BuildBay (“BuildBay,” “we,” “us”) is a digital garage app for tracking vehicles, modifications, maintenance, and build history, operated by [Operator legal name — founder to set]. This policy explains what we collect, how we use it, and the choices you have. By using BuildBay you agree to this policy.
The short version
BuildBay is private-first. Your garage is stored on your device and — while you are signed in, which turns on cloud sync — in your own account, where database rules make it readable to no one but you. You can stop syncing any device, and using BuildBay without an account keeps everything on your device only. We don’t sell your data or use advertising trackers. You control what, if anything, you publish publicly.
Information we collect
- Account information. When you create an account we process your email address, and — if you choose them — a display name and authentication details. Sign-in is handled through email/password, a one-time “magic link,” or Google sign-in. If you use Google, Google shares your email address and basic profile with us to create the account; we never receive your Google password.
- Your garage content. The vehicles, modifications, maintenance and service records, parts and tools, projects, notes, photos, and any other information you enter. By default this lives only in your browser’s local storage on your device. When you sign in, cloud sync turns on and a copy is stored in your account so it can follow you across devices; you can stop syncing any device from Settings.
- Published showcases. If you choose to publish a build to a shareable page, the specific, pre-redacted details you select become publicly viewable at that link. You decide what is included, and you can unpublish at any time.
- Waitlist & feedback. If you join the waitlist or send feedback, we collect the email address, name, consent record, and message you provide.
- Vehicle lookups. If you decode a VIN, the VIN is sent to the U.S. National Highway Traffic Safety Administration (NHTSA) vPIC service to return vehicle specifications. This is disclosed in the app before you decode; we do not store the VIN on our servers.
- Technical & security data. Basic server logs, and — where enabled — anonymized error reports to help us fix crashes, plus anti-spam checks (a hidden form field and, on the waitlist, a Cloudflare Turnstile challenge that does not track you across sites).
How we use your information
- To provide and operate BuildBay and keep you signed in.
- To sync your garage across your devices while cloud sync is on (it turns on at sign-in; you can turn it off per device).
- To publish the showcase pages you explicitly choose to share.
- To respond to your feedback and support requests.
- With your consent, to email you about beta access and occasional BuildBay product updates. You can withdraw that consent at any time.
- To keep the service secure and prevent spam and abuse.
- To fix problems and improve the app.
We do not sell your personal information, and we do not use it for third-party advertising.
Service providers we use
We rely on a small set of providers, each of which processes only what it needs to:
- Supabase — authentication, database, and file storage for accounts and synced garages.
- Google — optional “Sign in with Google” authentication.
- Vercel — application hosting and delivery.
- Cloudflare Turnstile — bot protection on the waitlist form.
- Sentry — error monitoring (only if enabled), to diagnose crashes.
- NHTSA vPIC — U.S. government VIN decoding, used only when you decode a VIN.
How your data is protected
- Your garage is local-first — it works on your device, and nothing is uploaded unless you sign in. Signing in turns on cloud sync, which you can stop per device from Settings.
- Cloud data is owner-scoped by database row-level security: every record is tied to your account, and no other account can read it.
- Data is encrypted in transit (HTTPS). Published showcase pages contain only what you chose to share.
Cookies & local storage
We use a session cookie to keep you signed in and your browser’s local storage to hold your garage on your device. We do not use third-party advertising or cross-site tracking cookies.
Your choices & rights
- Access & export: export a copy of your garage records anytime from Settings → Backup. (The export file contains your records; uploaded photos and file attachments are not included in it.)
- Delete: permanently delete your entire account and cloud data yourself from the Account page (Account → Delete account), or delete individual records or start fresh from within the app. You can also contact us to request deletion.
- Unpublish: take down any published showcase at any time.
- Waitlist: unsubscribe from any waitlist email using the link it contains, or ask us to remove your email at any time.
Depending on where you live, you may have additional rights (such as access, correction, or deletion). Contact us and we’ll help.
Data retention
We keep account and synced-garage data for as long as your account is active or as needed to provide the service. When you delete your account or ask us to, we delete the associated cloud data from our active systems. Residual copies may persist in encrypted, routine backups for a limited period before those backups expire and are overwritten. Data stored only on your device is removed when you clear it or uninstall.
We keep waitlist details until you unsubscribe or ask us to delete them, or for no more than 12 months after beta access opens if you never become a BuildBay user. We may retain a minimal suppression record so we do not email an unsubscribed address again by mistake.
Children
BuildBay is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we’ll remove it.
Changes to this policy
We may update this policy as the app evolves. We’ll revise the “Last updated” date above, and significant changes will be communicated in the app.
Contact
Questions or requests? Email buildbayapp@gmail.com. Mailing address: [Business mailing address — founder to set].