Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how AutoSyncHQ ("we," "us") collects, uses, and shares information in connection with the AutoSyncHQ shop-management service (the "Service"). It applies to the shops that subscribe to AutoSyncHQ and their staff ("you," "Customer"), and, where noted, to visitors of our marketing website. It should be read together with our Terms of Service.

2. Two Kinds of Data: Yours and Your Customers'

It matters, for this policy, whose data it is:

• Account Data is information about you and your business — your name, business name, email, phone, and billing details. For Account Data, AutoSyncHQ is the controller: we decide why and how it's processed, as described in this policy.
• Customer Data is the information you or your staff enter into the Service about your own customers and their vehicles — names, phone numbers, emails, vehicle details, and service history. For Customer Data, you are the controller and AutoSyncHQ is a service provider / data processor acting only on your instructions. You are responsible for having a lawful basis and valid consent to submit this data to us, and for responding to your own customers' privacy requests about it. We process it only to provide the Service to you, as described in our Terms of Service.

3. Information We Collect

From you, directly:

• Account and contact information (name, business name, email, phone) provided at sign-up;
• Billing information — processed by our payment processor, Stripe; we receive confirmation and subscription status, not your full card number;
• Customer Data you or your staff submit while using the Service, as described in Section 2; and
• Support communications, such as emails or messages you send us.

Automatically, when you use the Service or visit our website:

• Usage data — pages viewed, actions taken, timestamps, and similar diagnostic information;
• Device and log data — IP address, browser type, and operating system; and
• Cookies and similar technologies, described in Section 6.

4. How We Use Information

We use information to:

• provide, operate, and maintain the Service, including sending the messages you configure to your End Customers;
• process payments and manage your subscription;
• provide customer support and respond to your requests;
• monitor, secure, and improve the Service, including diagnosing technical issues;
• send you Service-related communications, such as billing notices or security alerts; and
• comply with legal obligations and enforce our Terms of Service.

We do not use Customer Data to train machine-learning models for other customers, and we do not sell Customer Data or Account Data to third parties. We do not use the Service to send marketing messages to your End Customers, and our Terms of Service prohibit you from doing so through the Service either.

5. How We Share Information

We share information only as needed to provide the Service, and never sell personal information. We share information with:

• Stripe, to process subscription payments;
• Twilio, to deliver the text messages you send through the Service;
• Resend, to deliver the transactional emails you send through the Service;
• our cloud infrastructure provider, to host the Service and its data;
• the U.S. National Highway Traffic Safety Administration's public vehicle-decoding API, to look up vehicle make/model/year from a VIN you enter — only the VIN is sent, and no personal information;
• professional advisors (lawyers, accountants, auditors), as needed; and
• a successor entity, in connection with a merger, acquisition, or sale of assets, subject to this policy or a materially equivalent one.

We may also disclose information if required by law, such as in response to a valid subpoena or court order, or to protect the rights, property, or safety of AutoSyncHQ, our customers, or the public.

6. Cookies & Analytics

The Service uses strictly necessary cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies or cross-site tracking. If we add analytics tooling in the future, we will update this section to describe it and, where required by law, request your consent.

7. Text Messages & Email

When your shop sends a text message or email to an End Customer through the Service, we act as your service provider to deliver it via Twilio or Resend. We receive delivery status (sent, delivered, failed) to show you whether a message reached its recipient. An End Customer who wants to stop receiving messages can reply STOP to a text message; carriers will suppress future delivery to that number. Obtaining and honoring End Customer consent is your responsibility as the shop sending the message — see our Terms of Service §8.

8. Data Retention

We retain Account Data and Customer Data for as long as your Account is active, and for a reasonable period after cancellation to allow for data export, dispute resolution, and legal compliance (currently 30 days after termination, unless a longer period is required by law or necessary to resolve a dispute). Billing records are retained as required by tax and accounting law. You may request earlier deletion of specific data by contacting us, subject to our legal retention obligations.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction — including encryption of data in transit and access controls limiting who can reach production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by applicable law.

10. Your Rights & Choices

Depending on your location, you may have the right to access, correct, or request deletion of your personal information, or to withdraw consent where processing is based on it. To exercise these rights for your own Account Data, email hello@autosynchq.ca. If your request concerns Customer Data (information a shop entered about you as their customer), please contact that shop directly — as described in Section 2, they control that data and are best positioned to handle your request; we will assist them if needed.

11. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, email hello@autosynchq.ca. We will not discriminate against you for exercising these rights.

12. Children's Privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

13. Where Your Data Is Stored

Our infrastructure is hosted in Canada. Some of our service providers (including Stripe and Twilio) may process or store data outside of Canada, including in the United States, in connection with the services they provide us. Where information is transferred internationally, we take steps to ensure it receives a comparable level of protection, including through contractual commitments with our providers.

14. Changes to This Policy

We may update this policy from time to time. If we make a material change, we will provide notice, such as by email or an in-product notice, before the change takes effect. The "Effective date" above reflects the most recent revision.

15. Contact Us

Questions about this policy, or a privacy request? Email hello@autosynchq.ca.