Privacy Policy

BayManager ("we," "us," or "our") operates the shop management platform at baymanager.net. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By using BayManager, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account and Business Information

When you register for BayManager, we collect information needed to create and manage your account, including:

• Your name and email address
• Your shop's name, phone number, address, and business details
• Staff member names, job titles, email addresses, and role/permission settings you configure
• Billing information (processed and stored by our payment processor, Stripe — we do not store full payment card details)

1.2 Business Data You Enter

As you use BayManager, you create and store business records within the platform. This includes:

• Work orders, including labor descriptions, parts, pricing, and notes
• Customer names, contact information, vehicle details (VIN, make, model, year), and service history
• Vendor names, contact information, and invoice records
• Inventory items, catalogue entries, parts kits, and pricing data
• Invoice and estimate documents generated within the platform

This data belongs to you. We process it only to provide the Service to you.

1.3 Automatically Collected Information

When you access BayManager, our systems automatically collect certain technical information:

• IP address, browser type and version, operating system
• Pages visited, time spent, and navigation patterns within the app
• Authentication events (login, logout, password resets)
• Error logs and performance data used to maintain and improve the Service

1.4 Cookies and Local Storage

BayManager uses browser cookies and local storage to maintain your authenticated session and remember certain preferences (such as your active screen and UI settings). We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings, though doing so may prevent you from logging in.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the BayManager platform
• Authenticate your identity and manage your account and staff access
• Process payments and send subscription billing notices
• Send transactional emails — including invoices, estimates, and staff invitation emails — on your behalf
• Respond to your support requests and communicate with you about your account
• Monitor Service health, debug issues, and improve performance and reliability
• Comply with applicable legal obligations

We do not sell, rent, or share your personal information or business data with third parties for their marketing purposes.

3. Data Storage and Security

3.1 Supabase

All BayManager data — including your shop records, work orders, customer information, and staff accounts — is stored in Supabase, a PostgreSQL database platform. Supabase is hosted on AWS infrastructure with data encrypted at rest and in transit. Row-Level Security (RLS) policies ensure that each shop's data is strictly isolated from other tenants on the platform.

3.2 Authentication

User authentication is handled by Supabase Auth, which manages passwords using industry-standard bcrypt hashing. We never store plaintext passwords. All traffic between your browser and our servers is encrypted using TLS.

3.3 Email Delivery

Transactional emails (invoices, estimates, staff invitations) are delivered via Resend, a third-party email service. Email content is transmitted to Resend over encrypted connections. Resend may log delivery metadata (timestamps, delivery status) as needed to ensure reliable delivery.

3.4 Payments

Payment processing is handled by Stripe. BayManager does not store your payment card numbers. Stripe's handling of payment data is governed by their own Privacy Policy and PCI DSS compliance program.

3.5 Security Practices

We implement technical and organizational measures to protect your data, including access controls, encrypted connections, and multi-tenant data isolation. However, no method of transmission or storage is 100% secure. If you suspect unauthorized access to your account, contact us immediately at support@baymanager.net.

4. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for up to 90 days to allow you to export records before permanent deletion. You may request earlier deletion by contacting us. Anonymized or aggregated data may be retained indefinitely for product analytics purposes.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information in your account
• Deletion: Request that we delete your account and associated data
• Portability: Export your business data (work orders, customers, etc.) from within the app
• Objection: Object to certain processing activities

To exercise any of these rights, email us at support@baymanager.net. We will respond within 30 days.

6. Children's Privacy

BayManager is a business tool intended for adults operating commercial repair shops. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected data from a minor, we will delete it promptly.

7. International Users

BayManager is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using BayManager, you consent to this transfer. We apply appropriate safeguards to protect your data in accordance with this Privacy Policy.

8. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or through a notice in the app. Continued use of BayManager after the updated policy takes effect constitutes your acceptance of the changes.