Information collected
Contact details, vehicle details, an optional VIN, mileage, symptoms, preferences, consent records, and optional photos. A mobile address is requested only when needed to assess the mobile job.
DRAFT PRIVACY NOTICE
Collect only what the repair review needs.
This notice is a launch placeholder and must be reviewed against actual vendors, retention periods, security practices, and North Carolina and federal requirements.
How it is used
To review the request, confirm vehicle configuration, fitment and parts, prepare and revise estimates or invoices, schedule approved work, provide acknowledgments, and maintain an audit trail.
Storage and access
Structured records are intended for Cloudflare D1 and photos/documents for R2. Admin access is protected by platform sign-in plus an explicit server-side administrator allowlist.
Retention and deletion
Set a written retention schedule before launch. Define how customers can request access, correction, or deletion, subject to legal and business record obligations.
Vendors and transfers
List the selected verified email provider, hosting provider, parts suppliers, analytics (if any), payment provider (if later added), and their role before publication.
Security
Server-side validation, limited file types and sizes, spam controls, least-privilege access, secrets outside source control, and audit logging are designed into the implementation; deployment configuration must be verified.