Privacy Policy

This policy explains what TuneIntake collects, why, and who it is shared with. It covers tuning shops that hold an account (“Shops”) and people who submit a request through a Shop's page (“Customers”).

1. Information we collect

• Shop account details: login email, shop name, logo, phone, city and state, service list, terms text, and subscription status.
• Customer requests: name, email, phone, contact preference, vehicle details including VIN and mileage, modifications, goals, tuning device, uploaded photos and datalog files, and the time the Shop's terms were accepted.
• Payment information: handled by Stripe. We receive confirmation that a payment succeeded and its amount. We never see or store full card numbers.
• Technical data: a one-way hashed form of the IP address used to submit a request (for abuse prevention), and standard server logs.

2. How we use it

• To deliver a Customer's request to the Shop they chose, and to email confirmations to both.
• To run Shop accounts, billing and support.
• To prevent spam, fraud and abuse, and to keep the Service secure.

We do not sell personal information, and we do not use it for advertising.

3. Who we share it with

• The Shop you submit to. A Customer's request, files and contact details are shared with that Shop, which is independently responsible for how it uses them.
• Service providers that process data for us: Supabase (database, authentication and file storage), Stripe (payments), Resend (transactional email) and Vercel (hosting).
• NHTSA vPIC. If a Customer enters a VIN, the VIN alone is sent to the U.S. National Highway Traffic Safety Administration's public decoder to look up the vehicle.
• Authorities, when required by law.

4. Storage on your device

The request form saves a Customer's unfinished answers in their own browser's local storage so they can return later. This stays on the device and is cleared after a successful submission. Shop logins use essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

5. Retention

Requests and files are kept while the Shop's account exists, so the Shop has a record of its work. When a Shop account is deleted, its requests and files are deleted with it, except records we must keep by law.

6. Security

Data is encrypted in transit. Each Shop can access only its own requests, enforced at the database level. Uploaded files are stored privately and served to the Shop through short-lived links. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your choices and rights

Customers can ask the Shop they submitted to, or us, to access, correct or delete their request. Shops can update their details in Settings and can ask us to delete their account. Depending on where you live, you may have additional rights under local privacy law.

8. Children

The Service is intended for adults and is not directed to children under 16.

9. Changes

We will post any changes to this policy here with a new date.

10. Contact

Privacy questions or requests? Contact us by replying to any email you have received from TuneIntake.