Terms and Privacy
Last updated: 3 November 2026
Icon is run by Nik Mishin, a sole trader trading as Icon.
Address: Haulfryn, Ffordd-y-Gyfraith, Bridgend, CF32 0BS, Wales, United Kingdom.
Email: icon.adminteam@gmail.com · Website: icon-business.com · Trust and safety
Terms of Service
These terms are the agreement between you and Icon ("we", "us") when you use the Icon app and website (icon-business.com), including Icon Pulse, Icon Shops, Icon Bookings and our other features. By making an account or using Icon, you agree to them. Please read them with our Privacy Policy below.
1. Who can use Icon
- You must be at least 13 years old. If you're under 18, you need a parent or guardian's permission, and a parent or guardian must manage any payment.
- Trade+ (the trading tools) and buying physical products are for people aged 18 or over. We go by the date of birth you give us; once given, you can't change it yourself (contact us if it's wrong).
- If you use Icon for a business, you confirm you're allowed to act for that business.
2. Your account
You sign in with a one-time code sent to your email, or with your Google account. Keep access to these private and never share a sign-in code: Icon staff will never ask you for one. You're responsible for what happens on your account. Tell us straight away at icon.adminteam@gmail.com if you think someone else has used it.
3. Using Icon fairly
- Don't use Icon for anything illegal, harmful, hateful, abusive or misleading, including fake reviews, scams or fake documents.
- Don't copy or imitate other people's brands, logos or copyrighted work, or pretend to be a real person or company.
- Only look up, track or scan vehicles you own, or that you have the owner's permission to check. GPS trackers must only be fitted to your own vehicle or with the owner's clear consent.
- Icon won't help remove or disable emissions equipment (such as a DPF or EGR valve), tamper with a mileage reading, or get around a vehicle's security.
- Only add other people's personal details (customers, staff, job applicants) if you're allowed to, and use them lawfully.
- Don't try to break, overload, copy or get around the limits or security of the service.
4. AI and advice
Icon uses artificial intelligence. Its answers, designs, forecasts and other content can be wrong or out of date. Please check anything important before you rely on it.
- Cars: diagnostics, repair costs, reliability, rarity and valuations are guidance only. Get a qualified mechanic to check anything that affects safety, such as brakes, steering, tyres or airbags.
- Money: Trade+ is a learning tool that shows general, automated information about markets. It isn't financial advice or a personal recommendation, it doesn't take your circumstances into account, Icon isn't authorised by the Financial Conduct Authority, and its forecasts and setups will often be wrong. Never risk money you can't afford to lose.
- How Trade+ forecasts are made: every forecast, Top 5 scan and scorecard entry is made automatically by Icon's AI, not by a person, and shows the date and time it was made. It's general information, not a recommendation for you, and it isn't updated afterwards. It's based on recent price history and on the news it links to; when no price history is available it uses prices and news found on the web, and says so. Charts are shown by TradingView. Icon never tells you to buy or sell, how much to trade or what leverage to use.
- Conflicts of interest: Icon isn't paid by any broker, exchange, coin or company it covers and earns nothing from anyone's trades. Icon's owner may trade markets that Icon covers. Every forecast is checked automatically against the real price, and the results are shown in full on the scorecard, including the wrong ones.
- Crypto: don't invest unless you're prepared to lose all the money you invest. This is a high-risk investment and you should not expect to be protected if something goes wrong. Cryptoassets are largely unregulated in the UK, and the Financial Ombudsman Service and the Financial Services Compensation Scheme don't cover them.
- Business, tax, payroll and legal tools: these help you get organised but are not legal, tax or accounting advice. Check with HMRC, an accountant or a solicitor before you rely on them.
- Content you create: as between you and us, you own what you make with Icon, as far as the law allows. You're responsible for how you use it. Check that names and logos are free to use before using them commercially.
5. Icon Pulse (car diagnostics)
- Only use Icon Pulse when it's safe. Don't look at or use your phone while driving. Use the performance timers only on a private road or a track, never on public roads.
