Privacy Policy

1. Introduction

This Privacy Policy explains how MyGarage ("we", "us", or "our") handles personal information when you use our website and vehicle management services (the "Service"). By creating an account or using the Service, you acknowledge this policy.

We are committed to handling your data responsibly. This policy describes what we collect, why we collect it, and the choices available to you.

2. Information we collect

Account information

When you register, we collect your name, email address, password (stored in hashed form), and preferences such as distance unit and currency.

Vehicle and garage data

You may provide vehicle details (make, model, year, VIN, license plate, mileage), maintenance records, expenses, reminders, timeline events, and related notes.

Uploaded content

You may upload photos and documents (for example registration, insurance, and receipts). These files are stored on our systems and associated with your account and vehicles.

Marketplace and listings

If you list a vehicle for sale, we process listing details you provide and contact preferences you choose to display to potential buyers (such as email or phone visibility).

Reports and moderation

Signed-in users may report marketplace listings they believe violate our Terms. Reports include your account identifier, the listing reference, the reason you provide, and a timestamp. We use this information to investigate abuse, protect other users, and meet legal obligations. Moderation actions (such as suspending an account or listing) are logged with the administrator identity, affected resource, reason, and time for accountability and GDPR compliance.

Ownership transfers

When you initiate or accept a vehicle transfer, we process recipient email addresses, invitation tokens, and ownership history required to complete the transfer workflow.

Public vehicle profiles

If you enable a public vehicle profile, selected vehicle information may be visible to anyone with the profile link, according to your privacy settings (for example whether your name as the current owner or photos are shared). Previous owners are always anonymous, and documents are not published on public profiles.

Technical and usage data

We automatically collect information needed to operate the Service, such as session identifiers, authentication cookies, request logs, and basic device or browser metadata for security and troubleshooting.

3. How we use your information

We use personal information to:

• Provide, maintain, and improve the Service
• Authenticate you and keep your account secure
• Store and display your garage data, analytics, and exports
• Send service-related emails (for example transfer invitations)
• Facilitate marketplace listings and vehicle transfers you request
• Enforce our Terms and Conditions, review listing reports, and protect against abuse
• Display site-wide service announcements (maintenance, incidents) when necessary
• Comply with legal obligations

We do not sell your personal information.

4. Legal bases (EEA/UK users)

Where applicable data protection law requires a legal basis, we rely on: performance of our contract with you (providing the Service); legitimate interests (security, fraud prevention, product improvement, and handling user reports); your consent where required (for example optional public sharing); and legal obligations (including responding to unlawful content and regulatory requests).

5. How we share information

We may share information in these situations:

• With your direction: public vehicle profiles, marketplace listings, and transfer invitations share data as you configure.
• Service providers: hosting, email delivery, and infrastructure partners that process data on our behalf under appropriate safeguards.
• Legal requirements: when required by law, regulation, or valid legal process.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your information.

6. Cookies and session storage

We use essential cookies and similar technologies for authentication (including Laravel Sanctum session cookies), CSRF protection, and security. These are necessary for the Service to function and are not used for third-party advertising.

7. Data retention

We retain your information while your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize associated personal data and uploaded content, except where we must retain limited information for legal, security, or backup purposes for a reasonable period.

Vehicles with ownership history may be retained in anonymized or aggregated form where required to preserve provenance integrity after transfer.

Listing reports and moderation logs are retained only as long as needed to handle the report, defend legal claims, or comply with law, then deleted or anonymized where possible.

8. Security

We implement technical and organizational measures appropriate to the nature of the data, including encrypted transport (HTTPS), access controls, and hashed passwords. No method of transmission or storage is completely secure; you use the Service at your own risk regarding factors outside our reasonable control.

9. Your rights and choices

Depending on your location, you may have the right to:

• Access, correct, or delete personal information we hold about you
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Request a copy of your data in a portable format
• Lodge a complaint with a supervisory authority

You can update profile settings in the app and delete your account from Settings, which permanently removes your account and associated garage data as described there.

To exercise other privacy rights, contact us at info@my-garage.lu.

10. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data and we will take appropriate steps to delete it.

11. International transfers

Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.

13. Contact

Questions about this Privacy Policy or our data practices may be sent to info@my-garage.lu.

See also our Terms and Conditions.