Skip to main content

Privacy

How the public VehicleDesk site handles information.

This page describes the public marketing site only. It is an operational pre-launch summary, not the counsel-approved privacy policy required for broader production use.

Current public-site behavior

Hosting and security providers may process normal request metadata such as IP address, timestamp, user agent, and requested path for delivery, reliability, and abuse prevention.

The current marketing code does not intentionally load advertising trackers or a behavioral-ad network. It emits bounded in-browser interaction events and allowlisted attribution values, but includes no lead-submission or third-party analytics transport.

When a monitored workflow-review destination is configured, the form prepares a local email draft. VehicleDesk receives nothing until the visitor chooses to send that email; when no destination is configured, the page does not ask for contact details.

Do not put customer records, credentials, provider secrets, financial data, or production exports into a public URL, workflow-review draft, or general contact message.

Authenticated workspace boundary

The authenticated product can process shop, staff, customer, vehicle, service, estimate, repair-order, invoice, payment, appointment, communication, and operational evidence needed for enabled workflows. The approved agreement and implementation scope must identify applicable data and purposes.

Shop roles limit what a user may review or manage. Customer portal links are scoped, expiring, revocable, and read-only; internal notes, margins, payment handling, communications, reviews, do-not-contact state, and other customers are withheld from the portal.

External support diagnostics require a shop-approved, time-bounded, scoped grant and a case-specific reason. The console is read-only and records access in the target shop's audit history.

Retention, export, deletion, subprocessors, security responsibilities, and offboarding remain governed by the reviewed shop agreement and operating procedures. This summary remains excluded from search indexing until a counsel-reviewed public privacy policy and monitored request contact are approved.