Privacy Notice

• Account data (name, email, phone, role, login credentials, hourly rate) — to create accounts and provide the service. Legal basis: performance of a contract.
• Shop operating data (customers, vehicles, repair orders, inspections and photos, parts, time clock records) — to deliver the workflow you signed up for. Legal basis: contract.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Usage and device data (IP address, device identifiers, telemetry, error logs) — for security, fraud prevention and improving the product. Legal basis: legitimate interests.
• Marketing contact details where you request a demo — legal basis: consent, withdrawable at any time.

Payment card details are collected and processed by Stripe, not by us. We never see or store full card numbers.

• Service providers and subprocessors: cloud hosting and database, email and SMS delivery, AI model providers used for advisory recommendations, and analytics tooling.
• Stripe, our merchant of record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Accounting platforms you choose to connect, such as QuickBooks Online.
• Professional advisers (legal, accounting) and authorities where required by law.

Our providers may process data outside Canada, including in the United States and the EEA. Where required, transfers rely on standard contractual clauses or an adequacy decision.

Shop records are kept for as long as your account is active and for up to 12 months after closure so you can reactivate or export, after which they are deleted or anonymised. Billing and tax records are kept for the period required by law. Inspection media is deleted with the shop's data.

Records are stored in an encrypted managed database with row-level access rules so one shop can never read another shop's data. Access is restricted to staff who need it, data is encrypted in transit, and inspection media is served through short-lived signed links.

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. Email founder@baybuddy.ca and we will respond within one month. You may also complain to your local privacy regulator — in Canada, the Office of the Privacy Commissioner.

We use essential cookies to keep you signed in and secure the service, plus limited analytics cookies to understand product usage. You can clear or block cookies in your browser; essential cookies are required for the app to function.