What we collect
Only what running a repair visit needs:
- Your account: name, email, a one-way hash of your password (never the password), your consent choices and when you made them.
- Your vehicle: year, make, model, trim, and the VIN if you enter one.
- Your visit: the address, phone and email for that visit, any note you add, the quote, the arrival window, the technician's progress, inspection findings and the photos taken during the job, any changes you approved, and the warranty.
- Payment: the processor's references to your card hold and charge, amounts and status — never the card number, which goes straight to Stripe.
- Messages you send us about a visit, and reviews you choose to write.
- Email delivery: whether an email we sent was delivered, bounced or marked as spam.
- Page views — only if you allow analytics: the page, a random session identifier, and nothing that names you.
Why we use it
To quote, book and perform the work; to take payment; to honour the warranty; to keep technicians and customers safe; to answer you; and to meet legal and tax duties. We send marketing email only if you said yes, only to an address you confirmed, and every one carries a one-click unsubscribe.
Who else handles it
We do not sell your information. These services process it for us, only for these purposes:
- Stripe — card holds, charges and refunds.
- [Email provider: Resend or Postmark — owner] — sending booking emails, receipts and account links.
- Cloudflare — delivering the site and protecting it from attacks.
- [Hosting provider — owner] — the server that runs B1 and its database.
- [Object storage provider — owner] — job photos, and encrypted backups.
- [Error monitoring: Sentry — owner] — reports of software errors, without the content of your visit.
- OpenAI — when used, it receives only vehicle and service information, or a description of a problem with names, contact details and addresses removed first; never your account details.
- NHTSA (the U.S. road safety agency) — the VIN, to decode the vehicle and look up open safety recalls.
- The technician assigned to your visit sees what they need for it — your name and phone, the address and your note, the vehicle and the job — and only once they have accepted the job.
Cookies and similar
B1 uses a sign-in cookie (only after you sign in), a cookie that remembers your analytics choice, and — only if you allow analytics — a random session cookie for counting page views. Your light/dark theme choice is kept in your browser. A browser Global Privacy Control signal is treated as "no" to analytics.
How long we keep it
Money records and warranties outlive an account; your identity does not.
- Payment and ledger records, warranties and approved changes: seven years (tax and accounting).
- Visit address, phone, email and note: until the dispute and warranty windows close (180 days, or the end of the warranty if later), then removed from the record.
- Your account, vehicles, quotes and service history: while you keep the account.
- Expired sign-in sessions and one-time account links: 30 days. Notifications: one year. Page views: 400 days.
- Backups: 14 days on our server; encrypted copies elsewhere for [60] days.
Your choices
- Download everything we hold about you: account settings → download your data.
- Correct your name in account settings; ask us to correct anything else.
- Turn marketing email off at any time; booking emails about a visit still arrive.
- Close your account: sign-in stops at once, and your personal details are erased within days, except what the law requires us to keep (above).
Security
Passwords are stored only as salted hashes; sessions and account links only as hashes; connections are encrypted; backups that leave our server are encrypted; staff access is logged.
Children
B1 is for adults booking work on vehicles they are responsible for. We do not knowingly collect information from anyone under 18.
Changes and contact
Each version of this policy has a version label; we will tell you about changes that matter. [Privacy contact email and mailing address — owner.]