Your reports are private.

Garajo is operated by Thomas Smids in the Netherlands. Use our contact form for privacy questions or to request access, correction, export or deletion of your information.

What we store and why

We store your account email and authentication information to secure your account; business and inspector details to create reports; vehicle details, notes and compressed photos to deliver the service; and support messages so we can respond. These uses are necessary to provide the service you request. We use limited operational logs to investigate failures and abuse in our legitimate interest of keeping the service reliable and secure.

You decide what to include in a vehicle report. Avoid unnecessary names, faces, documents, addresses or other personal information. You are responsible for having an appropriate reason and any necessary permission to record customer information. We process report content on your instructions to store it and generate your reports.

Storage and service providers

Supabase provides authentication, a database in Frankfurt, Germany, and private photo storage. Netlify hosts the application and delivers it over the internet. Resend delivers account emails and support notifications. Providers may process operational information outside the European Economic Area under their applicable data-protection arrangements. Photos are accessible through expiring links issued after account checks. Do not forward those links; share your exported PDF with its intended recipient.

When paid subscriptions become available, the checkout will identify the payment provider and Merchant of Record before you pay. Payment card details are handled by that provider and are never stored by Garajo.

Device storage and analytics

The app uses browser storage for your login session, your current draft and business defaults. This is functional storage needed for the requested features. We do not use advertising cookies, tracking pixels or session recordings. We count operational events such as report finalizations and support requests without attaching report content or your account identifier to the event record. Hosting and security services may retain request logs, including IP addresses.

Retention and deletion

Your reports remain available while your account exists, including when you stop a subscription. This is not a permanent archival guarantee. Keep your own PDF and original-photo backups. Request deletion through support; after verifying your identity we aim to complete it within 30 days. We remove live report files and account data, except records we must retain for legal, billing, security or dispute purposes. Provider backup copies may take longer to expire and are not used for normal service.

Local drafts are stored on your device and must also be cleared there. Deleting an account cannot recall PDFs you or your customers have already downloaded or shared.

Your choices

You may request a copy of your information, correct profile details, object to processing based on legitimate interests, or ask for restriction or deletion where applicable. You can complain to the Dutch Autoriteit Persoonsgegevens. We do not sell personal data, train AI models on your reports, or make automated decisions about your customers. Garajo is intended for adult business users.

Changes

We will update this page when our practices change. Material changes affecting existing accounts will be communicated through the app or email.