Privacy policy
Last updated September 24, 2026
What we collect
- Account: your email address, handle and password (stored hashed).
- Your rigs: vehicle, parts, notes, photos, receipts and, if you add it, the VIN.
- Billing: Stripe handles payments. We keep your Stripe customer ID and subscription status, not your card details.
- Messages: what you send through the contact form or the update sign-up.
- Technical: IP address and basic request logs for security and rate limiting. Sign-in uses a cookie; we don't use advertising trackers.
What's public
Build sheets are public at their link unless you make the rig private. Your VIN and receipts are never shown on a public sheet, and what you paid only appears if you turn on showing costs. Brands only see anonymized totals of five or more rigs, never who owns them.
Who processes it for us
Microsoft Azure (hosting, database, photo and receipt storage), Stripe (payments), our email provider (account and alert emails) and Anthropic (AI that reads product pages and drafts catalog records). We don't sell personal information.
We send account emails (confirmation, password reset) and the alerts you turn on. Every alert email has an unsubscribe link.
Your choices
You can edit your rigs, remove parts, photos and receipts, or make a rig private at any time. To get a copy of your data, or to delete a rig or your whole account, contact us and we'll do it within 30 days. We keep billing records as long as the law requires.
Changes
If we change this policy, the date above changes, and we'll email you about material changes.