- Clearing fault codes doesn't fix a fault and resets the MOT readiness checks. Only clear codes once a repair is done. Icon doesn't clear airbag faults.
- Not every car, module or feature can be read. Results depend on the car and the scanner.
- We aren't responsible for damage caused by using Icon Pulse in a way these terms or the app warn against.
6. Plans, Sparks and payments
- Some features need a paid plan or use Sparks, Icon's in-app credits. The price, what's included and how often you're billed are shown before you pay. Payments are handled securely by Stripe.
- Monthly plans and phone numbers renew automatically each month until you cancel. Stripe emails you before each renewal. You can cancel any time in the app (Plans → Manage or cancel), as easily as you signed up, and you keep it until the end of the month you've paid for. A plan bought for one month, or a free trial, ends by itself and never turns into a paid plan.
- Sparks have no cash value, can't be transferred, and are used up as you use AI features. They aren't refundable except where the law says otherwise.
- A paid plan's monthly Sparks are given each time the plan is paid, and unused monthly Sparks don't carry over. Before an AI job starts, Icon sets aside the most it could cost; anything not used goes straight back. If a job ever ends up costing a little more than the Sparks you had left, the difference comes off your next Sparks.
- Paid plans also have a daily and a weekly limit on how many of the plan's monthly Sparks can be used, shown in the app with the time each one resets. The day starts when you first use Sparks and resets 24 hours later; the week resets every 7 days from when your plan started. Top-up Sparks don't count towards these limits.
- Free Sparks (the monthly Sparks of free accounts, trials and plans we give for free) share one daily allowance across everyone. If it runs out on a busy day, free Sparks pause until midnight (UK time) and come back then. Sparks you paid for, through a plan or a top-up, are never paused by this.
- Your 14-day right to cancel: you normally have 14 days to cancel. Before you pay, Icon asks you to tick that you want it to start straight away, and your receipt email confirms it.
- Plans and phone numbers (services): if you cancel within 14 days, we refund you less a fair amount for what you used before you cancelled. Once the service has been fully provided, the right to cancel ends.
- Sparks top-ups (digital content): by ticking, you agree the Sparks are added straight away and that you lose the right to cancel once they're in your account.
- Physical products (such as the Icon Pulse scanner and the Icon Shield Car Tracker): you can return them within 14 days of delivery for a refund, in line with UK consumer law. If a product has been fitted or used more than you'd need to check it, we may take off a fair amount for the loss in value. Faulty products are covered by your legal rights.
- Pre-orders (such as the Icon Shield Car Tracker before our tracking service goes live, and the Icon Diagnostics Pack before Diagnostics is ready): you pay when you order and we post it as soon as it's ready. You can cancel for a full refund at any time before it's posted. If it isn't posted within 30 days, we'll tell you the new date, and you can wait or cancel for a full refund.
- Car trackers must only go on your own vehicle, or one where every regular driver knows a tracker is fitted. Have it fitted by a garage or auto electrician. The immobiliser only goes in the starter circuit and only switches on with the ignition off; it never stops a moving vehicle. Tell your insurer once a tracker or immobiliser is fitted.
7. Using Icon for your business
Some features let you deal with your own customers, staff or job applicants: Bookings, Shops, Invoices, Team and Payroll, and Recruiting.
- You're responsible for your business, your prices and your obligations to your customers, staff and applicants. This includes their personal data, for which you are the "controller" and we act for you as your "processor".
- When someone buys from your Icon Shop or books with you, the contract is between them and you, not Icon.
- Booking fees, if they apply, are shown in Bookings before you switch them on. Icon charges them to the card you add in Bookings.
- When your customers pay online for a booking, the money goes straight into your own Stripe account (Stripe Connect). Icon never holds your customers' money; Stripe takes Icon's fee, if any, at the time of payment.
- Our Data processing terms below are part of these terms and apply whenever you use Icon for your business.
