Preview

Privacy Policy

Last updated: 2026-06-11. This is a working draft pending review by a Florida-licensed attorney before public launch.

1. What we collect

  • Account data: email, name, hashed password (Better Auth).
  • Shop data: shop name, phone, default labor rate, optional PayPal pay-link URL.
  • Customer data (entered by the mechanic): name, mobile phone, optional email, optional notes. The shop is the data controller; Slipside is a processor acting under the shop's direction.
  • Job artifacts: photos taken by the mechanic, voice transcript and optional audio recording, AI-generated condition findings, the customer's e-signature image, GPS coordinates at signing time, IP address, and device user-agent string.
  • Payment data: handled by Stripe; we store only the Stripe customer ID and pack purchase metadata. We never see card numbers.

2. How we use it

To generate the customer's condition report and quote, to deliver the signing link, to maintain a tamper-evident audit trail of the signing event, and to bill prepaid Sparks. We do not sell or share customer data with third parties for marketing.

3. Photo and audio retention

Photos, voice transcripts, and audio recordings are retained for 18 months in active storage. After 18 months they may move to cold archive and remain accessible read-only as part of your business records until you request deletion.

4. SMS and signing-link delivery

The mechanic confirms customer consent at job creation. We send a single transactional message per job containing the link to the condition report, by SMS where SMS delivery is configured, otherwise by email or a link the mechanic shares directly. SMS recipients can reply STOP at any time to opt out and HELP for support.

5. Customer-data deletion

A customer or their shop may request deletion of all photos, voice recordings, transcripts, the signed PDF, and the signature image for a job. Shops can do this themselves with the "Delete this job" action on any job. The audit-log row (job events) is preserved with personal artifacts removed, to maintain the integrity of any prior business record. You can also email dutoit.emile@gmail.com to request deletion.

6. Subprocessors

  • Vercel (hosting, file storage)
  • Neon (Postgres database)
  • OpenRouter (AI inference; data is not used to train models)
  • Groq (voice transcription backstop, when enabled)
  • Twilio (SMS, when enabled)
  • Stripe (payments)
  • Resend (transactional email)
  • Inngest (background jobs)

7. Contact

Email: dutoit.emile@gmail.com