Privacy policy

1. The choices at the center of My Garage

Collections start private. A subscription upgrade or downgrade does not publish your garage. Private purchase prices, receipts, order references, purchase and storage locations, private notes and messages are not part of a public garage projection.

The planned service does not use advertising pixels, sell personal information, share it for cross-context behavioral advertising or send collection content to runtime AI services. There is no in-app affiliate or marketplace program. Optional public sharing, connected purchases and price contributions require separate choices when those features become available.

This notice provides information; it is not a request to consent to every use described here. Where consent is required for an optional purpose, we ask for it separately and provide a way to withdraw it.

2. Information the service handles

The categories below depend on what you choose to use. Required account and service data are needed to supply the relevant feature. You do not have to supply optional profile content, exact purchase costs, receipts, notes or photos.

• Account and authentication: email and verification status, an authentication-provider identifier, sign-in and session information, account status, security events and any profile information you choose to provide. Authentication is handled by Clerk; the application does not need to store your password.
• Collection records: model or unlisted-item identity, individual copies, condition, packaging, groups, ownership events and your private edits. Planned collection tools may also handle wishlist entries, tags, purchase dates, money amounts and currencies, source references and manual valuations.
• Uploads and imports, when released: photos, receipts and CSV data you provide, file attributes, processing status and storage usage. A photo may contain people, location clues or metadata; avoid including unnecessary personal information. Original files and receipts remain private.
• Billing, when released: Stripe customer and subscription identifiers, selected plan, price version, renewal and cancellation status, transaction or invoice references, tax and billing details needed for the purchase, and refund or dispute records. Payment details entered in Stripe’s hosted checkout are handled by Stripe; we do not store full card numbers or card security codes in the collection database.
• Support and rights requests: your contact details, the information you send, steps taken to resolve a request and a limited record of the outcome. Provide only material relevant to the issue.
• Technical and security information: IP address, browser and device information, request times, session or security identifiers, errors and activity needed to deliver the service, detect abuse and diagnose problems. We do not need precise device location, contacts or a browsing history across unrelated websites.
• Choices and records of permission: the policy version and time of an acceptance or optional choice, trial eligibility, publication selections, consent withdrawal and requests to exercise privacy rights.

3. Where information comes from

Information comes from you and your use of the service; from Clerk’s authentication service; from Stripe when you choose paid billing; and from hosting, storage and security providers carrying out the relevant functions. If future community features are enabled, we may receive information from another participant or a report concerning an interaction.

A future Tiny Torque shop connection will require separate proof of the relevant customer account and your authorization. An email match, order number or verified app email alone is insufficient. It is intended to read authorized shop history, not modify shop orders or make purchases. Historical orders remain subject to your review before adoption into your collection.

Catalog information comes from separately approved sources and is distinct from your personal records. We do not treat public catalog information as evidence that you own an item.

4. Purposes and legal bases

Where the EU or UK GDPR applies, the following describes the proposed legal bases. In other jurisdictions we use the corresponding lawful grounds, including meaningful consent where required. We do not treat a contract as permission for unrelated processing.

• Providing your requested account, collection functions, subscription, exports and support: performance of our contract with you, or steps you request before entering it. Without the necessary account or transaction information we cannot supply the corresponding feature.
• Protecting accounts and the service, preventing fraud or trial abuse, maintaining reliable systems and handling complaints: our legitimate interests in operating a secure, fair and reliable service, after considering your rights and reasonable expectations. You may object where the law gives you that right.
• Keeping required tax and accounting records, answering lawful demands and fulfilling consumer or privacy duties: compliance with applicable legal obligations. Where a particular nonlocal obligation is not itself an EU or UK legal-obligation basis, we assess an appropriate lawful basis instead of assuming it is.
• Optional price contributions, nonessential cookies or marketing if later offered: your specific consent where required. Refusal or withdrawal does not remove ordinary Free features or access to your private collection.
• Publication and messages if later released: carrying out the specific sharing or communication you request, with separate publication controls and additional consent where required. An acceptance of these terms alone does not authorize sharing.
• Establishing or defending legal claims: applicable legal obligations or legitimate interests, with information and access limited to what the matter requires.

5. Service providers and other recipients

The selected provider stack is Clerk for authentication; Stripe for hosted subscription checkout, billing and payment processing; Vercel for application hosting and delivery; and Neon for the application database and planned storage. Each should receive only information needed for its role. Planned storage, backups and support arrangements must be verified before production use; selecting a provider is not evidence that a particular deployment or region exists.

Clerk may handle account, session and security information. Stripe handles payment and billing information and may act independently for purposes such as fraud prevention and legal compliance. Vercel processes requests and infrastructure information. Neon stores the application records assigned to it. Provider privacy notices also explain any processing they perform independently.