Call Centre (phone calls from Advertiser). If you use it, you are the caller and you're responsible for following the law on marketing calls (in the UK, the Privacy and Electronic Communications Regulations). In particular:
- Your AI assistant may only phone people who have specifically agreed to be called by it. Icon only lets AI calls go to people who said yes on your permission link and proved the number is theirs with a code Icon texted to it. If you record that someone agreed another way, it's kept as a note and Icon texts them your permission link so they can confirm it themselves. A permission lasts 6 months; after that they need to say yes again. Asking for a call back isn't permission for sales calls.
- Every AI call says your business name and your business address (with postcode) or a freephone number, so you must add one before your AI can call.
- Before you phone someone yourself (Call Coach) who hasn't agreed to your calls, you must check the number isn't on the Telephone Preference Service (TPS) or Corporate TPS lists. Icon asks you to confirm this before each call and keeps a record that you did.
- Say who you are, never pretend the AI is a person, and stop calling anyone who asks. Icon keeps a do-not-call list for you, including people who say no on the permission page or press 9 when they call back.
- Calls only go to UK numbers, Monday to Saturday from 8am to 8pm, and use Sparks for the phone minutes and the AI. If we get a complaint, we may look at the permission you hold for that number and switch off your calling while we check, or for good if it's been misused.
AI Receptionist and Get a call back. On the Basic, Business and Legend plans you can have an Icon phone number answered by an AI receptionist, and a "Get a call back" link where people ask your AI to ring them.
- Your AI always says it's an AI. It only answers from the information you give it and your Bookings, so check that information is right; you're responsible for what it tells your callers and for the bookings it makes on your behalf.
- Call backs say your business name and your business address (with postcode) or freephone number, which you add before switching them on. They only go to people who asked for one on your link and proved the number is theirs with a code Icon texted to it, to UK numbers, any day between 8am and 9pm (because they asked for the call). Your own "Ring me now" test call only goes to a phone you've proved is yours the same way. Icon saves each person's permission (the exact words, when, and a scrambled code of their internet address). If someone says it wasn't them, or asks not to be called again, they're added to your do-not-call list.
- Calls use Sparks for the phone minutes and the AI (shown before you switch it on). The text codes and permission texts Icon sends to your callers use a few Sparks each too (about 8 a text). If your Sparks run low, calls go to your mobile if you've added one, or the caller is told to try later.
- Before you get a number, UK rules say it must be registered to your business. You give us your details (and, for sole traders, a photo of your passport or driving licence) and we send them to Twilio, our phone provider, to check. Approval usually takes up to 2 working days. The details must be true.
- Your Icon number: free on Legend, otherwise £3.50 a month (cancel any time). The number stays Icon's: if your plan or add-on ends, you keep it for 7 more days, then it's taken back and rests for 30 days before anyone else gets it. You can't take it to another provider.
- At the start of every call your AI tells the caller it's an AI, and that your team may listen in and a written note of the call is kept. Tell your staff too, and mention it in your own privacy notice. Only listen to calls for your business, and don't use it to listen to calls you have no right to hear.
8. Content other people can see
Some things you make in Icon can be seen by other people: your shop and its items, job adverts, booking pages, what you share with the car library, Community Watch and stolen-car reports, and Trend Radar scans. Don't post anything illegal, harmful or misleading, and only report a car as stolen if it's yours (or you're allowed to act for its owner) and it really has been stolen. Alerts for cars without an Icon tracker say Icon hasn't checked the details. Reviews: only ask real customers for reviews, never write, buy or pay for reviews, and don't hide honest bad ones in a way that misleads people; we remove fake reviews and may close accounts that post them. You can report content to us at any time (see Reports and complaints). We'll review reports, remove illegal content quickly, and may suspend accounts that post it.
9. Other services
Icon uses and links to other services, such as DVSA and DVLA vehicle records, Telegram, Google, TradingView and eBay. Their own terms apply when you use them, and we're not responsible for their content or availability.
