When you use AutoSync, we collect three types of information:
Your name, email address, phone number, shop name, address, and billing details. We need this to create your account, bill you, and send you product-critical communications.
Customers, vehicles, work orders, invoices, parts inventory, labor rates, employee records you enter into AutoSync. This is your data — we store it, secure it, and make it available to you, but we never use it for any other purpose.
Anonymous analytics (page views, feature usage, error logs) help us improve the product. IP addresses and user agents are logged for security/fraud prevention and deleted after 90 days.
We use your information only to:
We never use your shop's customer data to train AI models, sell to advertisers, or share with any third party beyond the processors described below.
We share data only with these service providers, who are contractually bound to protect it:
We will disclose information to law enforcement only in response to a valid legal request (subpoena, court order, or search warrant) and will notify you unless legally prohibited.
When your shop uses AutoSync, you are the "data controller" for your customers' information and we are the "data processor." You decide what to collect, how long to keep it, and how to respond to customer data requests.
AutoSync acts as a neutral pipeline — we don't analyze, sell, or use your customer data for anything beyond operating the platform for you. If your customers request data access, correction, or deletion, you are responsible for honoring those requests (we provide tools in the UI to do so).
We retain your operational data as long as your account is active. If you cancel, we retain data for 90 days so you can export it, then permanently delete it unless you request earlier deletion.
Billing records (invoices, payment history) are retained for 7 years as required by US tax law, even after account deletion.
Server logs (IPs, user agents, request traces) are retained for 90 days for security purposes, then deleted.
We protect your data with:
No system is 100% secure. If we discover a breach affecting your data, we will notify you within 72 hours and provide full details of what was affected and what we're doing about it.
You can, at any time:
California residents: you have additional rights under CCPA including the right to know what personal information we've collected and the right to opt out of any sale (we don't sell data anyway).
EU residents: you have GDPR rights including the right to a copy of your data in a portable format and the right to lodge a complaint with your national data protection authority.
To exercise any of these rights, email privacy@autosyncshopmanager.com.
We use cookies for authentication (session cookies) and preferences (remembered filters, theme). We do not use third-party advertising cookies or tracking pixels.
On our marketing pages only, we use privacy-respecting analytics (Plausible) which does not set cookies or track you across sites.
AutoSync is designed for businesses and is not intended for use by individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 13, we will delete it immediately.
If we make material changes to this privacy policy, we will email you at least 30 days before the changes take effect. Continued use of AutoSync after changes take effect constitutes acceptance of the new policy.
Minor wording changes (typo fixes, clarifications that don't change meaning) will not trigger a notification but will update the "Last updated" date above.
Questions about this policy or your data?
Email: privacy@autosyncshopmanager.com
Mail: AutoSync, Attn: Privacy, [Your Address]
For GDPR inquiries from the EU: specify "GDPR Request" in subject line for expedited handling.
Fill out the form and we'll reach out within hours. Real people, based in North Canton, Ohio.