Privacy Policy

Lugnutly Systems (“Lugnutly”, “we”, “us”) provides a multi-tenant workshop management platform (“Service”) used by automotive workshops (“Workshops”, “you”) to manage customers, vehicles, jobs, invoices, and related records. This policy explains what information we collect, how we use it, and the choices available to you.

1. Information We Collect

We collect the following categories of information:

• Account and workshop information — name, email, phone, role, and password hash for each staff member; workshop name, address, logo, tax settings, and billing details.
• Customer and vehicle records — names, contact details, and addresses your Workshop enters for its own customers, plus vehicle details (registration, VIN, make/model, odometer readings).
• Job and financial records — bookings, job line items, inspection results, photographs, signatures, invoices, payments, and refunds entered or generated through the Service.
• Uploaded media — logos, vehicle and inspection photographs, and signatures, stored in our cloud storage provider (Amazon S3).
• Payment information — subscription payments are processed by PayPal; we do not store full payment card or bank account numbers ourselves.
• Usage and technical data — log data, IP address, and device/browser information collected automatically when you use the Service, for security and reliability purposes.

2. How We Use Information

• To provide, operate, and maintain the Service for your Workshop.
• To send transactional emails — invoices, receipts, payment reminders, job approval requests, inspection reports, and account notifications — on your Workshop’s behalf to its customers.
• To process subscription billing and communicate about your account.
• To monitor, secure, and improve the Service, and to diagnose technical issues.
• To comply with legal obligations and enforce our Terms of Service.

3. Data Belonging to Your Customers

When your Workshop enters information about its own customers and their vehicles, your Workshop acts as the data controller for that information and we act as a data processor on your Workshop’s behalf. Each Workshop’s data is logically separated from every other Workshop’s data and is not accessible to other tenants.

4. How We Share Information

We do not sell personal information. We share information only with:

• Service providers who process data on our behalf (cloud hosting, storage, email delivery, and payment processing).
• Other parties when required by law, to protect our rights, or to protect the safety of our users.
• A successor entity in the event of a merger, acquisition, or sale of assets, with notice to affected Workshops.

5. Data Retention

We retain Workshop and customer data for as long as your Workshop’s account is active, and for a reasonable period afterward to meet legal, accounting, and backup obligations. Deleted records (for example, a vehicle or invoice moved to trash) are retained for a limited recovery window before permanent deletion.

6. Data Security

We use industry-standard safeguards — including encrypted connections, access controls, and hashed passwords — to protect information against unauthorized access, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or request deletion of your personal information. Workshop staff can manage most of this directly within the Service; customers of a Workshop should contact that Workshop directly, as the Workshop controls its own customer records.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be notified within the Service or by email. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

9. Contact Us

Questions about this policy can be sent through the Help / Support page within the Service once signed in.