This Privacy Policy explains how Spartan Media LLC ("we", "us", or "MotorDesk") collects, uses, and protects the personal information of users ("you", "shop owners", "technicians") of the MotorDesk application available at motordesk.us(the "Service"). By using the Service you agree to this Policy.
1. Information We Collect
We collect the following categories of information:
- Account data: name, email, phone, shop name, address, role.
- Operational data you enter: customer names, contact details, vehicle VINs, work orders, quotes, appointments, notes.
- Payment data: processed by Stripe; we never store full card numbers.
- Usage data: log files, IP address, device info, timestamps, pages visited.
- Cookies: authentication and session cookies; minimal analytics.
2. How We Use Information
- To provide, maintain, and improve the Service.
- To process subscriptions and payments via Stripe.
- To send transactional emails (receipts, approvals, reminders).
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
3. Third-Party Services
MotorDesk integrates with the following sub-processors, each governed by its own privacy policy:
- Supabase — database, authentication, and file storage.
- Cloudflare — hosting, edge compute, and security (Turnstile).
- Stripe — subscription billing and payment processing.
- Resend — transactional email delivery.
- Google — sign-in (OAuth) and Maps/Places address autocomplete.
- OpenAI — AI-assisted features (no customer PII intentionally sent).
- NHTSA vPIC — free U.S. government VIN decoding (no PII sent).
4. Tenant Data & Confidentiality
MotorDesk is multi-tenant. Your shop's data is logically isolated by tenant ID and protected with row-level security. We do not share your operational data with other shops or third parties except as strictly required to run the Service.
5. Data Retention
We retain account and operational data for as long as your account is active. Upon cancellation, data may be retained up to 90 days for billing reconciliation, then permanently deleted. Soft-deleted records (customers, vehicles, quotes, work orders) are retained for audit and restoration purposes.
6. Your Rights
You may request to:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Delete your account and associated data (subject to legal retention).
- Export your data in a portable format.
Send requests to [email protected].
7. Security
We use TLS in transit, encryption at rest (Supabase/Cloudflare defaults), bot protection via Cloudflare Turnstile, and strict tenant isolation. No system is perfectly secure; report suspected vulnerabilities to[email protected].
8. Children
MotorDesk is for business use only and not directed to anyone under 16.
9. Changes
We may update this Policy from time to time. Material changes will be announced inside the app or by email.
10. Contact
Spartan Media LLC
Email: [email protected]