Privacy Policy

We may collect the following personal information:

• Username and email address (for account creation)
• Vehicle information (make, model, year, registration, VIN)
• Maintenance records and task details
• Uploaded documents and invoices
• Parts and supplier information

We automatically collect certain technical information:

• IP addresses and device information
• Browser type and version
• Usage patterns and access times
• Cookies and similar tracking technologies

We use your information to:

• Provide and maintain the VehicleCare service
• Process and store your vehicle maintenance data
• Authenticate your identity and secure your account
• Communicate with you about service updates
• Improve our service functionality and user experience
• Comply with legal obligations

If you use the in-app support chat, we process:

• Message content and timestamps
• Typing indicators and read receipt events (whether a message was seen)
• Ticket metadata (status, last activity, assignment)

Messages are transmitted over secure connections and stored in our database so our support team can assist you and maintain a record of the conversation.

• With your consent: When you explicitly authorize us to share your information
• Legal requirements: When required by law, regulation, or court order
• Service providers: With trusted third parties who assist in operating our service (under strict confidentiality agreements)
• Safety purposes: To protect the rights, property, or safety of VehicleCare, our users, or others

We implement appropriate security measures to protect your information:

• Secure data transmission using HTTPS encryption
• Password-protected user accounts
• Regular security updates and monitoring
• Limited access to personal data by authorized personnel only
• Secure file storage with access controls
• Real-time chat via WebSockets protected by the same transport security as the website

• Support chat history: kept to assist with ongoing issues and quality assurance. You may request export or deletion subject to legal obligations.
• Audit and security logs: retained for a limited period to detect and investigate abuse or service issues.

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correct: Update or correct inaccurate personal information
• Delete: Request deletion of your personal information
• Export: Request a copy of your data in a portable format
• Withdraw consent: Opt out of certain data processing activities

• Session cookies: required for authentication and core functionality.
• Remember me: if you opt in, we extend your session expiry so you can stay signed in.
• Trusted device indicator: a secure, HttpOnly cookie may be set to streamline 2FA on devices you mark as trusted.
• CSRF protection: security cookies are used to protect forms and API requests.

Real-time infrastructure: We use a channel layer (for example, Redis) to deliver real-time chat events. This layer transports message metadata (like routing keys and event types) necessary to operate the chat.