BuildBay (“BuildBay,” “we,” “us”) is a digital garage app for tracking vehicles, modifications, maintenance, and build history. This policy explains what we collect, how we use it, and the choices you have. By using BuildBay you agree to this policy.
The short version
BuildBay is private-first. Your garage is stored on your device and, only if you turn on cloud sync, in your own account — where database rules make it readable to no one but you. We don’t sell your data or use advertising trackers. You control what, if anything, you publish publicly.
Information we collect
- Account information.When you create an account we process your email address, and — if you choose them — a display name and authentication details. Sign-in is handled through email/password, a one-time “magic link,” or Google sign-in. If you use Google, Google shares your email address and basic profile with us to create the account; we never receive your Google password.
- Your garage content.The vehicles, modifications, maintenance and service records, parts and tools, projects, notes, photos, and any other information you enter. By default this lives only in your browser’s local storage on your device. If you enable cloud sync, a copy is stored in your account so it can follow you across devices.
- Published showcases. If you choose to publish a build to a shareable page, the specific, pre-redacted details you select become publicly viewable at that link. You decide what is included, and you can unpublish at any time.
- Waitlist & feedback. If you join the waitlist or send feedback, we collect the email address, name, consent record, and message you provide.
- Vehicle lookups. If you decode a VIN, the VIN is sent to the U.S. National Highway Traffic Safety Administration (NHTSA) vPIC service to return vehicle specifications. This is disclosed in the app before you decode; we do not store the VIN on our servers.
- Technical & security data. Basic server logs, and — where enabled — anonymized error reports to help us fix crashes, plus anti-spam checks (a hidden form field and, on the waitlist, a Cloudflare Turnstile challenge that does not track you across sites).
How we use your information
- To provide and operate BuildBay and keep you signed in.
- To sync your garage across your devices, when you enable that.
- To publish the showcase pages you explicitly choose to share.
- To respond to your feedback and support requests.
- With your consent, to email you about beta access and occasional BuildBay product updates. You can withdraw that consent at any time.
- To keep the service secure and prevent spam and abuse.
- To fix problems and improve the app.
We do not sell your personal information, and we do not use it for third-party advertising.
Service providers we use
We rely on a small set of providers, each of which processes only what it needs to:
- Supabase — authentication, database, and file storage for accounts and synced garages.
- Google— optional “Sign in with Google” authentication.
- Vercel — application hosting and delivery.
- Cloudflare Turnstile — bot protection on the waitlist form.
- Sentry — error monitoring (only if enabled), to diagnose crashes.
- NHTSA vPIC — U.S. government VIN decoding, used only when you decode a VIN.
How your data is protected
- Your garage is local-first — it works on your device and is not uploaded unless you turn on sync.
- Cloud data is owner-scoped by database row-level security: every record is tied to your account, and no other account can read it.
- Data is encrypted in transit (HTTPS). Published showcase pages contain only what you chose to share.
Cookies & local storage
We use a session cookie to keep you signed in and your browser’s local storage to hold your garage on your device. We do not use third-party advertising or cross-site tracking cookies.
Your choices & rights
- Access & export: export a full copy of your garage anytime from Settings → Backup.
- Delete: delete individual records, start fresh, or request deletion of your account and cloud data by contacting us.
- Unpublish: take down any published showcase at any time.
- Waitlist: ask us to remove your email from the waitlist at any time.
Depending on where you live, you may have additional rights (such as access, correction, or deletion). Contact us and we’ll help.
Data retention
We keep account and synced-garage data for as long as your account is active or as needed to provide the service. When you delete your account or ask us to, we delete the associated cloud data. Data stored only on your device is removed when you clear it or uninstall.
We keep waitlist details until you unsubscribe or ask us to delete them, or for no more than 12 months after beta access opens if you never become a BuildBay user. We may retain a minimal suppression record so we do not email an unsubscribed address again by mistake.
Children
BuildBay is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we’ll remove it.
Changes to this policy
We may update this policy as the app evolves. We’ll revise the “Last updated” date above, and significant changes will be communicated in the app.
Contact
Questions or requests? Email buildbayapp@gmail.com.