Privacy Policy

Last updated: May 1, 2026

This Privacy Policy explains how AutoShopCRM ("we", "us", "our") collects, uses, and protects information when you use the Service.

1. Information We Collect

Account info: name, email, phone, shop name, billing address.

Customer data you upload: your customers' names, contact info, vehicle data, repair orders, photos, payment status. This data is yours.

Usage data: pages visited, features used, IP address, browser type, device info, log timestamps. Used to improve the Service.

Payment info: handled by Stripe. We never see or store your full credit card number.

2. How We Use Information

To provide and operate the Service
To send you operational and security emails (you cannot opt out of these as long as your account is active)
To send marketing emails (you can opt out at any time via the unsubscribe link)
To detect, prevent, and respond to fraud or abuse
To comply with legal obligations

3. Sharing

We share data with the following sub-processors strictly to operate the Service:

Stripe — payment processing
Twilio — SMS delivery
Resend — transactional email delivery
DigitalOcean — server hosting (USA)
QuickBooks Online — only if you connect it

We do not sell, rent, or share your data with advertisers. Period.

Parts Finder Tool

Our free public Parts Finder does not require an account. When you enter a VIN, vehicle, or part, we use it only to build your search and to decode the vehicle via the public U.S. NHTSA vPIC database. We do not store the VINs, vehicles, or searches you enter. Listings, prices, and availability shown on the third-party sites we link to are not controlled or guaranteed by us.

4. Data Retention

Active account data is retained while your account is active. After cancellation, we delete or anonymize your data within 30 days unless we are legally required to retain it (e.g., billing records for tax purposes).

5. Security

We use HTTPS/TLS for all traffic, encrypted storage, hashed passwords (PBKDF2), and least-privilege access controls. No system is 100% secure; if we discover a data breach affecting your account we will notify you within 72 hours of confirmation.

6. Your Rights

You may at any time:

Export your data as CSV from your account settings
Request deletion of your account by emailing support@autoshopcrm.com
Request a copy of all data we hold about you
Correct or update your account information

If you are a California resident (CCPA) or EU resident (GDPR), you have additional rights — contact us to exercise them.

7. Children

The Service is not intended for users under 18. We do not knowingly collect data from children.

8. Cookies

We use first-party cookies for session management and CSRF protection. We do not use third-party advertising or tracking cookies.

9. International Transfers

Our servers are in the United States. By using the Service, you consent to your data being processed in the US.

10. Changes

If we change this policy in a material way, we'll email you at least 14 days before the change takes effect.

11. Contact

Privacy questions? Email support@autoshopcrm.com.