Ricambio

In short

Ricambio collects the minimum it needs to work: a name, an email address and the searches you run. No tracking cookies, no data selling, no profiled advertising. API keys are stored only as cryptographic hashes, and logbook or car photos are processed but never stored.

1. What we collect

Free trial: name, email address and profile (workshop/professional or enthusiast/private), provided by you at signup. Used to create your access key, verify the email is real, and contact you about Ricambio.

Service use: the text of your requests, the vehicle data you provide or that is read from a logbook or car photo (including the plate, if visible), and technical usage counters (search counts, rate limits). Logbook or car photos are processed to identify the vehicle and are not stored. We also keep, in anonymous form (no plate, no reference to your account), the searches you run — vehicle, request and generated sheet — to improve the service; they are deleted after 90 days.

Subscription: payment is handled entirely by Stripe. Your card details never touch our servers; we receive only the subscription status and billing references from Stripe.

Telegram bot: if you use @Ricambioo_bot, we store the numeric chat identifier and a reference (never the key itself) to the linked API key. Messages you send the bot are processed to produce your reply.

Cookies and tracking: no profiling cookies, no ad trackers, no third-party analytics. The site stores your API key and technical preferences locally on your device (localStorage) — that data stays in your browser and is not transmitted to us as tracking.

2. Why we process it (legal bases)

Contract performance (art. 6.1.b GDPR): delivering searches, your key, your subscription.
Legitimate interest (art. 6.1.f): usage limits, abuse and fraud prevention, service security, and — for workshop signups — possible commercial contact about Ricambio, which you can object to at any time.
Legal obligations (art. 6.1.c): invoicing and tax requirements on payments.

3. Who processes data for us

A small set of providers, each for its own function only:

hosting and anti-bot protection provider · AI processing provider (to read requests and logbook photos) · email delivery provider (verification emails) · payment processor (subscription) · messaging platform (only if you use the bot).

The specific list of sub-processors is available on request by writing to [email protected].

Some of these providers also operate outside the European Union (United States). Transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

4. How long we keep it

Account data (name, email, profile, key) for as long as the account exists; you can request deletion at any time. Email verification requests expire after 30 minutes. Technical usage counters reset cyclically. Billing data is kept for the statutory period (10 years). Your search history (request text, vehicle data and generated sheet) stays available in the workshop panel: we keep the 300 most recent per workshop, and older ones are deleted automatically.

5. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, and to receive it in portable form (arts. 15–22 GDPR). Write to [email protected]: we reply within 30 days. You may also lodge a complaint with the Italian supervisory authority (garanteprivacy.it).

6. Affiliate links

Sheets may contain links to external catalogues (eBay, AUTODOC via the Awin network). If you buy through these links we may earn a commission at no extra cost to you — where that happens, it is disclosed on the sheet. Those sites apply their own privacy policies and cookies, not ours.

7. Data controller

Sicilia Build S.r.l.s. Unipersonale — Via Angelo Cavarra 144, 96017 Noto (SR), Italy — VAT IT02180560894.
Privacy contact: [email protected].

8. Changes

If this policy changes substantially we will update the date above and, for significant changes, announce it on the site or by email.