EFFECTIVE OCTOBER 13, 2026
Privacy
Information we process
The public website is informational and has no advertising trackers or contact form. Hosting providers receive technical request information such as IP addresses. Google Fonts receives browser requests for typography. The separate app processes an account identifier, profile username and email for account access. Email/password accounts are managed by Supabase, which processes authentication credentials, verification and password-reset requests. Passwords are not stored in the vehicle-record database. Customers sign in with email and password; a ChatGPT account is not required. We store vehicle details, mileage, service and diagnostic records, reminders, uploaded photos, receipts, manuals, CARFAX PDFs, inventory, warranties and related notes you choose to provide.
How information is used
We use information to provide account access, store your garage, show reminders, export or restore records, manage subscriptions and respond to support requests. Notification preferences determine whether available email or push reminders are requested. Provider credentials and feature availability determine delivery; notification delivery is not guaranteed.
Service providers and payments
The application uses OpenAI Sites hosting and Cloudflare database/file storage. Supabase manages email-account authentication and credentials. Stripe processes subscriptions and receives account email, a customer/account reference and billing information you enter into its hosted Checkout or billing portal. We store Stripe customer and subscription identifiers and status; we do not store full card numbers. Cloudflare forwards support email to our support inbox, currently hosted by Yahoo. Resend handles account-verification and password-reset emails sent through Supabase and requested app email notifications. Push providers handle subscribed push endpoints. Providers process information to operate their services under their policies.
Vehicle data and sharing
Records and uploads are associated with your signed-in account and are not publicly listed. We do not sell personal information or share it for targeted advertising. Uploading a CARFAX report does not send your records to CARFAX. Official CARFAX and licensed Chilton integrations are not connected. Downloads and backups you choose to share are under your control. We may disclose information when legally required or necessary to protect the service.
Retention and your choices
Records remain stored until you delete them or request account deletion. Canceling a subscription does not delete your records. Download a backup before deletion. Contact support to request account data, correction or account deletion; identity verification may be required. Payment records and information required for legal, tax or dispute obligations may be retained separately. Hosting backups may retain prior copies according to provider retention practices. Disable notification preferences or browser push permission to stop optional reminders.
Security and updates
Access controls and hosted HTTPS protect account access and transfer. No online service can guarantee absolute security. Do not upload unnecessary sensitive information. The app is intended for adults and does not knowingly collect children's information. Material changes to this policy will be published here and communicated where appropriate.
Contact
Email support@athomemechanic.com for support, refunds, privacy requests or account deletion. Do not email payment card numbers.