Privacy Policy

1. Information We Collect

We only collect information you give us directly—when you create an account or use the Service:

• Account information. When you sign up, we collect your email address and password, or, if you sign up with Google, the name, email address, and profile photo Google shares with us.
• Profile information. Your username, display name, bio, avatar, cover photo, and any social media links you choose to add.
• Vehicle information. Details you add about your vehicles—make, model, year, trim, color, transmission, ownership dates, an overview description, and photos.
• Vehicle identification numbers (VINs). If you choose to add a VIN to a vehicle, it’s stored separately from the rest of the vehicle’s data and is never shown to other users—see Section 3 for the limited cases where our administrators can access it.
• Log book entries. Service records, purchases, documentation, fill-ups, and other entries you add to a vehicle’s log, including any files you attach to them.
• Notes. Free-form notes you write about a vehicle, including their titles and content.
• Modifications. Parts and modifications you record against a vehicle, including brand, part number, and links you provide.
• Saved items. Profiles, vehicles, log book entries, and notes you save to your Saved Items list. Only you can see your saved list.
• Invitations. If you invite someone, we store their email address alongside your profile so you can see who you’ve invited, and we send them an invitation email through our authentication provider. We use that address only for the invitation—never for a mailing list or anything else.
• Technical information. Standard information any web server collects, such as your IP address and browser type, generated as part of operating the Service.

We also use Google Analytics to understand how visitors use the Service in aggregate—see Section 6 for the cookies involved and how to control them. We don’t use advertising or cross-site tracking of any kind, and don’t collect anything else beyond what’s listed above and described there.

2. How We Use Your Information

• To create and maintain your account and profile.
• To operate the core features of the Service—storing and displaying your vehicles, photos, log entries, notes, saved items, and modifications.
• To send the invitations you ask us to send.
• To power search, so signed-in users can find public profiles, vehicles, and modifications across the Service.
• To authenticate you and keep your account secure.
• To communicate with you about your account, such as password resets.
• To maintain and improve the Service, and to fix bugs.

We do not sell your information, and we do not share it with third parties for marketing or advertising purposes.

3. Public and Private Information

Driver’s Side lets you control what’s visible to other people:

• Your profile and vehicles are public by default, but you can mark either one as private at any time. A private profile is only visible to you, and marking your profile private also makes all of your vehicles private.
• A vehicle’s VIN, log book entries, and notes are never public, no matter how your profile or that vehicle is set—only you can see them.
• Your saved items list is visible only to you—not to other users, and our administrators’ moderation access doesn’t extend to it. If something you saved later becomes private or is deleted, it drops out of your list.
• Signed-in users can find public profiles, vehicles, and modifications through search on the Service. Anything that isn’t public—private profiles and vehicles, VINs, log book entries, and notes—never appears in search results.
• Platform administrators. A small number of designated administrators can access private content, including VINs, log book entries, and notes, to investigate a suspected violation of our Terms of Service or a report from another user. This access is logged and used only to enforce our Terms, never to browse private content otherwise.

4. How We Store and Protect Your Information

Your data is stored using Supabase, which provides our database, file storage, and authentication infrastructure. Data is encrypted in transit, and access to your private data (like log book entries and VINs) is enforced at the database level, not just in our application code. Photos and files are kept in private storage and only ever served through short-lived, signed links.

No method of storing or transmitting information online is 100% secure, and we can’t guarantee absolute security.

5. Third-Party Services

• Vercel—hosts the Service. Like any web host, Vercel processes the technical details of your requests (such as your IP address and browser information) to deliver pages, and keeps short-lived server logs, which include an internal account identifier when you use an AI-assisted feature. Vercel acts only as a data processor for this information.
• Supabase—our infrastructure provider for authentication, database, and file storage. Supabase acts only as a data processor for this information: they process it on our behalf and under our instructions to operate the Service, not for their own purposes.
• Google—only if you choose to sign in with Google, in which case Google shares your name, email, and profile photo with us.
• Google Analytics—deployed via Google Tag Manager, used to understand how visitors use the Service in aggregate. Before you accept analytics cookies, Google Analytics runs in a cookieless mode and only receives anonymous, aggregated usage signals; once you accept, it also uses cookies to track your visits in more detail, and some usage events include an internal identifier for the account, vehicle, or entry involved—never your name, email, or other personal details directly. See Section 6 for how to manage this.
• CookieHub—our cookie consent management provider. It remembers and enforces the cookie choices you make, and keeps a record of your consent to comply with data protection law.
• Resend—delivers internal notification emails to us, such as when a new account is created. Resend acts only as a data processor for this information.
• Anthropic—if you choose to use an AI-assisted feature (like the Log Book’s auto-fill), the photo or document you select is sent to Anthropic’s Claude API, along with your vehicle’s year, make, model, and trim, to extract information for you to review before anything is saved. This only happens when you explicitly trigger it—never automatically. Anthropic acts only as a data processor for this information: it isn’t used to train their models, and is deleted from their systems within 30 days by default.

We don’t use any other third-party services that process your personal information.

6. Cookies

We use a few different kinds of cookies:

• Strictly necessary cookies. These keep you signed in between visits and remember your cookie preferences. They’re always active and can’t be turned off.
• Analytics cookies. Set by Google Analytics, these help us understand how visitors use the Service in aggregate. They’re only set if you accept them in the cookie banner—before that, or if you decline, Google Analytics still receives anonymous, cookieless usage signals that can’t be tied to you individually.

We don’t use cookies for advertising or cross-site tracking. You can change your cookie choices at any time using the cookie preferences icon on the page.

7. Data Retention and Deletion

We keep your information for as long as your account is active. You can delete individual vehicles, log entries, or photos at any time from within the Service, and doing so permanently removes that data, including any files attached to it and any saved-items bookmarks that pointed at it. You can also permanently delete your entire account at any time from your profile’s edit menu—this immediately signs you out and permanently deletes your profile, vehicles, photos, and everything else associated with your account. This action cannot be undone.

When you use an AI-assisted feature, we keep a record of when you used it for up to two days, solely to enforce usage limits, and then delete it automatically.

8. Your Rights and Choices

You can access, edit, or delete most of your information at any time directly within the Service. If you have a request we can’t handle there—for example, a full copy of your data—contact us using the details below.

9. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, contact us and we’ll remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the date at the top of this page.

11. Contact Us

Questions about this Privacy Policy? Reach us at admin@driversside.app.