Privacy Policy

This Privacy Policy applies to Vehtraq's websites, dashboard, account features, billing flows, exports, and related services. It should be read together with the Terms of Service.

Account information. When you create or use an account, we collect information such as your email address, display name, authentication identifiers, account role, preferred unit system, default currency, and account settings. Password authentication is handled by Supabase Auth; Vehtraq does not store your plaintext password in its application database.

Vehicle and log information. Vehtraq stores the records you enter, including vehicle make, model, year, plate number, vehicle type, powertrain type, odometer readings, fuel quantities, fuel types, fuel costs, station names, expense providers, expense categories, expense line items, currencies, notes, reminders, due dates, due odometer values, completion status, and generated export data.

Billing information. Paid subscriptions are processed through Stripe. Vehtraq stores Stripe customer identifiers, subscription identifiers, plan status, price identifiers, billing period dates, cancellation status, and invoice references. Stripe processes payment method details; Vehtraq does not store complete card numbers.

Feedback and support information. If you send feedback, we collect the feedback type, message, your account identifier, email address, display name, timestamps, and related request metadata needed to prevent abuse and respond to the message.

Technical information. We and our service providers may process session cookies, authentication cookies, theme or sidebar preference cookies, IP address, browser and device information, request logs, error logs, and security events needed to operate and protect the service.

Product analytics. Vehtraq uses PostHog to understand usage patterns, such as page views, sign-in and sign-up completion, billing flow activity, vehicle and log creation, reminders, and export generation. Analytics events use account identifiers and broad categories such as plan, format, log type, vehicle type, fuel type, reminder type, currency, and item counts. Vehtraq does not send emails, display names, plate numbers, make or model, notes, providers, station names, receipt filenames, exact odometer values, exact costs, payment method details, or export contents to PostHog.

• Provide, secure, maintain, and improve Vehtraq.
• Authenticate users and keep sessions active across requests.
• Store and display vehicle records, charts, reminders, billing status, and exports.
• Enforce plan limits, process upgrades and cancellations, and manage invoices through Stripe.
• Respond to feedback, troubleshoot issues, prevent fraud, and detect misuse.
• Measure feature usage and improve product reliability and usability.
• Comply with legal, accounting, tax, security, and contractual obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information with service providers that help operate Vehtraq, including Supabase for authentication, database, and session handling; Stripe for checkout, billing portal, subscriptions, and invoices; PostHog for limited product analytics; and hosting or infrastructure providers used to serve the application. These providers process information on our behalf or under their own terms where they provide payment or infrastructure services.

We may also disclose information if required by law, to protect the rights and safety of Vehtraq or others, to investigate misuse, or as part of a merger, acquisition, financing, or sale of business assets.

Vehtraq uses cookies and similar browser storage for authentication, session refresh, security, theme preferences, and interface preferences. PostHog may use cookies or browser storage for limited product analytics. These technologies are needed to keep the dashboard working correctly and to understand feature usage. Vehtraq does not currently use advertising cookies or PostHog session replay.

Browser settings may let you block or delete cookies, but doing so may prevent sign-in, billing, dashboard, or account features from working.

We keep account, vehicle, log, reminder, feedback, and subscription information for as long as needed to provide the service, maintain accurate records, resolve disputes, enforce agreements, protect security, or comply with legal obligations.

Some records may be soft-deleted before permanent deletion, and copies may remain for a limited time in backups, audit logs, exports, billing records, or provider systems. Stripe may retain payment and invoice information according to its legal and compliance obligations.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access, per-user database access rules where applicable, server-side service-role operations, and payment processing through Stripe. However, no online service can guarantee absolute security.

You can update certain account preferences in the dashboard, export eligible vehicle records where your plan includes exports, and cancel paid subscriptions through the billing portal.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about how your personal information is used and shared. We will respond to verified requests as required by applicable law.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. Vehtraq does not sell personal information or share it for cross-context behavioral advertising.

If you are in the European Economic Area, United Kingdom, or a similar jurisdiction, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations, and consent where required.

Vehtraq and its service providers may process information in countries other than where you live. Those countries may have data protection laws that differ from your local laws. When required, we use appropriate safeguards for cross-border processing.

Vehtraq is not directed to children under 13, and users must be old enough to create an account and accept the Terms of Service under applicable law. If you believe a child has provided personal information to Vehtraq, contact us so the account can be reviewed.

We may update this Privacy Policy as Vehtraq, legal requirements, or service providers change. If changes are material, we will take reasonable steps to notify users, such as posting an updated policy or providing notice in the service.

For privacy requests or questions, use the feedback or support channel inside your Vehtraq account. If you cannot access your account, use the contact method provided where you received access to Vehtraq.