Privacy Policy

• Account information: your email address, password (stored by our sign-in provider, never visible to us), and your role in a shop (owner or staff).
• Shop information: shop name, team members and invitations, invoice settings you enter (business name, logo, address, phone, email, tax and payment-terms defaults), pricing rules and sourcing preferences.
• Your customers' and job records: information your shop enters or imports, such as customer names, phone numbers, email and billing/shipping addresses, vehicles (year, make, model, VIN), repair order numbers, parts orders, deliveries, invoices, payments you record, notes, supplier quotes, shop supplies inventory and purchase orders. PartsPilot does not currently provide a separate estimating module; estimate-related information is only what you type or import into these records.
• Parts and supplier information: supplier names, part numbers, costs, quotes and the status of supplier integrations. No supplier is currently connected live; if one is connected in the future, the supplier account details your shop authorizes would be stored on our servers, not in your browser.
• Payment and subscription information: plan, subscription status, trial and renewal dates and Stripe customer/subscription identifiers. Card details are entered directly with Stripe; PartsPilot never receives or stores full card numbers.
• Agreement records: which version of our Terms and this Policy you agreed to, and when.
• Problem reports and messages: what you write when you use "Report a problem" or email us.
• Technical information: basic request and error logs kept by our hosting and database providers (such as IP address, browser type and time of request). We do not use advertising cookies. Sign-in sessions are kept in your browser's local storage. The demo stores its sample data only in your browser.

• To provide the service: sign-in, keeping your shop's records, ranking parts that need attention, invoices and PDFs, inventory and reports.
• To bill your shop's subscription and control access to paid features.
• To draft follow-up messages with AI when a team member asks for one (see section 3).
• To answer support requests and fix problems, and to keep the service secure and prevent abuse.
• To meet legal, tax and accounting obligations.

We do not sell personal information and do not use your shop's customer records for advertising. [Owner to confirm: legal bases for processing if you serve customers in the EU/UK (e.g. contract, legitimate interests)]

These companies process information on our behalf to run PartsPilot:

• Supabase — database, file storage and user sign-in. Your account and shop records are stored here. [Owner to confirm: data region of your Supabase project]
• Stripe — subscription checkout, billing and the customer billing portal. Stripe processes payment details under its own privacy policy.
• Lovable — website and app hosting, and sending of service emails (such as problem-report notifications).
• AI model providers via the Lovable AI gateway — when someone in your shop asks for an AI-drafted follow-up, the relevant order details (such as part, supplier, dates and status) are sent to generate the draft. AI is never used in the demo.
• NHTSA vPIC (U.S. Department of Transportation) — when you decode a VIN in the Parts Catalog, the VIN is sent to this public government service to look up vehicle facts.
• Email and print apps on your device — when you choose to email or print an invoice, it opens in your own email app or printer; we do not see what you send from there.

Besides the providers above, we share information only: within your shop (team members of the same shop can see that shop's records); with a supplier only if your shop connects that supplier and takes an action that sends to it; when required by law or to protect rights and safety; or as part of a merger or sale of the business, subject to this policy.

We keep your shop's records while your account is open. If a subscription lapses, the shop's data is kept but hidden until it is renewed. Invoice history, payment records and audit logs are designed not to be silently deleted so your records stay accurate.

[Owner to confirm: how long data is kept after an account is closed or a subscription ends, and how deletion requests are fulfilled] Our database provider may keep backups for a limited period according to its own schedule.

Each shop's records are separated by access rules enforced in the database, so one shop cannot read another's data. Owner-only actions (such as managing the team, deleting orders or pricing rules) are checked on the server. Payment card details are handled by Stripe, and supplier and service credentials are kept on the server, never in the browser. Connections to the site use HTTPS.

No system is perfectly secure, and we cannot guarantee absolute security. [Owner to confirm: any additional security commitments, and your process for notifying customers of a security incident]

Your shop decides what customer information to put into PartsPilot and is responsible for having the right to use it, including telling your own customers how you handle their information. We process those records to provide the service to your shop.

You can view and correct most information in the app, export parts orders and invoices to CSV, and ask us to access, correct, export or delete personal information. Depending on where you live (for example, California or other U.S. states with privacy laws, or the EU/UK), you may have additional rights such as knowing what we collect or opting out of certain uses. We will not discriminate against you for using these rights.

If a request concerns a record your shop entered about one of its customers, we may refer it to that shop. [Owner to confirm: which privacy laws apply to your business and the response timeframe you commit to]

PartsPilot is a business tool and is not intended for children under 16. We do not knowingly collect their information.

We will post updates here with a new date and version. For material changes we will notify account owners before they take effect.

Privacy questions or requests: info.apexinnovationz@gmail.com. Mailing address: [Owner to confirm: business mailing address]. See also our Terms of Service.