Privacy policy

Effective November 1, 2026

This policy explains what information Greaseflo ("we", "us") handles through Greaseflo and this website, why, and the choices you have.

Two kinds of information

• About our customers — the shops that sign up and their staff: names, email addresses, phone numbers, sign-in records, and billing details. We decide how this is used, as described below.
• Held for shops — the shop's own records of its customers: names, contact details, vehicles, jobs, documents, photos and payments. The shop decides what goes in and how it is used; we process it only on the shop's behalf to provide the service. If you are a shop's customer, contact the shop about your information.

What we collect, and why

• Signup and account details (name, email, shop name and address, password) to create and run your shop. Passwords are stored only in hashed form.
• Billing details to charge for your plan. Card details are collected and held by our payment processor, Stripe; we keep only the card type and last four digits.
• Sign-in records (time, IP address, browser) to secure accounts and show each shop its login history.
• Messages you send us through the contact form, to answer them.
• Technical logs kept briefly to run, secure and fix the service.

We do not sell personal information, and we do not use shops' customer records for our own marketing.

Text messages

Shops can text their own customers through Greaseflo — for example when a vehicle is ready or a payment is due — using the shop's own number. Texts are sent only to customers the shop has recorded consent for. Message and data rates may apply. Reply STOP to any text to stop receiving them from that shop, and START to resume.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and text consent are never sold or shared, except with the providers that deliver the messages.

Who else handles information

• Stripe — billing for Greaseflo plans.
• Twilio — delivering a shop's texts, through the shop's own Twilio account.
• The shop's payment processor (such as Elavon, Stripe or PayPal) — when the shop's customers pay online.
• Our hosting provider — the servers the service runs on.
• Bunny Fonts — serves the typeface on this website; it receives your IP address with each request, and states that it does not log it.

We may also disclose information when the law requires it, or to protect the service and its users.

Cookies

We use only the cookies needed to keep you signed in and protect forms. There are no advertising or tracking cookies.

Security and retention

Each shop's records are kept in a database of their own. Staff accounts require two-factor sign-in and connections are encrypted. We keep account information while the shop is active; after a shop cancels we keep its data for 30 days so it can be exported, then delete it, except where we must keep records (such as invoices to the shop) by law. Sign-in records are kept for one year.

Your choices

Shop staff can update their details inside their shop. To see, correct or delete information we hold about you, or for any question about this policy, contact us. Depending on where you live you may have further rights, such as under California law; we will honor them.

Changes

If we change this policy in a way that matters, we will email shop owners before the change applies and update the date above.