1. General provisions
This policy describes how personal and operational data is processed in AutoCore, a cloud application for auto dismantlers and repair shops.
By using the AutoCore web app, desktop client, or mobile app, you confirm that you have reviewed this policy. Company admins are responsible for the accuracy of data for the employees they invite into their organization.
2. Who this policy applies to
This policy applies to owners and employees of customer companies, users of demo access, and visitors to the myautocore.com marketing site.
- Company owners and admins
- Employees with role-based access (warehouse, shop floor, accounting, etc.)
- Trial and paid subscription users
3. What data we process
We only process the data necessary to operate the product, support our users, and comply with legal requirements.
- Account data: email, name, sign-in provider ID (Google, Apple, etc.)
- Company data: name, business details, branding settings, plan
- Operational data: warehouse, work orders, accounting, documents, VINs, and vehicle records
- Activity log: who changed what, and when, within the system
- Technical data: IP address, device type, client version, error diagnostics
4. Purposes of processing
Data is used exclusively to provide and improve the AutoCore service.
- Sign-up, authentication, and managing employee access
- Syncing data across web, desktop, and mobile
- Generating documents, reports, and notifications
- Processing payments and managing subscriptions
- Technical support and security incident investigation
5. Storage and protection
Data is stored on secure Google Cloud / Firebase infrastructure. Access is restricted by security rules at the company (tenant) level and by employee roles (RBAC).
Data is transferred between client and server over encrypted channels (TLS). Critical operations are additionally checked on the server, not just in the interface.
6. Sharing with third parties
We do not sell personal data. To operate the service we work with vetted processors that act under contract and only to the extent required to deliver the service.
- Google Firebase: authentication, database, hosting
- Stripe: subscription payment processing
- Email notification providers: transactional emails
7. Your rights
You can request access to your data, its correction, or its deletion by contacting support. A company admin manages employee access and can deactivate accounts within the organization.
When a company is deleted, operational data is removed in accordance with our internal retention and backup procedures.
9. Changes to this policy
We may update this policy as product features or legal requirements change. The current version is always available on this page, with the update date noted.
10. Contact
For questions about data processing, email the support address listed on the "Contact" page. Please put "Privacy" in the subject line.
Questions about this document
support@myautocore.com