Privacy Policy

This Privacy Policy describes how the operator of Service Track (the "Company", "we", "us" or "our"), which operates the Service Track website and service (the "Platform"), collects, uses, discloses and safeguards personal information, and the rights you have in respect of it. It forms part of, and is incorporated into, our Terms of Service. By using the Platform you acknowledge this Policy.

We apply this Policy to everyone who uses the Platform, wherever they are. Where a protection is available to readers in one country only, we extend it to all of them rather than ask where you are.

1. Scope

This Policy applies to personal information we process in connection with the Platform. It does not apply to any third party's own collection or use of information, including the services named in Section 4, each of which is governed by its own policy.

2. Information we collect

Information you give us: your name, email address, the role you select, and, where you operate as a business, your business name, employer identification number and business address. Information about vehicles you list: the vehicle's description and class, the street address, municipality, state and postal code where it stands, its geographic coordinates and the parking outline and heading you place on the map, whether it can be driven, the work requested, scheduling, notes and photographs you upload. Information about transactions: Quotes, Jobs, prices, statuses, timestamps, payment and payout status, and the references our payment processor returns to us.

Information collected automatically: the ordinary operating and security records our servers keep of the requests they answer, and an append-only record of every change made to a record on the Platform, which holds the account that made the change, what was changed and when. The change record is read by our operators on the administrative pages and is kept for as long as the account exists.

We use no advertising technology, no tracking pixel, no fingerprinting and no analytics product, and we set no identifier that follows you between visits.

Information we do not collect: we do not receive or store your payment card number, bank account number, or the credentials you use to sign in. Those are held by our payment processor and our identity provider respectively, as described in Section 4.

3. How and why we use information

We use personal information to create and administer accounts and authenticate access; to publish listings to the Users entitled to see them and to match requested work with Mechanics; to price, record, and settle transactions; to communicate with you about your account and your transactions; to provide support and to investigate and resolve disputes; to maintain the security and integrity of the Platform, including detecting and preventing fraud and abuse; to keep records required for accounting, tax and legal compliance; and to comply with law and to establish, exercise or defend legal claims.

Where a legal basis is required, we rely on the performance of our contract with you, our legitimate interests in operating and securing a marketplace, compliance with legal obligations, and, where applicable, your consent, which you may withdraw at any time without affecting processing already carried out.

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising. We have not done so in the preceding twelve months. We do not use personal information for automated decision-making that produces legal or similarly significant effects.

4. Disclosure to service providers and others

Some pages of the Platform load resources from other companies, and your browser contacts those companies directly when it does. Each of them can see your network address and the fact that your browser asked for the resource. The following are all of them:

• Amazon Web Services (Amazon Cognito) hosts the sign-in page your browser is sent to when you sign in, and receives the credentials you enter there.
• Stripe hosts the checkout and payout onboarding pages your browser is sent to when you pay or set up payouts, and receives the payment details you enter there.

Our servers also call the following services on our behalf, and your browser contacts none of them:

• Stripe processes payments and payouts and holds payment card and bank account details, which do not reach our servers.
• Amazon Web Services authenticates you through Amazon Cognito and provides the hosting, database and storage on which the Platform runs.
• Kaizant Ground, Kaizant's mapping service, supplies the maps, their aerial images and the address suggestions, and checks the address of a vehicle at the moment it is listed. Our servers ask it for the map areas and addresses being looked at and the text typed into an address field, and nothing that identifies you.
• Open-Meteo returns the forecast shown on the weather page and receives the location the forecast is for.
• Ntfy carries operational alerts to our operators where that channel is switched on. An alert can name a vehicle's address and the account it belongs to.

We also disclose personal information to other Users to the extent the service requires, for example the address where a vehicle stands and the work requested are made available to a Mechanic considering or performing a Job; to professional advisers under duty of confidence; to a successor in connection with a merger, acquisition, financing or sale of assets, in which case this Policy continues to apply until superseded on notice; and to law enforcement, regulators or other parties where we reasonably believe disclosure is required by law, necessary to enforce our Terms, or necessary to protect the rights, property or safety of any person.

5. Cookies and local storage

Every cookie and storage key this Platform uses is listed, with its purpose and its retention, in the Cookie Policy. All are first-party. No third party sets any cookie or reads any storage through the Platform, and we set no advertising cookie.

All of them are strictly necessary for a function you have asked for, or store only a preference you have set by your own action, so none of them requires your consent. The cookie notice records your answer so that the Platform can honour it and so that you are not asked again, and a Global Privacy Control signal from your browser is treated as a refusal without our asking.

The reading you last had a list open in, and the page you were last on in your own area, are stored in your own browser's local storage. They are set by your own navigation, never leave your device, and are not readable by us.

6. Retention

We retain personal information for as long as your account is active and thereafter for as long as necessary to provide the service, to resolve disputes, to enforce our agreements, and to satisfy accounting, tax, audit and other legal obligations, after which we delete it or render it no longer attributable to you. Transaction records are ordinarily retained for the period applicable statutes of limitation and tax rules require.

7. Security

We maintain administrative, technical and physical safeguards designed to protect personal information, including transport encryption, role-based access controls, opaque session identifiers, and the isolation of payment credentials and sign-in credentials with the specialist providers named above. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for notifying us promptly of any suspected compromise.

8. Your rights and choices

You may request access to the personal information we hold about you, correction of inaccurate information, deletion, a portable copy, and a restriction on or an objection to certain processing, and you may lodge a complaint with your supervisory authority. As stated in Section 3, we do not sell or share personal information for advertising. We will not discriminate against you for exercising any of these rights, and we honour these requests for every reader, not only those whose local law compels them.

You may correct much of your information directly on the Platform, including your profile and the details of each vehicle you list. To make any other request, contact us at [email protected]. We will verify your request by reference to the account it concerns and respond within the period applicable law requires. An authorized agent may make a request on your behalf with proof of authority. If we decline a request, we will tell you why, and you may appeal by replying to our response.

9. Children

The Platform is not directed to, and may not be used by, anyone under eighteen (18) years of age, and we do not knowingly collect personal information from children. If we learn that we have collected information from a person under eighteen, we will delete it. A parent or guardian who believes we hold such information should contact us at [email protected].

10. International users

The Platform is operated from the United States, and personal information is processed and stored there. If you access the Platform from outside the United States, you understand that your information will be transferred to, and processed in, a jurisdiction whose data protection law may differ from that of your own, and where a transfer mechanism is required we will rely on an appropriate one.

11. Changes to this Policy

We may update this Policy from time to time by posting the revised Policy on the Platform and updating the date above. Where a change is material we will provide such additional notice as applicable law requires. Your continued use after the effective date constitutes acknowledgement of the revised Policy.

12. Contact

Questions, requests and complaints about this Policy may be sent to [email protected].