10. Changes and availability
We're always improving Icon, so features may change, be paused or end. We set fair-use limits (for example, a daily number of AI requests) to keep the service running for everyone. If we make an important change to these terms, we'll tell you in the app or by email before it takes effect.
11. Ending your account
You can stop using Icon at any time and ask us to delete your account by emailing icon.adminteam@gmail.com. We may suspend or close accounts that break these terms or put other people at risk. Where it's fair to do so, we'll tell you why.
12. Our responsibility to you
We'll provide Icon with reasonable care and skill. Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else the law doesn't allow us to limit, and nothing affects your legal rights as a consumer.
Otherwise, we aren't responsible for losses we couldn't reasonably have foreseen, for business losses (such as lost profit or lost data you could have backed up), or for decisions you make based on AI-generated content. If we are responsible for a loss, our total liability to you is limited to the amount you paid us in the 12 months before it happened.
13. The law
These terms are governed by the law of England and Wales. If you're a consumer you can bring a claim in the courts of England and Wales, or in Scotland or Northern Ireland if you live there. Please contact us first so we can try to put things right.
Waiting list offer and founding giveaway rules
These rules apply to the Icon waiting list and the £300 founding giveaway on icon-business.com. They are the same rules shown on the waiting list page.
- Free to enter. No purchase or payment is needed.
- Open to UK residents aged 18 or over who join the Icon waiting list with a verified email. Icon staff and their families can't enter. If you're under 18 you can still join the waiting list and keep your discount, but you aren't entered into the giveaway.
- You get 1 entry for joining, plus 1 extra entry for each friend who joins the waiting list using your invite link and verifies their email, up to 10 extra entries.
- Fake, duplicate or self-referred accounts are removed, along with their entries.
- Entries close when Icon launches. We'll email everyone on the waiting list with the exact closing date and time at least 7 days before. One winner is drawn at random, weighted by entries, within 7 days of the closing date. The winner is emailed and must reply within 14 days, or a new winner is drawn.
- The prize is £300, paid to the winner by bank transfer. It can't be passed on to someone else.
- The promoter is Nik Mishin, trading as Icon, Haulfryn, Ffordd-y-Gyfraith, Bridgend, CF32 0BS. Questions: icon.adminteam@gmail.com. The winner's first name and county are published on icon-business.com within 30 days of the draw, unless they ask us not to (we keep the record and can share it with the Advertising Standards Authority if asked).
- The 25% founding discount is saved to the email you joined with. When Icon opens, sign in with that email and it's applied automatically to any plan.
- We use the email you join with, and the invite-link entries, only to run the waiting list and this giveaway and to email you about your discount and the draw. See the Privacy Policy below. You can ask us to remove you at any time.
Privacy Policy
This explains what personal data Icon collects, why, who we share it with and your rights. The "controller" responsible for your data is Nik Mishin, trading as Icon. Contact details are at the top of this page.
What we collect
- Account: your name, title (if you choose one), date of birth, country and town, how you heard about Icon, whether you want news from us, and the email address you sign in with. We use your date of birth to check you're old enough and to keep under-18s' settings private. If you use Google sign-in, we receive your name, email address and profile picture from Google (never your Google password).
- Profile and preferences: what you use Icon for, your business name if you give it, your language, your settings, and your level and XP.
- What Icon remembers: if you use it, Icon keeps notes between conversations about things you tell it (such as your name, people, business details, preferences and plans) so it can help you better. You can see, change or delete these in the app.
- Voice and listening: only if you switch it on. When listening is on, Icon listens for a greeting such as "Hey Icon" and turns what you say next into text. Depending on your device, speech is turned into text by your browser's own speech service (in Chrome, this is provided by Google, so while listening is on, what the microphone hears goes to Google to spot the greeting) or by our AI providers. Voice replies are made by ElevenLabs.
- Live voice calls: only when you start one. Your voice goes to OpenAI so Icon can talk with you in real time. We keep how long each call lasted and the Sparks it used, not the recording or what was said. If you ask Icon during a call to look at or change your bookings or leads, the details needed for that (for example customer names, times and phone numbers) go to OpenAI too, and nothing is changed until you say yes or tap Confirm. OpenAI may keep call data for a short time for safety checks, under its own policy.
