Privacy Policy

ShopTrack LLC (“ShopTrack,” “we,” “us,” or “our”) operates the ShopTrack platform, a client communication and project management service for automotive restoration and performance shops, accessible at myshoptrack.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.

By using ShopTrack, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

ShopTrack LLC is a New York limited liability company.

Account Information. When you register for ShopTrack, we collect your name, shop name, email address, and password (hashed and stored securely). We do not store plaintext passwords.

Shop Data. Information you enter about your shop, including shop name, contact details, and configuration preferences such as email cadence settings and notification preferences.

Client Data. Information you enter about your clients and their vehicles, including client names, email addresses, vehicle details, project descriptions, and any notes or status updates you associate with a project. You are responsible for obtaining any necessary consents from your clients before entering their data into the Service.

Email Content. The Service sends automated update emails to your clients on your behalf. We store the content of those emails, including message history, client replies, and any files or attachments transmitted through the two-way mailbox feature.

Usage Data. We automatically collect information about how you interact with the Service, including IP addresses, browser type, device identifiers, pages visited, features used, and timestamps. This data is used to maintain and improve the Service and is not sold to third parties.

Payment Information. We use Stripe to process subscription payments. We do not store your full payment card details. Stripe collects and stores payment information directly; please review Stripe's Privacy Policy for details.

We use the information we collect for the following purposes:

• To provide, operate, and maintain the ShopTrack Service
• To send automated project update emails to your clients on your behalf
• To process subscription payments and manage your account
• To communicate with you about your account, billing, and Service updates
• To monitor and analyze usage patterns in order to improve the Service
• To detect, investigate, and prevent fraudulent transactions and abuse
• To comply with applicable legal obligations

We do not use your client data or shop data to train machine learning models, build advertising profiles, or for any purpose other than providing the Service to you.

We do not sell your personal data or your clients' data. We do not share your information with third parties for advertising purposes.

We share information only with the following categories of service providers that help us operate the Service. Each provider is bound by data processing agreements consistent with applicable privacy law:

• Supabase — database hosting and authentication infrastructure. Your shop data, client data, and user account data are stored on Supabase's infrastructure.
• Stripe — payment processing. Your payment method and billing information are handled directly by Stripe.
• Resend / Mailgun — transactional email delivery. Automated update emails and system notifications are delivered through these providers.
• Vercel — application hosting and edge infrastructure. Our web application runs on Vercel's platform.

We may also disclose information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of ShopTrack, our users, or the public.

We retain your account information and shop data for as long as your account is active. If you cancel your subscription, your data will be retained for 90 days to allow for account recovery, after which it will be deleted from our production systems. Backups may persist for up to an additional 30 days.

Email records sent through the Service are retained for the life of the project they are associated with, or 12 months following account cancellation, whichever is shorter.

You may request deletion of your data at any time by contacting us at legal@myshoptrack.com.

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, and access controls limiting who within our organization can access production data.

Authentication is handled by Supabase Auth, which uses bcrypt password hashing and supports secure session token management. We do not store session tokens in a manner accessible to application-layer code beyond what is necessary for authenticated requests.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have certain rights with respect to your personal data, including:

• Access. The right to request a copy of the personal data we hold about you.
• Correction. The right to request correction of inaccurate or incomplete data.
• Deletion. The right to request deletion of your personal data, subject to our legal retention obligations.
• Portability. The right to receive your data in a structured, machine-readable format.
• Objection. The right to object to certain processing of your personal data.

To exercise any of these rights, contact us at legal@myshoptrack.com. We will respond to verified requests within 30 days.

ShopTrack uses cookies solely for authentication and session management. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics cookies. For full details, see our Cookie Policy.

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us at legal@myshoptrack.com and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date and, where appropriate, by sending an email to the address associated with your account. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

ShopTrack LLC
legal@myshoptrack.com