Authorized staff and contracted support or professional advisers may receive limited information needed for support, security, accounting, disputes or legal obligations. We do not give ordinary catalog editors or administrators unrestricted access to private collections or conversations merely because they have a role.

We may disclose relevant information where legally required, to respond to a valid legal process, or where necessary and lawful to protect people, rights or the service. We assess requests and limit disclosure to their scope. If the business is transferred, information may pass to the successor under appropriate confidentiality and privacy protections, with notice of a material change.

Other collectors and the public receive information only through the sharing or interaction you choose when those functions are released. We do not provide a private collection to advertisers.

6. Planned sharing, messaging and price contributions

Public garages are not active in this development version. When released, publication will require an explicit choice and selection of visible items. A public profile, chosen groups and safe photo derivatives may then be accessible worldwide and indexed by search engines. Counts and previews must use only the visible subset. Turning publication off will remove our public availability; independent screenshots and search-engine copies may take time to disappear or be outside our control.

Messaging is also a planned feature. Participants will see messages addressed to them. A recipient must accept a request before ongoing messages are allowed, and current settings and blocks continue to apply. We do not promise end-to-end encryption. A report may disclose the relevant reported material to specially authorized reviewers; moderation access is limited to the report and audited. Recipients may retain their own copies.

Optional collector-reported price contributions are not active. They would require a separate, versioned opt-in. The proposed contribution contains limited acquisition and collectible attributes under a contributor pseudonym, separate from your original private records. A pseudonym is not anonymity. Historic purchases require separate permission; consent does not automatically backfill them.

You would be able to stop future contributions and request removal of linkable contributed observations. Genuinely anonymous aggregate results that cannot reasonably be linked back to you may remain. A price paid is not a verified resale value, and no user-facing benchmark or market estimate is activated by accepting this policy. Each feature will receive a current notice and operational checks before release.

7. Cookies, measurement and communications

The planned app uses only cookies or similar storage needed for authentication, security and preferences necessary for a requested function. Blocking necessary cookies may prevent signing in or using that function. The separate merchandise shop may use additional technologies under its own notice.

Advertising and optional behavioral analytics are outside the current app scope. If nonessential measurement or marketing is introduced, we will explain it before activation and obtain consent where required, with an equally accessible way to refuse or withdraw. We do not interpret a Global Privacy Control signal as consent to any optional use; because My Garage does not sell or share data for targeted advertising, there is no such app activity to opt out of.

Account, security, payment and rights-request communications are service communications. Optional promotional messages, if offered later, will have a separate choice and an unsubscribe method. Declining promotion does not stop messages necessary to operate your account or carry out your requests.

8. Retention and account deletion

Canceling Plus keeps the account and collection on Free. It is not a deletion request. You can request deletion or an export by contacting support@tinytorque.com; self-service controls will be provided when the account-data workflow is released. We verify requests proportionately and explain any exception instead of silently retaining everything.

The proposed production retention schedule below is an operational commitment to implement and verify before launch, not a claim that a deletion system or backup schedule already exists.

• Active account and collection data: retained while needed to provide your account. An account is not deleted merely because it downgrades or exceeds Free limits. If we later introduce an inactivity policy, we will provide advance notice and an opportunity to retain or export data.
• Account closure: stop future renewals, revoke active access and remove public availability promptly. Complete deletion or irreversible anonymization of ordinary account, collection and media records from active systems within 30 days of a verified request, unless a legal exception applies or a shorter legal deadline is required.
• Backups: remove deleted data as backups expire, within a target maximum of 90 days after active-system deletion. Do not use backup copies for ordinary operations, and reapply deletions before restored data becomes available. This target must be verified against each provider before the policy becomes effective.
• Security and diagnostic logs: ordinarily up to 90 days. Retain only relevant extracts for a documented incident or legal matter, reviewed at least every 90 days rather than retaining all logs indefinitely.
• Support and ordinary complaint correspondence: ordinarily 24 months after resolution. Retain a narrower record longer only when required for a documented legal obligation or active dispute.
• Billing, tax and accounting records: ordinarily seven years after the relevant financial year, limited to what applicable obligations and justified claim periods require. Deleting your collection does not require deletion of a legally retained invoice. Payment providers may retain their own records under their separate obligations.
• Contract and renewal permission: retain the version accepted and necessary evidence for at least three years from acceptance or one year after termination, whichever is later, and longer only for an identified obligation or active claim. Keep rights-request outcomes for 24 months unless a different legal period applies.
• Trial eligibility: keep a minimal restricted record while the account exists. After deletion, retain only a necessary pseudonymous anti-abuse record for up to 24 months, subject to an assessed lawful basis; do not retain a deleted collection to enforce the once-per-person trial rule. This record remains personal information if it can be linked to a person.
• Legal holds: preserve only relevant records for a specific obligation or dispute, restrict access, review continued need and delete after the hold and any required retention end. We explain applicable exceptions in our response where legally permitted.

