Your shop's data stays yours.

This policy covers the VehicleDesk marketing website and the authenticated VehicleDesk workspace. VehicleDesk is the operating platform for independent auto repair shops. The workflows, integrations, and support each shop runs are set in that shop's agreement.

This page describes current production behavior.

The workspace processes the information the shop's workflows need, including:

• Shop and staffBusiness profiles, settings, staff accounts, roles, authentication state, sessions, security notices, and access history.
• Customers and communicationNames, contact details, communication preferences, consent, suppression, and do-not-contact status.
• Vehicles and serviceVehicle identifiers, mileage, service context, repair orders, estimates, invoices, parts, appointments, reminders, and operational notes.
• Operations and securityRecorded payments, weekly-close records, portal activity, worker status, synchronization evidence, data-quality findings, audit records, and diagnostic metadata.

Shopmonkey stays the system of record for the repair and financial records VehicleDesk imports. VehicleDesk stores the workflow, audit, consent, suppression, and operational records its own features create.

• Run the shop's workflows: daily operations, customer and vehicle context, parts and weekly close, appointments, reports, reminders, tasks, compliance visibility, and customer portal views.
• Import and synchronize records from Shopmonkey and show connection, freshness, mapping, conflict, and data-quality evidence.
• Authenticate users and enforce role, capability, tenant, origin, CSRF, rate-limit, consent, and suppression controls.
• Operate audit, security, backup, troubleshooting, support, and incident-response processes.
• Prepare drafts and recommendations in guarded workflows. Staff approve every message before it sends, and staff make every change to consent or to Shopmonkey.

VehicleDesk stores communication-consent and suppression evidence: contact-point status, authorized recurring-SMS categories, disclosure references, consent and revocation timestamps, and source-document references.

The customer portal asks the customer to choose categories and agree before recurring SMS enrollment, and it provides a stop action. Staff record a customer's reminder request without changing the customer's SMS consent.

VehicleDesk shares information only to run a feature the shop uses, follow an authorized shop instruction, protect the service, or meet a legal obligation.

• Production infrastructure providers process application traffic, stored records, operational logs, and security metadata needed to provide the service.
• The Shopmonkey connection processes customer, vehicle, invoice, service, and payment information for authorized import and synchronization.
• Messaging, Google, and AI providers receive information only for the features the shop has enabled.

The public website uses no behavioral advertising network. VehicleDesk does not sell personal information.

Records follow the lifecycle of the workflow that created them, the shop's operations, Shopmonkey's behavior for source records, and provider configuration.

• Specific records are revoked, archived, or deleted through the product workflows that own them.
• When a shop cancels, its data exports with it. Shopmonkey keeps every source record throughout.
• Suppression and opt-out evidence is retained so a customer is never contacted against a recorded preference.

Send privacy questions to owner@vehicledesk.io. Leave out passwords, credentials, recovery codes, and customer exports. We verify identity and authority before we discuss or change information.

VehicleDesk is a business application for repair shops and their staff. It is not directed to children.

This policy is updated when hosting, providers, retention, or privacy practices change, and the date at the top of the page moves with it.