Privacy notice
Last updated 2026-11-07
Operator details below are incomplete.
GarageGrowth AI is operated by [operator name], [registered address] (“we”). It is software used by automotive workshops (“workshops”) to prepare and publish marketing content, run advertising in their own accounts and track customer enquiries.
What we process
- Account details of workshop staff (name, email, role).
- Media and text the workshop uploads or approves.
- Enquiries from the workshop's customers: name, phone number, email, vehicle and service interest, and — when the workshop connects WhatsApp or Instagram — the messages customers send to the workshop.
- Data from platforms the workshop connects (Facebook Pages, Instagram professional accounts, WhatsApp Business numbers, Meta ad accounts, YouTube channels): account names and IDs, post and campaign performance, lead-form submissions and messages. Access tokens are stored encrypted.
Why
Only to provide the service the workshop uses: publishing approved content, showing performance, recording and categorising enquiries, and reports. For customer enquiry data, the workshop is the data fiduciary and decides how it is used; we process it on the workshop's behalf. We do not use it for our own marketing and we do not sell personal data.
Service providers
- Supabase (database, authentication, file storage) and Vercel and Railway (hosting).
- Anthropic (AI). It receives brand facts and aggregated metrics to draft content and reports, and the text of customer messages to categorise enquiries. Phone numbers and email addresses are not sent.
- Meta and Google, only as directed by the workshop when it connects its accounts.
Meta and Google data
Data received from Meta (Facebook, Instagram, WhatsApp) and Google (YouTube) is used only to provide features the workshop has turned on, is not sold or transferred for advertising, and is deleted when the workshop disconnects the account or deletes its workspace. GarageGrowth AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and your rights
Each workshop sets a retention period for closed enquiries. Workshops can export or delete their data in Settings; a deleted workspace is permanently erased after 7 days. Customers can ask the workshop, or our grievance officer, to access, correct or erase their data. See data deletion.
Security
Data is encrypted in transit, access tokens are encrypted at rest, and each workshop's data is isolated from every other workshop's at the database level.
Contact and grievance officer
Support: [support email]
Grievance officer: [grievance officer name], [grievance officer email], [registered address]