Privacy Policy
Last updated: 27/02/2026
GDPR Compliance
CityTriage AI processes personal data in accordance with the UK GDPR and the Data Protection Act 2018. We act as a data processor where our customers (e.g. councils, fleets) determine the purposes and means of processing; we act as a data controller for account and product usage data. We rely on lawful bases such as contract performance, legitimate interests, and consent where appropriate. You have rights to access, rectify, erase, restrict processing, data portability, and to object; you may also lodge a complaint with a supervisory authority. We do not use personal data for automated decision-making that significantly affects you without appropriate safeguards.
Mapbox & Location Data
We use Mapbox for maps and routing. Location data (e.g. report coordinates, vehicle positions) is sent to Mapbox only as necessary to provide map display and route optimisation. Mapbox processes this data under its own privacy terms. We store location data in our own infrastructure (Supabase) to associate reports and jobs with coordinates; we retain it only as long as needed for the Service and as required by law. We do not use location data for advertising or sell it to third parties.
Image Processing & AI
Photos you upload (e.g. hazard reports) may be processed by AI services, including OpenAI and similar providers, for classification and triage. Image data is sent only to support these features and in line with our data processing agreements. We do not use your images to train third-party models for purposes unrelated to providing the Service. Processed results (e.g. category, priority) are stored so we can display and act on them; raw images are retained according to our retention policy and your settings.
Data Security & Retention
We use industry-standard security (encryption, access controls, secure hosting) to protect your data. Data is stored in regions chosen to meet contractual and regulatory requirements. We retain personal data only for as long as necessary to provide the Service, resolve disputes, and comply with legal obligations. You may request deletion of your data subject to applicable law.