Privacy Policy

• Account information — your name and email address, and your role within each dealership, provided through our authentication provider when you sign in.
• Dealership (Customer) Data — the records a dealership enters into the Service, such as vehicles, VINs, inspections, repair line items, costs, documents, and photos. This data belongs to the dealership.
• Billing information — subscription status and plan, processed by Stripe. We do not store full payment card numbers; Stripe handles card data directly.
• Usage and device information — basic logs and technical data (such as timestamps and error reports) used to operate, secure, and improve the Service.

• To provide and operate the Service, including authentication, tenant isolation, and role-based access.
• To process subscriptions and payments.
• To send transactional messages such as team invitations and recon performance summaries.
• To maintain security, prevent abuse, debug issues, and improve the Service.
• To comply with legal obligations.

We do not sell your personal information or Customer Data, and we do not use Customer Data for advertising.

Each dealership is an isolated tenant. A dealership's data is accessible only to authorized members of that dealership and to the platform operator for support and administration. Within a dealership, what each person can see is governed by their role — for example, technicians and third-party shops only see the vehicles assigned to them and never see confidential financial figures.

We share information with trusted providers only as needed to run the Service:

• Clerk — user authentication and account management.
• Stripe — subscription billing and payment processing.
• Resend and Google (Gmail) — delivery of transactional email such as invitations and summaries.
• Anthropic — AI-assisted features such as reading a VIN from a photo and generating repair estimates.
• Cloud hosting and database infrastructure used to run and store the Service.

These providers process information on our behalf under their own terms and security commitments.

We retain Customer Data for as long as a dealership maintains its account and as needed to provide the Service. When an account is closed, we will delete or anonymize Customer Data within a reasonable period, except where we must retain it to meet legal, accounting, or security obligations.

Customer Data — including vehicle and inspection records, photos, and uploaded documents — is stored on Google Cloud infrastructure in secured data centers. We use technical and organizational measures designed to protect information, including encrypted connections, access controls, and tenant isolation. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, or delete personal information, or to object to certain processing. Because much of the data in the Service is controlled by the dealership, please direct requests about dealership data to your dealership administrator; we will assist our customers in responding. You can also contact us using the details below.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

Questions about this policy or your data? Contact us at privacy@qovela.app.