- Call Centre (business accounts): when a business phones people with Icon, the call's sound goes live through Twilio, and through OpenAI when the business's AI assistant talks or Call Coach listens. It isn't recorded. We keep the number called, when, how long, the outcome and any notes the business saves. If you're asked on a permission page whether a business's AI may call you, we keep your number, name, your answer, the exact words you agreed to, when, and a scrambled code made from your internet address, so the business can show it had permission. To prove the number is yours, Icon texts it a 6-digit code (we keep only a scrambled copy of the code, for up to 400 days, and how often codes were sent). A yes lasts 6 months. If you complain to us about a call, we can see that record to check it. You can stop calls at any time: say "stop" on the call, or ring back the number that called you and press 9.
- AI Receptionist and call backs (business accounts): when you ring a business's Icon number, or ask a business to call you back, the call's sound goes live through Twilio and Icon's phone server to OpenAI, so the business's AI assistant can talk with you. No sound recording is kept. At the start, the AI says it's an AI and that the business may listen in. We keep your number, when, how long, what the AI did (for example a booking or a message you left), a short summary and a written note of what was said, for the business to see. If you ask for a call back, we keep your name, number, what it's about, your answer, the exact words you agreed to, when, and a scrambled code made from your internet address. The business may listen in live. You can say "stop" on any call, and you won't be called back again.
- Registering a phone number (business accounts): if you ask for an Icon phone number, we collect your business name, company number and website (limited companies) or your name (sole traders), a contact name, mobile, email and address, and send them to Twilio, which must check them under UK telecoms rules. Sole traders also upload a photo of their passport or driving licence: it goes straight to Twilio and Icon doesn't keep a copy. We keep the other details so you can fix them if Twilio asks.
- The Windows app: if you install it and allow it, Icon can use your PC for tasks you ask for, and can record your screen when you start a recording. Recordings are saved on your PC (in Videos › Icon Recordings) unless you choose to upload them. When Icon uses your PC for a task, it may send pictures of your screen to our AI providers (Anthropic or OpenAI) to see what to do next. The app asks your permission before it uses your PC for the first time.
- What you create and ask: messages, photos, files and voice you send to Icon's AI, and what you save (designs, sites, listings, plans, reports).
- Cars: number plates you check and the DVSA/DVLA records we fetch for them, cars in My Garage and their photos, and Icon Pulse scan data (fault codes, sensor readings, the VIN, battery and trip data).
- Location: only if you use Live Tracking (your tracker's position and trip history), or if you choose to share your location to find nearby garages.
- Job applications: if you apply for a job through Icon, the business may have Icon's AI (Anthropic) check your application against the job and give it a score with reasons. It only helps the business: a person at the business decides, and you can ask the business to look at your application again without the AI score.
- Business data: if you use them, your bookings and customers, shop items and orders, invoices, team members and payroll details (which can include National Insurance numbers and bank details), and job adverts and applications (including CVs).
- Payments: Stripe processes card payments. We see the payment status and the last four digits of the card, never the full card number. If you use Bookings with booking fees, Stripe keeps your card on file so Icon can charge those fees.
- Sponsor wall: if you sponsor Icon and tick "Show my name on the sponsor wall", the name you choose is shown to Icon users. Untick it any time to remove it.
- Shared scans: if you run a Trend Radar scan, the scan (the trends it found, not your personal details) is shown to other signed-in Icon users until someone scans again.
- Help requests: your messages with Icon Support. To help you, our support team can view your account details. Every look and change is logged.
- Telegram: if you link Telegram, your Telegram chat ID, your username and the alerts you've chosen.
- Technical: daily usage counts, error reports, and basic device and browser information.
- How you use Icon: which studios and features you open and use, and when, linked to your account. We use this to improve Icon, fix problems and help you when you ask for support. Only the Icon admin can see it, and we keep it for 90 days.
