Privacy Policy

1. What we collect

  • Account details: your name, email address, profile photo (from Google if you sign in with it), company or shop name, business type and role.
  • What you put into the app: questions, diagnostic session chats, photos for part or machine identification, fleet machines, work orders, invoices, notes and uploads.
  • Billing details: Stripe customer and subscription identifiers and status. Card details are handled by Stripe, not stored by us.
  • Technical data: sign-in events, IP address (used for rate limiting and abuse prevention), device and browser information, and error logs.

2. How we use it

  • To run the service: sign you in, answer questions, run diagnostics, identify parts, and keep your fleet and work-order records.
  • To bill you through Stripe and manage trials and promo codes.
  • To keep the service secure: verify email addresses, block disposable-email sign-ups, rate-limit requests and investigate abuse.
  • To improve answers, for example from feedback you give on a diagnosis. We do not sell your personal data.

3. AI processing

Your questions, chats and photos are sent to AI models hosted on Google Cloud (Vertex AI / Gemini) to generate answers. Answers are grounded in manufacturer documents and technician-contributed material held in our knowledge base.

4. Where your data is stored

  • The app runs on Google Cloud and Firebase (Cloud Run, Firebase Authentication, Firebase Hosting, Cloud Storage and Firestore). Account, fleet and work-order records are kept in a managed PostgreSQL database hosted by Supabase. [Data region to be confirmed.]
  • Sign-in is handled by Firebase Authentication, with Google acting as the identity provider when you choose it.
  • Payments are processed by Stripe. Invoice emails, when enabled, are sent through our email provider.

5. Cookies and sessions

  • We use a session cookie and a session token stored in your browser's local storage to keep you signed in. They are required for the app to work.
  • Firebase Authentication and Stripe Checkout set their own cookies and storage when you use them.
  • We don't use advertising cookies.

6. Sharing

  • With service providers that run the app for us (Google Cloud / Firebase, Supabase, Stripe, and our email provider), only as needed to provide the service.
  • With other members of your company account, for shared records such as the fleet and work orders.
  • When the law requires it, or to protect people's safety or our rights.

7. Keeping and deleting data

We keep your data while your account is open. You can delete your account at any time in the app (Technical Profile → Delete account): your profile, sign-in and personal history are deleted right away, and if you're the only person on your company account, the company account, its subscription and its machines, sessions, work orders and invoices are deleted too. Knowledge-base contributions stay without your name, and contributor earnings, payout and tax records are kept as the law requires; backups roll over within a limited time. You can also ask for a copy of your data or a correction by contacting support@topsocialbrands.com.

8. Contact

Privacy questions or requests: support@topsocialbrands.com.