1. Who we are
Swage (swage.app) is operated by B&M Bodyworks Pty Ltd ("we", "us", "B&M"). This policy explains what information we collect through Swage, how we use it, who we share it with, and how you can access or correct it. It applies to the Swage platform only. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
2. What we collect
- Account information
- Your name, business name, email address, phone number and role, and your login credentials.
- Vehicle and estimate information
- Vehicle make, model, year and variant; VIN or registration number where you enter it; the damage panels and severity levels you record; the estimates generated; and, where you provide it, the actual repair cost.
- Photographs
- Images of vehicles that you upload for damage analysis. These may incidentally capture registration plates, locations, or people in the background.
- Quote requests
- Where you request a firm quote, the contact name, phone number and any notes you provide.
- Technical information
- IP address, browser and device type, log-in times, and records of your activity on the platform.
Most of what Swage handles is information about vehicles rather than people. Some of it — a registration number, a VIN, a photograph — may nonetheless be capable of identifying an individual, and we treat it as personal information where that is the case.
3. How we collect it
We collect information directly from you when you create an account, enter vehicle details, upload photographs, or request a firm quote. We also collect technical information automatically as you use the platform. Where we obtain vehicle information from a third-party lookup service using a VIN or registration number you enter, we collect that information from that service.
4. Why we use it
We use the information to:
- provide the platform and generate estimates;
- identify damage in photographs you upload;
- look up vehicle details from a VIN or registration number;
- respond to firm quote requests and, where you engage us, carry out repair work;
- maintain and improve the accuracy of our pricing and damage detection;
- keep the platform secure and investigate misuse;
- contact you about the platform, including support and service updates.
We do not sell your personal information. We do not use it for marketing by third parties.
5. Automated processing
Swage uses automated image analysis to identify visible damage in photographs you upload, and produces estimates using automated pricing rules. These processes assist your decision-making. They do not make decisions about you or produce legal or similarly significant effects for any individual. Damage identified automatically is presented for your review and can be corrected before an estimate is generated.
Note: automated image analysis is not currently active and is planned for a future release.
6. Who we share it with
Service providers
We use third parties to host and operate the platform:
- Hosting and database — our platform and its data are hosted with Supabase.
- Image analysis — photographs you upload are not currently transmitted to an external AI provider. When automated damage detection is released, this section will be updated to name the provider.
- Vehicle data — where you use VIN or registration lookup, that identifier is transmitted to our vehicle data provider.
These providers may access information only to perform services for us.
B&M
Where you request a firm quote, your contact details and the relevant estimate are provided to B&M's repair operations so we can respond.
Others
We may disclose information where required by law, or to protect our legal interests. We do not disclose your estimates to other dealers or platform users.
7. Overseas disclosure
Some of our service providers store or process information outside Australia, including in the United States and other countries where those providers operate infrastructure. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through our contractual arrangements with those providers. By uploading photographs or vehicle identifiers to Swage, you acknowledge that this information may be processed outside Australia.
8. Photographs
Photographs deserve specific mention because they can capture more than intended.
- We strip location metadata from images on upload, and do not use it.
- Photographs are stored against the estimate they belong to and are visible to your account and to us.
- Please photograph the vehicle and its damage only. Do not photograph people, documents, or anything unrelated to the vehicle's condition.
- We may use photographs, and the damage you confirm, to improve the accuracy of our damage detection. Where we do, we use them for that purpose only.
9. Security
We hold information on secured infrastructure, protected by access controls, encryption in transit, and account-level restrictions so that each user can access only their own data. No system is completely secure. If a data breach occurs that is likely to cause serious harm, we will respond in accordance with our obligations, including notifying affected individuals and the Office of the Australian Information Commissioner where required.
10. How long we keep it
We retain account information for as long as your account is active, and for a reasonable period afterwards for record-keeping. Estimates and the associated vehicle information are retained as business records and to maintain and improve pricing accuracy. Photographs are retained for 12 months from upload, after which they are deleted unless they relate to a repair we carried out, in which case they are retained with the job records.
11. Accessing and correcting your information
You can access and correct most of your information directly in the platform. To request access to other personal information we hold about you, or to correct it, contact us at admin@bmbodyworks.com.au. We will respond within a reasonable period. If we decline a request, we will tell you why. You can request deletion of your account and associated personal information. Some information may be retained where we are required or entitled to keep it.
12. Cookies
We use cookies and similar technologies for authentication and to keep you signed in, and to understand how the platform is used. You can control cookies through your browser, though disabling them may prevent the platform from working.
13. Complaints
If you have a concern about how we have handled your personal information, contact us at admin@bmbodyworks.com.au and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992.
14. Changes
We may update this policy from time to time. The current version is always available at swage.app/privacy, and we will give notice of material changes.
15. Contact
B&M Bodyworks Pty Ltd — for privacy questions or requests, email admin@bmbodyworks.com.au.