- Visits to our website: when someone opens icon-business.com's public pages (the home and sign-up page, the demo, this page and the trust page), we add one to a daily count for that page, with the name of the website or campaign that sent them (for example Google or TikTok). It isn't linked to you: no cookies, nothing stored on your device, and no internet address or browser details are kept. We keep these counts for about 13 months.
Why we use it (and our lawful basis)
- To provide Icon and your account (contract): running features, saving your work, taking payments and sending sign-in codes, receipts and the alerts you've asked for. When you make an account we also send a short welcome email and, if you haven't finished setting up, one reminder. If you start signing up but never type in your code, we send one reminder to that address and nothing else.
- To keep Icon safe and working (legitimate interests): preventing abuse and fraud, applying fair-use limits, fixing problems, and seeing which features are used so we can improve them.
- With your consent: Telegram alerts, sharing what your scans learn with the Icon car library, location features, the sponsor wall and marketing messages (news and offers by email, such as a welcome discount). You can change these any time in the app (Settings → News and offers), and every offer email has an unsubscribe link.
- To meet legal duties (legal obligation): keeping payment and tax records, and responding to lawful requests.
The Icon car library
If you choose to share, Icon Pulse adds what it learns about your type of car to a shared library: the make, model and year, which modules answered and any data names you've added. This never includes your VIN, number plate, location or personal details. You can turn sharing off in Pulse at any time.
Who we share it with
We don't sell your data. We share it only with the service providers that run parts of Icon for us, who may only use it to provide their service:
| Provider | What they do for Icon |
|---|---|
| Supabase | Accounts and sign-in, database, file storage and our server functions |
| Netlify | Hosting the website |
| Anthropic | The Claude AI that powers Icon's answers |
| OpenAI | Live voice: your voice goes straight to OpenAI during a live voice call so it can understand you and answer out loud, plus any booking or lead details you ask Icon to look at or change during the call (only when you start one). Also the voice of a business's AI Receptionist and call backs, and the short summary of each of those calls. |
| Twilio | Phone calls and texts: connects Call Centre, AI Receptionist and call back calls, provides businesses' Icon numbers, and sends Bookings texts (only when those features are used). Calls aren't recorded. |
| Render | Runs Icon's phone server, which passes call sound between Twilio and OpenAI while a call is on (nothing is stored there) |
| fal.ai, ElevenLabs, Recraft | AI images and video, natural voices, and logo designs (only when you use those features) |
| Stripe | Payments |
| Gmail (sending our emails), Google sign-in if you choose it, Google Maps for garage locations, Google Fonts (the app's lettering), and speech-to-text in Chrome if you use listening | |
| OpenStreetMap | Map pictures in Live Tracking and maps (your device fetches them directly), and turning a tracker's position into a street name for alerts |
| Cloudflare | The robot check on the sign-in page (Turnstile), when it's switched on |
| jsDelivr and cdnjs | Delivering some of the app's code libraries to your device |
| Telegram | Delivering alerts, only if you link Telegram |
| DVSA and DVLA | Vehicle MOT and tax records for the number plates you look up, and for garages using MOT reminders, the MOT due dates of their customers' cars |
| Traccar | The GPS tracker service behind Live Tracking |
| eBay | Finding deals for your deal alerts |
AI training: we use our AI providers' business services. Anthropic and OpenAI don't use data sent through those services to train their models, and we choose the settings that stop training wherever a provider offers them. We never sell your data or use it for advertising.
The trading charts are shown by TradingView inside your browser, and Icon Pulse can download open car-signal files (opendbc) from GitHub to your device. If you use Bookings, Shops or Recruiting, your customers' or applicants' details are shared with you, the business they chose to deal with. We may also share data if the law requires it, or to protect people's safety. Icon doesn't send text messages at the moment; if that changes, we'll update this policy first.
