Privacy policy

Last updated September 27, 2026

RigSpec Garage is operated by Edema Ruhbicon LLC, a Utah limited liability company, which is responsible for your data.

What we collect

• Account: your email address, handle and password (stored hashed), your home region if you add one, and your Instagram username if you add one (used only to tag you when we feature your build).
• Your rigs: vehicle, parts, serial numbers, what you paid, notes, photos, documents (receipts, work orders, invoices, warranties, registration), maintenance log and odometer readings, wishlist and, if you add it, the VIN.
• Clubs and shops: the clubs you join or start, and, if you run a shop, its name, city, website, phone and the work it logs on customers' rigs.
• Billing: Stripe handles payments. We keep your Stripe customer ID and subscription status, not your card details.
• Messages: what you send through the contact form, to our support address or with the update sign-up.
• Technical: IP address and basic request logs for security and rate limiting. Sign-in uses a cookie; we don't use advertising trackers.
• Usage: when it's switched on, Google Analytics counts visits, which pages are read and where visitors came from, using its own cookies. Ad personalization and Google signals are off, and we never send it your email, rigs or VIN. Browser settings or Google's opt-out add-on turn it off.
• Our own counts: the site also keeps daily totals of visits, where they came from and which page they started on. It uses no cookies and stores no IP addresses or anything else that identifies you, only the totals.

What's public

Build sheets are public at their link unless you make the rig private. Your VIN, documents, maintenance log, odometer, wishlist and serial numbers are never shown on a public sheet, and what you paid only appears if you turn on showing costs. Brands only see rig counts: how many rigs run each of their parts, on which vehicles and whether it fit, and only once at least five rigs run it. They never see who owns a rig or what anyone paid. If you turn on "Feature my builds", your public builds may also appear on RigSpec's social accounts, credited to you, with license plates blurred and no location.

• Stolen rigs: if you report a rig stolen, the public page and the flyer show when and where it was taken, who to call, the case number and the details you enter. The VIN is shown only if you choose to show it. If you ask us to, we share the report on RigSpec's social accounts.
• Clubs: a club's page shows its members' public builds. The club's organizers see its member list: each member's handle (never their email address).
• Shop link: anyone you give a rig's shop link to can see the rig's parts, including serial numbers, but not what you paid or the VIN. You can replace the link at any time to stop the old one working. A shop that logs work from it can attach a work order you'll see before approving.
• Shops: a shop's page shows its name, city, website and phone, and the public builds it has worked on.

Who processes it for us

• Microsoft Azure: hosting and the database.
• Cloudflare: R2 stores the photos, documents and other files you upload; when it's switched on, Turnstile checks that the sign-up form is filled in by a person (it sees your IP address and browser details, not your account).
• Our email provider (sent over SMTP): account emails, alerts, and replies to your messages.
• Stripe: payments and subscriptions.
• Anthropic (the Claude API): AI that reads brands' product pages and catalogs; the receipts, work orders, invoices and other documents you upload, to fill in vendor, date, totals and the matching part; a rig photo when you ask it to find the parts in it; photos picked for featuring, to find and blur license plates; and support messages, to draft a reply we check before sending. Under Anthropic's commercial terms, what we send isn't used to train its models.
• Google: Google Analytics, when it's switched on (see above), and Google Fonts, which serves the site's fonts, so your browser asks Google's servers for them and they see your IP address.

We don't sell personal information.

Email

We send account emails (confirmation, password reset), one welcome email once you confirm your address (or, for a brand, once its claim is approved) explaining what's free and what the paid plans add, and the alerts you turn on. The welcome email and every alert email have an unsubscribe link.

How long we keep it

Your account, rigs, files, alerts and club memberships are kept until you delete them or your account. Support messages and update sign-ups are kept until you ask us to remove them or delete your account (which removes those sent from its email address). Request and error logs are kept only as long as we need them to run and secure the site. We keep a private record of the automatic decisions the site makes (so they can be checked), which can mention a rig's nickname or a handle. Stripe keeps payment records as the law requires.

Your choices

You can edit your rigs, remove parts, photos and documents, or make a rig private at any time. Delete this rig in a rig's settings removes it with its photos, documents and records. On your account page you can download a copy of your data (a JSON file listing your profile, rigs, parts, maintenance, wishlists, alerts, clubs and shop, with links to your photos and documents) or delete your account, which removes everything in it and cancels Owner Pro. Parts and fit reports you added to the shared catalog stay for other owners, no longer linked to you. For anything else, contact us and we'll do it within 30 days.

Changes

If we change this policy, the date above changes, and we'll email you about material changes.