Last updated: 6 October 2026
Excess Scrubs (ABN: 78 714 407 674) provides an online car damage diagnosis for vehicle owners, anywhere. We are an Australian business based in Sydney, New South Wales. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
When you tap Diagnose it, the photo you took or chose and anything you wrote about the mark are sent to us. That happens just before the payment page opens, so that what you sent is waiting when you come back. The live camera picture is never sent. Only the one photo you take is sent, reduced to the size needed to read it.
We hold what you sent for up to 48 hours and delete the photo as soon as it has been read. If you do not pay, it is deleted after 48 hours.
To read the photo, it is passed to an AI model, Llama, made by Meta, running on Cloudflare's own servers, which already host this site. It suggests the answers a photo can show, the paint finish and whether the shape has changed, and you check every one before anything is worked out. Cloudflare does not use your photo or your words to train any AI model. Neither is sent to any other company. The photo reading is Built with Llama.
We keep the result, your confirmed answers, what the photo reading suggested and the words you wrote under your payment reference, so the link in your email keeps working and so we can check how often the reading was right. We do not keep your photo after it has been read.
To stop the service being flooded, each time a check is started we keep a one-way code made from your internet address for about 20 minutes. The address itself is not stored, and the code cannot be turned back into it.
Your browser also keeps your photo and your words in its session storage while you go to the payment page and back. Closing the tab clears them.
Neither a number plate nor a face is needed for a diagnosis, so please leave them out of the photo where you can.
After a result you can leave a review. If you do, it carries your star rating, what you wrote and your payment reference, and we store them.
The result is yours to keep. Save or print it if you want your own copy.
When your payment succeeds we email you a link to your diagnosis, at the address you gave the payment provider. That link is the only thing we send you.
We use your email address for that, and for answering you if you write to us. Nothing else. There is no mailing list and no account.
That email carries a link, not your result and not your photo.
Payment is handled by Stripe. We never see or hold your full card number.
From them we receive what is needed to confirm a payment and to handle a refund or a dispute: typically your name, your email address, the amount, the date, and the last few digits of the card. That information is held by Stripe under its own privacy policy, and we access it through their system rather than keeping our own copy.
Your result is stored under your payment reference, which is how your link finds it.
If you email us, we have your email address and whatever you tell us, in our ordinary mail history. Mail sent to support@excessscrubs.com is forwarded by Cloudflare to a personal inbox we read; we do not run a mail server ourselves.
We use it to answer you and for nothing else.
Five services handle parts of this:
Using them means your information is disclosed to recipients overseas, principally in the United States. Each operates under its own privacy policy, and we take reasonable steps to ensure they handle your information in a way consistent with the Australian Privacy Principles.
If you are in the United Kingdom or the European Union: we process your email address, your payment record, and the photo and words you send in order to perform the contract you entered when you paid, and to meet our record-keeping obligations. You may ask us for access, correction or erasure using the address in section 13, and the same request reaches the same person.
The site is hosted on Cloudflare Pages. Cloudflare may collect standard request data such as IP address and browser type, subject to its own privacy policy.
We also use Cloudflare Web Analytics to count page views. It sets no cookies and stores nothing in your browser.
This website uses Google Analytics to count visits and see which pages people read. It sets cookies in your browser to tell one visit from another, and it reports to us in aggregate. We do not use it to identify you, and we do not sell or share what it collects.
You can block it with your browser settings, a content blocker, or Google's own opt-out tool, and the site works exactly the same either way.
We take reasonable steps to protect any personal information we hold from misuse, loss and unauthorised access. In practice, the strongest protection is what we do not keep: your photo is deleted once it has been read, we never hold your card number, and payment records sit with Stripe rather than with us.
Under the Australian Privacy Principles you may ask us to give you access to the personal information we hold about you, correct it, or delete it. In practice that means your payment record, your result, your confirmed answers and the words you wrote, your review if you left one, and any messages between us.
To ask, email support@excessscrubs.com.
We may update this policy from time to time. The latest version is always at excessscrubs.com/privacy.
Excess Scrubs
ABN: 78 714 407 674
Sydney, New South Wales
support@excessscrubs.com