Data outside the UK
Some providers store or process data outside the UK, for example in the USA or the EU. Where they do, we rely on UK-approved protections: for US providers certified under it (for example Stripe, Twilio and Google), the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"); otherwise the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses in their terms. Data in the EU is covered by the UK's adequacy rules for the EU.
How long we keep it
- Your account and saved work: while your account is open. When you ask us to delete your account, we delete it within 30 days, and it leaves our backups within a further 90 days.
- Payment and tax records, including your "start straight away" tick before paying: 6 years, as UK law requires.
- Help requests and the support access log: 2 years.
- Usage counts, feature use and error logs: up to 90 days. Live voice call times and Sparks: kept with your Sparks receipts.
- Call Centre: who a business called, when, how long, the outcome and its notes, plus permissions and do-not-call requests (the number, name, the words agreed to, when, and a scrambled code of the internet address used): while the business's account is open, so it can always show it had permission and respect a "don't call". Calls aren't recorded; the live captions stay on the business's screen unless they save notes.
- AI Receptionist and call backs: the written note of what was said, 90 days; the call itself (number, when, how long, what the AI did, the summary and messages), call back permissions and do-not-call requests: while the business's account is open. Calls aren't recorded.
- Phone number registration details (not your ID photo, which we never keep): while your account is open; Twilio keeps its own copy under its policy.
- Tracker positions: 90 days, then deleted automatically (stolen-car reports keep what's needed while they're open). Scan history: until you delete it or close your account.
- Stolen-car police links: they stop working 30 days after they're made unless the owner renews them.
- Phone number checks (the scrambled codes texted to prove a number): up to 400 days.
- Some data, such as your settings, scan history and cached results, is stored on your own device. You can clear it from your browser.
Your rights
Under UK data protection law you can ask to see the data we hold about you, correct it, delete it, limit or object to how we use it, or receive a copy to take elsewhere. You can also withdraw any consent at any time. Email icon.adminteam@gmail.com and we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or phone 0303 123 1113.
Security
Your data is protected in transit by encryption (HTTPS), and access is limited by account-level security rules. Secret keys stay on our servers, never in the app. No online service is completely secure, so please keep your sign-in methods private.
Children and under-18s
Icon is not for children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.
If you're 13 to 17, Icon uses the most private settings by default: nothing you scan is shared with the car library, Trade+ and buying products are switched off, and you won't get marketing unless you choose it. A parent or guardian must make any payment.
If a business contacted you through Icon (you don't need an Icon account)
Businesses use Icon to talk to their customers. If a business has called you, you rang a business's Icon number, you asked for a call back, you booked or bought from a business, applied for a job, drive a vehicle with a business's tracker, or were mentioned in a stolen-car report, this is what happens to your details:
- Who's responsible: the business is the "controller" of your details, and Icon handles them for the business as its "processor" (see the table below). Icon is the controller only for what it keeps to run and protect the service, such as do-not-call lists, permission records, phone number checks, complaints and abuse checks.
- What's kept: what you gave the business or said on the call (for example your name, number, what it was about, a booking or a message), when, and for calls a short written note and summary. No sound recordings are kept. How long: see "How long we keep it" above.
- MOT reminders and missed calls: if you ticked "Email me when this car's MOT is due" when booking (or told the garage you'd like reminders), Icon checks that car's MOT due date with the DVSA and emails you 30 and 7 days before, for that garage. Every reminder has a link to stop them. If you rang a business's Icon number and nobody could answer, and the business has switched this on, you may get one text from the business with its booking link (at most one a day).
- Why: so the business can do what you asked (call you back, book you in, answer your call or application), and so Icon can prove you agreed to calls and respect a "don't call".
