Privacy Policy
At Garagram, we take the trust of car enthusiasts and creators seriously. This policy explains what information we collect, how it is used, and how your privacy is protected across our vehicle management platform.
Google API Services User Data Policy Compliance
Garagram strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the essential profile and email information needed to provide account authentication. We never sell, lease, or share Google user data with third parties or external advertisers.
Information We Collect
We collect information to provide, personalize, and secure your digital garage and vehicle tracking experience.
When you sign in using Google, we request access strictly to:
- Full Name: To personalize your account and garage title.
- Email Address: For authentication and vital service notices.
- Profile Picture URL: Used as your default user avatar.
Information you voluntarily submit about your vehicle collection:
- Vehicle specifications (make, model, year, VIN, trim, engine specs).
- Modification timelines, dyno specs, and maintenance logs.
- Photos and media uploaded to your car showcase.
- Optional OBD2 telemetry data if connected.
Purpose and Use of Collected Data
Your data is utilized strictly for functional service provision and account integrity:
- Authentication & Security: To identify you as the verified owner of your garage and prevent unauthorized modifications to your vehicles.
- Garage & Showcase Management: To organize vehicle build timelines, power specs, parts logs, and photo galleries.
- Account Communication: To deliver critical security alerts, password resets, and updates regarding your active builds. We do not send unsolicited marketing spam.
- Service Optimization: To monitor system reliability, performance metrics, and fix unexpected technical errors.
Data Storage, Infrastructure, & Security
We implement industry-standard enterprise security controls across our application architecture:
databaseSupabase Database Security
User identities and build records are stored in PostgreSQL managed by Supabase, protected by Row Level Security (RLS) policies and encrypted at rest with AES-256 and in transit via TLS 1.3.
cloud_doneCloudflare R2 Storage
Vehicle photos and media are compressed to WebP and securely stored in Cloudflare R2 object storage with multi-region redundancy, strict access control, and SSL encryption.
No Data Selling, Renting, or Sharing
In particular:
- We do not use Google user data to serve targeted advertising.
- We do not transfer Google user data to external advertising or surveillance networks.
- We do not use or transfer user data to train generalized machine learning or artificial intelligence models.
User Rights, Data Retention, & Deletion
You own your vehicle data. You maintain the right at any time to inspect, modify, or permanently purge all personal information held in our systems.
delete_foreverHow to Request Permanent Account & Data Deletion
To delete your Garagram account, vehicles, telemetry, and all uploaded media from our systems permanently, simply email our compliance team:
Upon receiving your verified request, we permanently purge all garage profiles, car specifications, modifications, telemetry records, and corresponding media files from Cloudflare R2 and Supabase within 30 days.
Revoking Google OAuth Access:
You can revoke Garagram's access to your Google account at any time via your Google Account Third-Party App Permissions portal.
Cookies & Essential Session Storage
Garagram uses secure, HTTP-only authentication cookies strictly necessary to maintain your login session across page refreshes and protect against Cross-Site Request Forgery (CSRF). We do not use persistent advertising or cross-site tracking cookies.
Contacting Garagram
For questions regarding this Privacy Policy, your personal data, or Google OAuth compliance, please reach out to: