Privacy

What we collect

When you create an account we store your email address and a password hash. When you use your garage we store the vehicle details, maintenance records, parts, documents, and notes you choose to add — that's the whole point. We also request vehicle specs and safety recalls from the public NHTSA API when you decode a VIN or refresh recalls.

How we use it

To run your garage. That's it. We use your data to display it back to you and, on cloud plans, to keep it backed up.

• To provide the features you signed up for.
• To send you service or account emails you request (password reset, recall reminders if enabled).
• To understand, in aggregate, which features are used so we can improve them.

What we don't do

• We don't sell your data.
• We don't run ad tracking or sell ads.
• We don't share your vehicle records with dealers, insurers, or third parties.

Where it lives

On the cloud version, your data is stored in our PostgreSQL database and file attachments are stored in Cloudflare R2 with secure presigned links. On the self-hosted version, your data stays on your own server — we never see it.

Retention

We keep your data for as long as your account is active. Delete your account and we remove your records and uploaded files within 30 days. Export everything first — deletion is permanent.

Cookies & local storage

We don't use tracking cookies. We use local storage to remember your theme preference and basic app state. Authenticated requests use short-lived session tokens, not persistent cookies.

Your rights

You can export your data at any time on Pro and above. You can request a copy or deletion of your data by contacting hello@gearheados.com. If you're in the EU or UK, you have rights under the GDPR and we honor them by default.

Third parties

We call the public NHTSA vPIC and Recalls APIs to decode VINs and fetch recalls; NHTSA receives the VIN or year/make/model you look up, per their public service. We use Cloudflare R2 for file storage. We don't pass your records to any third party for their own purposes.

Contact

Questions about privacy? Write to hello@gearheados.com.