9. International processing

Tiny Torque operates from the United States. Using the planned provider stack may involve processing in the United States and other countries where the relevant providers and authorized personnel operate. Those countries may have different privacy laws; we do not promise that data stays in your country or in one region.

Before a production transfer requiring safeguards, we must establish an applicable lawful mechanism, such as an applicable adequacy decision or approved contractual safeguards, and any required assessment or additional protections. This draft does not assert that Tiny Torque is certified under a Data Privacy Framework, that any particular standard clauses have been executed, or that an international representative has been appointed.

You can contact support@tinytorque.com for information about the applicable safeguards and a copy where required, with necessary confidential information protected. The effective launch notice must identify actual processing locations, applicable transfer arrangements and any legally required representative before the relevant service is offered.

10. Security and automated processing

We design account and data access around authenticated owners, private defaults and limited permissions. Production controls must be tested before release, including secure transport, access to storage, credential handling, incident response and deletion. No internet service can guarantee perfect security. Do not send passwords or full card details to support.

The planned service uses automated rules for quotas, trial eligibility, billing entitlements and security checks. These rules do not use runtime AI. They can affect whether you can add content or use Plus; contact support@tinytorque.com if you believe a decision is wrong. We provide review and correct errors. We do not use your collection to make credit, employment, insurance or similarly significant profiling decisions.

11. Your rights and how to exercise them

You may contact support@tinytorque.com to request access, correction, deletion or a portable copy of your information. Depending on applicable law, you may also request restriction, object to processing based on legitimate interests, withdraw consent, seek information about recipients, limit certain sensitive-data uses or appeal a decision. We will not unlawfully discriminate against you for exercising a right.

We aim to answer within 30 days and will comply with the applicable statutory deadline, including shorter periods where required. Where a lawful extension is necessary, we explain the reason and deadline within the original response period. We do not charge for ordinary requests; any permitted exception will be explained before a fee is imposed.

Use the account email where practical. We may verify control of the account or ask for limited information proportionate to the risk. We do not require unnecessary government identification or ask you to open an account to exercise a right. An authorized agent may act for you with appropriate proof of authority; we may separately verify identity where law permits.

If we deny or limit a request, we explain the lawful reason and how to appeal by replying to the decision or emailing support@tinytorque.com. Review is available without giving up a complaint to a regulator or a legal remedy. We protect other people’s rights when providing copies, for example by removing unrelated personal information.

12. Regional information and complaints

EEA and UK residents may have rights under the GDPR or UK GDPR and may complain to the supervisory authority in the place of habitual residence, work or the alleged infringement. In the UK, this is the Information Commissioner’s Office. Switzerland and other jurisdictions have their own authorities and rights. You do not have to complete our complaint process before approaching a competent authority.

For residents covered by US state privacy laws, the information categories, purposes, sources, recipients and retention criteria are described above. My Garage does not sell personal information, share it for cross-context behavioral advertising or process it for targeted advertising. We do not use sensitive information to infer characteristics about you. Applicable access, correction, deletion, portability, opt-out, authorized-agent and appeal rights remain available; legal applicability can depend on the relevant statute’s thresholds.

Canadian users may request access or correction and withdraw consent where applicable, subject to lawful limits; withdrawal may affect a feature that genuinely requires the information. Processing by foreign providers can be subject to lawful access in their jurisdictions. Australian and Brazilian users, and users elsewhere, retain the rights and complaint routes applicable to them. Contact us for the relevant process; we do not make a universal claim that a particular statute applies to every user.

13. Children and age eligibility

My Garage accounts are intended for adults aged 18 or older who can enter the agreement where they live. We do not offer a parental-consent route for child accounts in this version. Do not create an account for a child to operate.

If you believe a child has provided personal information, contact support@tinytorque.com. We will investigate, restrict the account where appropriate and delete information that we are not lawfully permitted to keep. An age restriction alone is not a substitute for appropriate safeguards; the service’s actual audience and risks must be assessed before public release.

14. Changes and contact

We will keep this notice accessible and identify its version and effective date. For material changes, we will provide a prominent notice and, where appropriate, direct communication before the change takes effect. We obtain any fresh consent required for a new optional purpose. A policy update alone does not turn on public sharing, price contributions or promotional messages.

For privacy questions, a rights request, an appeal or an accessibility-friendly copy, contact support@tinytorque.com or write to TINY TORQUE, LLC, 21 Chestnut Street, Quincy, MA 02169, United States.