Privacy Policy
Shops OS uses data to run the app, protect shop accounts, support shops, improve the product, process billing and payments, and communicate with users. This policy explains what we collect, why we use it, how it may be shared, and what choices shops have.
Customer names, vehicles, invoices, work orders, and shop notes are used to provide the Shops OS service.
Full card numbers, card security codes, bank account numbers, and payout credentials are handled by Stripe, Apple, or another payment provider selected by the shop.
Analytics and marketing tools load only according to the cookie choices saved in the browser.
Support may review records needed to troubleshoot, protect the platform, or complete a shop request.
Employee invitations and external customer or supplier messages are sent by email. In-app activity alerts may arrive as push notifications when enabled. Phone numbers are kept as shop or customer contact information.
Information We Collect
- Account information: shop name, owner or employee name, email, phone, account identifiers, protected login credentials, plan status, permissions, and settings.
- Shop workflow and customer information: customers, vehicles, VIN details, work orders, estimates, invoices, parts, notes, approval links, electronic signatures, customer email messages, and supplier records.
- Payment, financial, and subscription information: invoice and estimate totals, payment amounts and status, payment provider IDs, payment link IDs, connected-account status, subscription and purchase history, timestamps, and webhook events. Shops OS does not receive full card numbers, card security codes, or full bank credentials entered into a provider's secure form.
- Search and AI information: parts searches, supplier selections, vehicle context, Shoppie requests, conversation context supplied with a request, and the results or actions returned for that request.
- Device and usage information: IP address, approximate IP-based region, browser, device type or identifier, push token, page and feature interactions, employee activity records, security logs, diagnostics, cookie choices, and analytics events.
- Optional device features: device coordinates when a user chooses Use Location for nearby supplier results; coarse location and device details needed by Stripe Terminal for an in-person card payment; camera input for VIN scanning; photos a user selects for a shop logo or work-order record; and microphone/speech input when a user taps the Shoppie AI voice button. Selected images may be uploaded. Spoken audio is used for live transcription and is not retained by Shops OS; the resulting transcript is handled like a typed Shoppie request.
- Support information: messages, support tickets, screenshots, files, notes, and feedback sent to Shops OS.
How We Use Information
We use information to provide the app, authenticate users, save shop records, connect jobs to invoices and payments, manage subscriptions, provide customer links, search or save parts, support supplier workflows, improve features, measure product performance, troubleshoot bugs, secure accounts, prevent fraud, send email notices, and respond to support requests. Shops OS does not use phone numbers to send SMS messages.
Cookies and Similar Technologies
Required cookies keep users signed in and protect sessions. Preference cookies remember app choices. Analytics cookies help measure product usage and reliability. Marketing cookies help measure campaigns and reach similar audiences. Optional cookies are controlled by the choices saved in the browser. The iOS app keeps optional analytics and marketing tracking disabled.
Service Providers and External Services
Information is sent only as needed for the feature a user or shop chooses. The services currently used or supported by Shops OS include:
- Stripe: customer card payments, payment links, connected shop payment accounts, and supported in-person payments through Stripe Terminal. Stripe receives payment, transaction, device, and coarse location information as needed to process those payments.
- Apple: iOS subscriptions through StoreKit, Sign in with Apple, push notifications, and system speech-recognition services used only when a user starts voice input.
- Google: Google sign-in, an optional Gmail connection, and map directions.
- OpenAI: Shoppie AI requests and the limited shop, customer, vehicle, invoice, work-order, or search context needed to understand and complete a requested action.
- Resend: delivery of account emails, employee invitations, customer messages, invoices, receipts, and supplier-order emails.
- Intuit QuickBooks: accounting records a shop chooses to export or synchronize after connecting its QuickBooks account.
- Vehicle, map, and supplier services: NHTSA, OpenStreetMap, Google Maps, MOTOR when enabled, and selected supplier websites may receive a VIN, vehicle description, search terms, ZIP code, or location context needed for a lookup.
- Order and shipment services: AfterShip, Shopify-connected suppliers, carriers, and selected suppliers may receive order, shipment, or tracking details when a shop uses those integrations.
- Website measurement: Google Analytics, Google Tag Manager or Ads, and Meta Pixel load only after the applicable browser consent. These tools stay disabled in the iOS app.
- Infrastructure providers: Render and database, security, and delivery vendors process account and app data so Shops OS can operate, protect, and support the service.
How Information May Be Shared
Shops OS may share information with the providers described above and other vendors that help operate the app, including hosting, database, payment, email, analytics, AI, error logging, security, customer support, and infrastructure providers. We may also share information when required by law, to protect rights and safety, to investigate abuse, at a shop's direction, or during a business transfer.
We do not sell shop customer records. Some privacy laws may treat certain ad measurement or remarketing activity as "sharing." Shops can decline marketing cookies to avoid optional marketing sharing.
Retention
We keep information while an account is active and as needed for support, security, payment disputes, fraud prevention, tax and accounting records, legal compliance, backups, and legitimate business operations. Shops can request deletion or export, but some records may need to be kept when required for legal, billing, fraud, or security reasons.
Security
Shops OS uses safeguards designed to protect app data, but no online system is perfectly secure. Shops should use strong passwords, keep account access limited to trusted users, review outgoing invoices and links, and report suspected unauthorized activity quickly.
Privacy Choices
- Update account and shop details in settings where available.
- Delete the shop account in Settings under Account Management.
- Clear browser data to reset the cookie prompt and choose new cookie settings.
- Use browser controls to limit cookies, tracking, and advertising identifiers.
- Decline an optional device prompt or change camera, microphone, speech recognition, Bluetooth, or location access in device settings. The related optional feature may stop working.
- Disconnect supported third-party integrations from Shops OS settings and, where appropriate, from the provider's account settings.
- Contact Shops OS to request access, correction, export, deletion, or review of account data.
Children's Privacy
Shops OS is built for automotive businesses and is not intended for children under 13. Shops should not knowingly enter children's personal information unless it is necessary and lawful for a legitimate shop transaction.
Changes and Contact
We may update this Privacy Policy as the product, providers, features, or legal requirements change. Questions or privacy requests can be sent to support@shops-os.com.