you choose to add in the free-text field
• The fact that you consented to be contacted, with a timestamp

Yard account (if you sign up for the app). We collect your name and email for authentication, optional business details (business name, type, address, phone, website), vehicle registration plates from photos you upload, public DVLA/DVSA vehicle and MOT records retrieved for those registrations, and the AI-generated parts analysis produced from them.

Technical data. For security and abuse prevention we may log your IP address and browser user-agent when you submit forms or make requests.

How we use your data and our legal basis

• To answer chat queries — legal basis: legitimate interests (providing the service you requested).
• To contact you about the waitlist and launch — legal basis: your consent, which you give on the waitlist form. You can withdraw it at any time (see Your rights).
• To operate your yard account — legal basis: performance of a contract (providing the app to you) and legitimate interests.
• To prevent abuse and secure the service — legal basis: legitimate interests.

Third-party services

We share data with the following processors only as needed to run the service. None of them use your data to train their own models.

• OpenRouter / AI model providers — receive the content of your chat messages and (for yard accounts) vehicle details to generate responses.
• eBay and other retail search sources — receive the search terms derived from your query to return live listings.
• UKVehicleData — receives vehicle registration numbers to return public DVLA/DVSA data (yard accounts).
• Neon — our database host, stores application data securely.
• Vercel — hosts the application and processes request logs.
• Vercel Blob — stores images you upload (yard accounts).

Cookies

We use only essential cookies. Specifically, an authentication session cookie is set when you sign in to a yard account, so the app can keep you logged in. The public chat and waitlist do not require this cookie.

We do not use analytics, advertising or third-party tracking cookies. Because our only cookies are strictly necessary to provide a service you have asked for, we rely on the "strictly necessary" exemption under the Privacy and Electronic Communications Regulations (PECR) and show a short notice rather than a consent banner. We store one small item in your browser's local storage to remember that you have seen that notice.

Data retention

Chat messages are processed to answer your query and are not tied to an identity; we retain only aggregate, non-identifying operational logs. Waitlist entries are kept until we launch and you have been onboarded, or until you ask us to remove you. Yard account data is retained for as long as your account is active and is deleted when you delete your account. Security logs are kept for a limited period.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — ask us to delete your data. Yard users can delete their entire account and all associated data from the Profile page; waitlist and other requests can be made by email.
• Portability — receive your data in a machine-readable format. Yard users can export their data as JSON from the Profile page.
• Withdraw consent — where we rely on consent (the waitlist), you can withdraw it at any time by emailing us, without affecting earlier processing.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email admin@scrapbot.ai. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the latest version.

Contact

For any privacy-related question, email admin@scrapbot.ai.