California Consumer Privacy Act (CCPA) · Updated June 15, 2026
If you are a California resident, the California Consumer Privacy Act gives you the right to:
No. Daedalus does not sell your personal information to any third party. We do not share your personal information with third parties for cross-contextual behavioral advertising purposes.
We share limited data with service providers strictly for the purpose of operating our service: cloud hosting and database (Fly.io), transactional email (Postmark), appointment SMS where a shop enables it, and — only when a shop turns on the cloud AI assistant — Anthropic. These relationships are governed by data-processing contracts and do not constitute a "sale" or "sharing" under CCPA. The authoritative list, with what each party receives and where it is processed, is Schedule B of the Data Processing Agreement.
Daedalus contributes anonymized, de-identified vehicle diagnostic data — a fault code, the category of repair that resolved it, and the vehicle's year, make, model and engine — to an aggregated dataset used to improve the service. It also contributes de-identified labor times: the quoted and actual hours for a job, with no labor rate attached. Both carry no personal information — no names, contact details, VINs, prices, or identifiers of any kind — and nothing is visible to anyone until at least five independent shops have contributed the same thing. De-identified data is excluded from the CCPA definition of "personal information" under Cal. Civ. Code § 1798.140(v)(3).
This is part of the Service rather than something you are asked to consent to, and it is set out in Section 3 of the Terms. Because the data carries no personal information, there is no opt-out to offer under CCPA — there is nothing personal in it to withhold.
The one category that can be traced to a person is a vehicle's service history, which is keyed to a VIN. That is off by default and is controlled by the shop, under Privacy & data. If you are a car owner and want to know whether a shop enabled it for your vehicle, or want it withdrawn, contact the shop that serviced your car — they decide, and we act on their instructions.
Personal information entered on behalf of your customers (names, contact info, vehicle data) is controlled by you as the data controller. See our Data Processing Agreement for our obligations as your processor.
Use this form to submit a verified CCPA request. We will respond within 45 days. We may need to verify your identity before processing deletion or disclosure requests.
You may designate an authorized agent to submit a request on your behalf. We will require written proof of authorization and may verify your identity directly.
Daedalus Automotive
[email protected]
Subject line: "CCPA Request"