Privacy

A full privacy policy has not been written yet. Anyone deploying AutoKeeper for real users needs to put their own here.

What the software itself does

• Every record belongs to a household, and the database enforces that with row-level security — not just the application code.
• A public share link is read-only and section-scoped, and never exposes costs, documents or personal data whatever sections are chosen.
• Uploaded photos have their EXIF stripped, which removes the location a phone camera writes into them.
• Deleting a household schedules a real deletion of its data after a grace period, rather than hiding it.
• A staff member can impersonate an account for support, and the account sees a banner saying so for as long as it lasts.
• Where analytics is enabled it is a self-hosted, cookieless Umami — no advertising or profiling network is involved. It records the shape of a page, never the address: a vehicle page is reported as /vehicles/:vehicleId, a share link as /share/:token, so no identifier, share token or page title reaches it. Browsers sending “Do Not Track” are not counted at all.