Політика конфіденційності

Востаннє оновлено 2026-08-30

NorthGarage AI зберігає дані про автосервіси та про їхніх клієнтів. Ця сторінка каже точно: що ми збираємо, які сервіси зі штучним інтелектом і які постачальники це бачать, скільки ми це тримаємо і як домогтися видалення.

Документ опубліковано лише англійською. Обов'язковою є англійська редакція.

1. Who we are

NorthGarage AI is operated by SEVEN DAYS BUSINESS INC. (Ontario Corporation Number 1000479027), a corporation registered in Ontario, Canada. This policy explains what personal information the NorthGarage AI website, web application and mobile apps collect, why, who else processes it, and how long we keep it.

For questions, access requests or deletion requests, write to sevendaysbusinessinc@gmail.com. We answer within 30 days.

2. Two kinds of people in this policy

NorthGarage AI is a tool for auto repair shops. That means two different groups of people are involved, and their rights work differently.

  • Shop users — the owner, mechanics and staff who hold an account with us. We decide, together with the shop, how their account data is handled.
  • Shop customers — the vehicle owners whose details a shop enters into the app. The shop decides what to record about them and why; we process that information on the shop's instructions and do not use it for our own purposes. If you are a shop customer and want your information corrected or removed, contact the shop directly; we will help the shop act on your request.

3. What we collect

  • Account information: name, email address, phone number, display name and role within the shop. If you sign in with Google or Apple, we receive your email address and account identifier from them.
  • Shop information: shop name, address, phone, email, province or state, and labour rate.
  • Customer records entered by the shop: name, phone, email, address and free-text notes.
  • Vehicle records: VIN, licence plate, make, model, notes and photos.
  • Documents: estimates and invoices, their line items, amounts and the customer details printed on them.
  • Photos: vehicle check-in photos, damage photos, document photos and receipt photos.
  • Voice input: audio is recorded only while you hold or tap the microphone button, and is transcribed to text. We do not listen in the background.
  • Supplier calls: when you ask the app to call a parts supplier, the call is placed by an AI assistant that announces itself as such and states that the call may be recorded. The audio and transcript are retained by our calling provider.
  • Gate camera, where a shop switches it on: licence plate reads with a timestamp and direction of travel, still snapshots and short video clips of the shop's own yard. Audio recording is disabled at the configuration level and face recognition is never enabled.
  • Product feedback: the text you submit and, if you attach it, a screenshot.
  • Contact and pilot forms on northgarageai.com: name, shop name, email address, phone number and your message.
  • Technical data: push notification tokens and client error reports needed to keep the app working.

We do not run advertising trackers, analytics scripts or session recording on the website or in the app, and we do not sell personal information to anyone.

4. How we use AI

NorthGarage AI uses third-party artificial intelligence services. This means some of the information above leaves our systems and is processed by those providers so a feature can work. The features that do this are:

  • The in-app assistant, which turns what you say or type into records, documents and tasks.
  • Photo and document recognition, which reads VIN plates, licence plates, registration and insurance documents, driver's licences and business cards so you do not have to type them. These images are processed and are not stored by us for that purpose.
  • Voice transcription, which converts your recorded audio to text.
  • Suggested labour times, service procedures and maintenance items. These are estimates generated from a general-purpose model, not official manufacturer data, and the app labels them as such. A person must review them before they reach a customer.
  • Draft emails to customers, which you review and edit before anything is sent.
  • Automated calls to parts suppliers, which are placed and understood by an AI voice assistant.
  • Translation of the interface and of service descriptions.

We use these providers through their business APIs, which under their published terms do not train models on the data sent to them. We rely on those terms; we cannot audit a provider's systems, and if a provider changes its terms we will update this page.

No decision that legally or significantly affects a person is made automatically. Everything the AI produces is a draft that a person in the shop reviews and confirms.

The app does not offer a chat assistant to your customers, and the supplier calling assistant speaks only to suppliers.

5. Who else processes the data

We use the service providers below. Each one processes personal information only to deliver its part of the product, under a contract that requires it to protect that information. Several of them operate in the United States, which means data about people in Canada may be stored or processed outside Canada and may be accessible to authorities there under local law.

ProviderWhat it does for usWhat it receives
SupabaseDatabase, authentication and file storageAll account and shop data, including customer records, vehicles, documents and photos. Location: Canada (ca-central-1).
VercelApplication hosting and scheduled jobsRequest traffic and server logs. Location: United States / global edge.
Anthropic (Claude)AI assistant, photo and document recognition, service and labour suggestions, email draftsText and images you submit to those features, which may include customer names, vehicle details and document photos. Location: United States.
OpenAISpeech-to-text for voice input and text translationAudio you record with the microphone button, and text submitted for translation. Location: United States.
Retell AIAutomated outbound calls to parts suppliers on your shop's behalfSupplier phone number, shop name, part and vehicle details, and the call audio and transcript. Location: United States.
ResendSending invoices and estimates by email, and contact-form notificationsRecipient email address and the document you send. Location: United States.
TwilioSMS appointment reminders, where a shop enables themCustomer phone number and the reminder text. Location: United States.
TelegramOptional internal notifications to a shop's own private groupNotification contents chosen by the shop, which may include customer names, amounts and receipt photos. Location: International.
Google Firebase (FCM) and Apple (APNs)Push notifications to phonesDevice push tokens and notification text. Location: United States.
Google and Apple sign-inOptional single sign-onEmail address and account identifier. Location: United States.

We update this list when we add or remove a provider. Apart from these providers, we disclose personal information only where the law requires it.

6. How long we keep it

  • Account and shop data: for as long as the account is open.
  • Account closure: access stops immediately. Deletion of the account and its owned shops is scheduled after a 30-day cancellation period, then processed by our deletion service. Processing or recovery from a failure can take additional time. Save the private recovery link to cancel before the scheduled date. Download and verify your export before closing; the archive manifest identifies its contents and exclusions. Records belonging to other shops may remain in their history.
  • Deleted documents: kept in the trash for 30 days, then removed automatically.
  • Gate camera snapshots: 90 days by default. Video clips: 30 days by default. Each shop can shorten or lengthen these.
  • Gate camera plate log: 12 months by default, then deleted automatically.
  • Supplier call recordings and transcripts: retained by our calling provider under its own retention period.
  • Product feedback: kept while we work on the report and, after you delete it, in our own copy of the report. A screenshot no report record points at any more is scheduled for automatic deletion once it is older than 90 days. Account-associated records are processed through account deletion; provider and backup retention must be considered separately.
  • Contact and pilot form submissions: kept while we are in contact with you about the pilot.
  • Closing the service does not remove the shop's responsibility to keep accounting, tax and repair records for applicable legal periods. Keep an independent, verified copy before closure. A data-rights request or a legal preservation requirement may need separate review; contact us before closing if it affects your records.

7. Security

Data is encrypted in transit. Every shop's data is isolated at the database level so one shop cannot read another's. All uploaded files are stored in private buckets and are reachable only through short-lived signed links; nothing is publicly downloadable. Access inside a shop is limited by role, and money and contact details are restricted further.

If a breach creates a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and the people affected, as PIPEDA requires, and any other regulator the law names.

8. Your rights

You can ask for a copy of your personal information, ask us to correct it, withdraw a consent you gave, or ask for deletion. Shop users can export and delete an entire shop from inside the app, under Settings. For anything else, write to sevendaysbusinessinc@gmail.com.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

9. Children

NorthGarage AI is a tool for businesses. It is not directed at children and we do not knowingly collect information from anyone under 16.

10. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we handle personal information, we will tell account holders in the app before it takes effect.