Privacy Policy
How we collect, use, and protect your information.
Last Updated: March 2026
1. Information We Collect
We collect information you provide directly and information generated through your use of the Service:
Account Information
Name, email address, phone number (optional), shop name, and password when you create an account or invite team members.
Diagnostic Data
Vehicle make/model/year, VIN numbers, diagnostic trouble codes (DTCs), customer-reported symptoms, technician notes, repair-order photos used for data extraction, and AI-generated diagnostic reports that you create through the platform.
Usage Data
Information about how you interact with the Service, including features used, reports created, timestamps, and workflow activity within your shop.
Technical Logs
Server logs, IP addresses, browser/device type, error reports, and performance data collected automatically to maintain and improve the Service.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process vehicle information, diagnostic codes, symptoms, and repair-order data through our AI analysis pipeline to generate diagnostic reports
- Send account-related notifications and optional SMS alerts (if configured)
- Respond to support requests and troubleshoot issues
- Detect and prevent fraud, abuse, or security incidents
- Analyze aggregate usage patterns to improve platform features and AI accuracy
- Fulfill legal obligations and enforce our Terms of Service
We do not use your shop’s diagnostic data or customer vehicle information for advertising purposes.
3. Data Sharing
We do not sell your data. We share information only as described below:
Service Providers
We use third-party services to operate the platform. These providers have access to data only as necessary to perform their functions and are bound by confidentiality obligations:
- Cloud infrastructure & database hosting — stores your account data and diagnostic reports
- AI processing — the vehicle information, diagnostic codes, symptoms, and repair-order photos you provide are sent to a third-party AI provider for analysis; data is not retained by the AI provider for training
- SMS notifications — if you enable SMS alerts, your phone number is used via a messaging provider to deliver those notifications
Legal Requirements
We may disclose information when required by law, court order, or to protect the rights and safety of GlassDiagnostics, its users, or the public.
Business Transfers
If GlassDiagnostics is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
4. Data Retention
We retain your data for as long as your account is active and as needed to provide the Service:
- Active accounts: All diagnostic reports, vehicle data, and account information are retained while your subscription is active
- Account closure: You may request deletion of your account and data. We will process deletion requests within 30 days, subject to any legal retention obligations
- Deleted records: The platform uses soft-deletion for some records (reports marked deleted are retained briefly for data integrity before permanent removal)
- Technical logs: Server and error logs are retained for up to 90 days for security and troubleshooting purposes
5. Security
We take the security of your data seriously and implement multiple layers of protection:
- Encryption in transit: All data is transmitted over HTTPS/TLS
- Multi-tenant isolation: Row-level security (RLS) policies in the database ensure each shop can only access its own data
- Access controls: Role-based permissions (owner, manager, technician) limit access to data and features based on role
- Authentication: Accounts are protected by hashed passwords and optionally Google OAuth
- Infrastructure: The platform is hosted on private infrastructure with network-level access controls
No system is 100% secure. If you discover a security issue, please report it to [email protected] and we will respond promptly.
6. Your Rights
Depending on your location, you may have rights under applicable data protection law (including GDPR and CCPA) to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your personal data (subject to legal obligations)
- Restrict or object to certain processing activities
- Data portability — receive your data in a structured, machine-readable format
- Opt out of any marketing communications
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing requests.
California residents: Under CCPA, you have the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.
8. Children's Privacy
GlassDiagnostics is a business-to-business service designed for automotive repair professionals and shop operators. It is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at [email protected] and we will take steps to delete it.
9. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by posting a notice in the application or by email to your account address. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
10. Contact
Questions or concerns about this Privacy Policy or how we handle your data? Contact us at [email protected]. We take privacy seriously and will respond within 1–2 business days.
Last Updated: March 2026