- Your rights and stopping contact: say "stop" on any call, ring back the number that called you and press 9, or ask the business. You can also ask us to see, correct or delete your details, or complain about a business, by emailing icon.adminteam@gmail.com. We'll pass requests to the business where they need to act, and you can complain to the ICO (see Your rights).
| Data | Who's the controller | Icon's role |
|---|---|---|
| Your own Icon account, plans, Sparks, usage, support | Icon | Controller |
| A business's bookings, customers, shop orders, invoices, team and payroll | The business | Processor |
| Job applications and CVs | The business that posted the job | Processor |
| Calls made or answered by a business's AI, call notes and summaries | The business | Processor |
| Call permissions, do-not-call lists, phone number checks, call complaints | Icon (and the business, to show it had permission) | Controller |
| Tracker positions of a business's or family's vehicles | The tracker's owner | Processor |
| Stolen-car reports and Community Watch alerts | The person who reported it | Hosts it, and removes reports that are wrong or unlawful |
Data processing terms (for businesses)
When you use Bookings, Shops, Invoices, Team and Payroll or Recruiting, you add personal data about your customers, staff or applicants. For that data you are the controller and we are your processor. As required by UK GDPR Article 28, we agree to:
- only use that data to provide those features to you, following your instructions (which are these terms and how you use Icon), unless the law requires otherwise, in which case we'll tell you if we can;
- make sure anyone who can access it is bound to keep it confidential;
- keep it secure with appropriate technical and organisational measures (encrypted connections, account-level access rules, secret keys kept on our servers, logged support access);
- use only the providers listed in "Who we share it with" as sub-processors, under written terms that protect the data at least as well, and tell you before we add or change one so you can object;
- help you respond to people exercising their data rights, and help you with security, breach notifications and impact assessments, as far as we reasonably can;
- tell you without undue delay if we become aware of a personal data breach affecting that data;
- delete it (or give it back to you) when you close your account, unless the law requires us to keep it; and
- give you the information you need to show these terms are met, and allow reasonable audits.
Details of the processing: subject matter and purpose: providing those features to you; duration: while you use them and until deletion as above; nature: storing, organising, showing, sending (email, calls, texts) and AI processing when you use AI features; types of data: names, contact details, booking and order details, messages and call notes, CVs and application answers, staff and payroll details, vehicle positions; people: your customers, callers, staff, job applicants and drivers. We don't let our providers use that data to train AI models where they give us that choice.
You confirm you have a lawful basis to add that data to Icon and that you've told the people concerned how you use it (for example, in your own privacy notice).
Cookies and storage on your device
Icon doesn't use advertising or tracking cookies. We use your browser's storage only for things Icon needs to work: keeping you signed in, remembering your settings and language, and saving work and results on your device. Counting visits to our public pages doesn't use cookies or your device's storage either. Embedded services such as TradingView charts may set their own cookies when you open them. When the app loads its lettering from Google Fonts or a code library from jsDelivr or cdnjs, those services see your device's internet address, as with any website.
Reports and complaints
Report content: if you see something on Icon that's illegal, harmful or breaks these terms (for example in a shop, job advert, booking page, the car library, Community Watch or a shared scan), email icon.adminteam@gmail.com with a link or description. You'll also find "Report content" in your account menu and at the bottom of shop, booking, job and stolen-car pages. We'll review every report, remove illegal content as quickly as we can, and tell you what we did.
If a post or report says something about you that you think is untrue or unlawful (for example a stolen-car report, a shop or a job advert): email us with your name and how to reach you, a link to it or where it is, what it says, and why it's wrong. We'll contact the person who posted it. If they don't reply within 5 days, or can't show it's true and lawful, we'll take it down. Anything clearly illegal comes down straight away.
Complaints: if you're unhappy with Icon, how we handled a report, or a decision we made about your account or content, email us with "Complaint" in the subject. We'll reply within 5 working days, and aim to resolve it within 30 days. If it's about your personal data and you're still unhappy, you can complain to the ICO (see Your rights).
Changes to this policy
If we change this policy in an important way, we'll tell you in the app or by email. The date at the top shows when it was last updated.
Contact
Nik Mishin, trading as Icon
Haulfryn, Ffordd-y-Gyfraith, Bridgend, CF32 0BS, Wales, United Kingdom
icon.adminteam@gmail.com