Skip to content
GarageOS

Privacy Policy

Last updated: [to be completed: date of this version]

GarageOS keeps the history of your vehicles. This page says what data that involves, why it is processed, who else handles it, and what you can do about it.

Details still to be completed

The passages marked “to be completed” wait for the operator's legal details. Until they are filled in, this page describes how GarageOS works and is not yet the final legal document.

1. Who is responsible for your data

The controller of your personal data is [to be completed: legal name of the operator of GarageOS], [to be completed: postal address of the operator].

Contact in privacy matters: [to be completed: contact email address].

2. What data GarageOS holds

  • Account: your name, email address, a hash of your password (never the password itself), when the account was created and last signed in.
  • Your vehicles and their records: make, model, VIN and registration number if you enter them, mileage readings, service history, maintenance plans, costs, fuel fill-ups, problems and diagnostic scans, tasks, and the notes you write.
  • Files you upload: photos and documents such as invoices, and the text read from a document when you ask for it.
  • Ask GarageOS conversations you choose to keep.
  • Settings: language and reminder choices.
  • Technical records: sign-in sessions, security and audit records, and how many AI operations your account used.

3. Why it is processed

Your data is used to provide GarageOS to you: to store and show your vehicles' records, calculate what is due, send the reminders you switched on, answer the questions you ask, and keep your account secure. It is not sold and not used for advertising.

The legal basis for each purpose:

  • Your account and signing in: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]
  • Your vehicles and their records: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]
  • Files and documents you upload: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]
  • AI features you ask for: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]
  • Reminder emails you switch on: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]
  • Security and audit records: [to be completed: legal basis under the GDPR, confirmed by the operator's legal adviser]

4. AI features

AI is used only when you ask for it: importing a note, photo or document, reading a document's text, or asking a question about a vehicle. The content needed for that one request (the note or file, or the relevant records of that vehicle) is then sent to the AI provider, OpenAI, and the result comes back to GarageOS. Nothing is added to your records until you review and confirm it.

The AI provider is [to be completed: the AI provider's legal entity]; the data is processed in [to be completed: where the AI provider processes the data]. [to be completed: the transfer safeguards that apply]

5. Who else handles your data

GarageOS relies on service providers that process data on the operator's behalf:

  • hosting of the application and its database: [to be completed: hosting provider], Europe;
  • AI processing: OpenAI, only for the requests described above;
  • email delivery (verification, password reset and the reminders you switched on): Resend;
  • payments, if you buy a paid plan: Stripe. GarageOS never sees or stores your card details.

When you transfer a vehicle to another GarageOS account, that account receives the records you chose to hand over.

6. Cookies

GarageOS uses only the cookies it needs to work: one that keeps you signed in, one that protects forms against forged requests, and one that remembers your language. There are no advertising or analytics cookies and no third-party trackers.

7. How long data is kept

Your records stay for as long as you keep your account. When you ask for your account to be deleted, it is closed after a 14-day period in which you can change your mind; from then on nobody can sign in to it.

[to be completed: which records are kept after deletion and for how long, including the retention period of backups]

8. Your rights and how to use them

You can see, correct, export and delete your data yourself:

  • correct any record where you entered it;
  • download everything as one file under Settings → Your data;
  • ask for your account to be deleted in the same place.

You also have the right to object to or restrict processing, and to lodge a complaint with a supervisory authority: [to be completed: the competent supervisory authority]. For anything you cannot do yourself, write to the contact address above.