PISTO
TermsLog in

Last updated 17 August 2026 · PISTO is in beta

Privacy Policy

PISTO is built by BlueDevLabs Ltd for UK trade plate companies, vehicle recovery operators, rental fleets, and garages to record vehicle condition at collection and delivery. This page explains what we collect through the app and dashboard, why, and how long we keep it.

Who this covers

PISTO is provided to companies(“customers”), not to the public. Company staff use the mobile app to carry out inspections; company admins use the web dashboard to manage jobs, staff, and reports. A vehicle’s owner or the person present at handover may also have their name and signature captured as part of an inspection, without themselves holding a PISTO account.

What we collect

  • Walkaround video and photos of the vehicle, captured by staff during an inspection.
  • Location — GPS coordinates at the point an inspection starts, plus a reverse-geocoded address derived from them.
  • Vehicle details— registration, VIN, make/model, and MOT/tax status, including data looked up from the DVLA’s public vehicle enquiry service.
  • Readings taken at inspection — mileage, fuel or charge level, weather conditions.
  • Damage findings — photos, panel location, type, and severity, flagged by our AI pipeline and confirmed, corrected, or added to by staff.
  • Sign-off details— the name and hand-drawn signature of whoever accepts the report at collection or delivery, plus the inspecting staff member’s own signature.
  • Account and usage data — staff name, email, login activity, and a chain-of-custody audit log of actions taken in the system.
  • Digital Driver ID— for companies using this feature, a photo of the driver (set by their office), their name, and service start date, used to produce a QR code and PIN a driver shows at collection or delivery. Scanning the code and entering the PIN takes whoever’s checking to a page on this site showing that photo, name, and status, plus whether a job is currently allocated to them — that person doesn’t need, and isn’t asked for, a PISTO account of their own.

Walkaround footage will incidentally capture whatever else is in view at the time — other vehicles, number plates, or people nearby. We don’t process this separately from the rest of the footage.

Why we collect it

To produce a condition report that’s actually useful as evidence if a damage dispute comes up — that’s the entire point of the product. Location and timestamps establish where and when an inspection happened; the rest builds the report itself.

For inspections run in AI-assisted mode, photos and the damage findings your staff confirm, correct, or add are also used to improve the accuracy of our damage-detection model over time. This doesn’t happen for inspections run in manual mode, since no AI pass is performed on those at all. Either way, this data is never shown to another customer or sold on.

Who we share it with

We don’t sell data, and we don’t share it across companies — each customer’s data is kept separate from every other customer’s. To run the service at all, some data passes through these providers, acting on our instructions:

  • Cloudflare — hosting, and storage for walkaround video/photos.
  • PlanetScale — database hosting.
  • Anthropic— inspection photos from AI-assisted inspections are sent for damage detection, and confirmed findings are used to improve detection accuracy over time (see “Why we collect it” above).
  • Google — postcodes and GPS coordinates are sent to calculate routes and look up addresses.
  • DVLA— a vehicle’s registration is sent to look up its make, model, and MOT/tax status.
  • Sentry — technical error reports, to catch and fix bugs.

How long we keep it

Raw walkaround video and photos are kept for 60 days, during which your company can download a copy — after that window they’re automatically deleted, unless a specific photo is still attached to a confirmed damage finding on a report, in which case it’s kept as part of that report. The report itself — the damage list, photos of confirmed findings, mileage/fuel readings, and signatures — is kept for as long as your company has an account with us, since that’s the actual long-term record. The audit log is kept indefinitely as a chain-of-custody record.

A Digital Driver ID photo is a different kind of record — an ongoing credential, not one-off evidence of a specific inspection — so it doesn’t follow the 60-day window above. It’s kept for as long as that driver’s ID stays set up, and deleted once their office removes it or they leave the company.

Your rights

Under UK GDPR you can ask to access, correct, or delete personal data we hold about you, or ask us to explain how a particular decision was reached. If you’re a member of staff at a PISTO customer, the quickest route is usually through your own company admin, since they control your account — you’re also welcome to contact us directly at [email protected].

Security

Data is encrypted in transit and at rest. Access is scoped per company — staff only see jobs assigned to them, and company admins only see their own company’s data.

Changes to this policy

PISTO is in active beta and this policy will be updated as the product changes. We’ll update the date at the top of this page whenever we do.

Contact

Questions about this policy or your data: [email protected].

PISTO by BlueDevLabs[email protected]