Effective date: September 16, 2026
Alberto Montes, doing business as PitStop ("we," "us," or "our") provides PitStop, a software-as-a-service application for independent and mobile mechanics to manage clients, vehicles, inventory, work orders, and invoices (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to you.
This Policy applies to two groups of people: (1) mechanics and shop owners who register for and use the Service directly ("you," "Account Holders"), and (2) the individuals whose information an Account Holder enters into the Service in the course of running their business — their customers and those customers' vehicles ("End-Client Data"). If you are an End-Client whose information appears in an Account Holder's account, please contact that mechanic or shop directly regarding their handling of your information; we act as the Account Holder's service provider for that data, as described below.
Account information. When you register, we collect your email address, password (stored only as a salted cryptographic hash — we never store or can recover your actual password), and optionally your name.
Shop and business information. Shop name, logo, business phone number and address, and default tax rate, if you choose to provide them in Settings.
End-Client Data you enter. As part of using the Service, you may enter: your clients' names, phone numbers, email addresses, and mailing addresses; their vehicles' make, model, year, VIN, license plate, odometer readings, and engine hours; and the work orders, service notes, parts used, and invoices associated with that work. You are responsible for having the appropriate legal basis (e.g., your own customer relationship and, where required, their consent) to provide us this information for processing on your behalf.
Inventory and pricing data. Parts, part numbers, stock levels, and costs you enter to track your inventory.
Technical and usage information. IP address, browser type, device information, and log data generated automatically as you use the Service (for example, to detect abuse, debug errors, and secure your account).
We do not collect payment card information. Subscription payments are processed entirely by Lemon Squeezy, Inc., acting as Merchant of Record. Lemon Squeezy collects and processes your billing details (such as card number or other payment method) directly — we never receive, transmit, or store full payment card numbers or bank account credentials on our systems. Lemon Squeezy's handling of that information is governed by Lemon Squeezy's own Privacy Policy, which we encourage you to review. Lemon Squeezy is also responsible, as Merchant of Record, for calculating, collecting, and remitting applicable U.S. sales tax on subscription purchases.
We do not sell your personal information or your End-Clients' personal information, and we do not use End-Client Data for our own advertising or marketing purposes.
We maintain technical and organizational measures designed to protect the information in our systems, including:
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for choosing a strong, unique password and for keeping your login credentials confidential.
We do not sell personal information. We may share information with:
We retain your account information and the data you've entered into the Service for as long as your account remains active. If you close your account, we will delete or anonymize your data within a commercially reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Automated database backups are retained on a rolling basis (currently up to 7 days) and are then permanently deleted.
Regardless of where you live, you may:
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA); if you are a resident of another state with its own comprehensive privacy law, similar rights may apply. Contact us and we will address your request under the law applicable to you. We do not discriminate against users for exercising these rights.
If you are an End-Client whose information was entered by an Account Holder (a mechanic or shop), the most direct way to exercise these rights is to contact that business, since they control what information is entered. We will also honor a direct, verifiable request from an End-Client to the extent we are able to do so consistent with our obligations to the Account Holder.
In the event of a security breach that compromises the confidentiality, integrity, or availability of personal information we hold, we will investigate promptly and notify affected Account Holders without unreasonable delay, and in accordance with the timelines and content requirements of the data breach notification law of the applicable U.S. state(s) where affected individuals reside. Where an End-Client's information is affected, we will notify the responsible Account Holder so they can, in turn, notify their own customers as required by law and as appropriate to their business.
The Service is intended for business use by adults operating or working at an automotive repair business. It is not directed to, and we do not knowingly collect personal information from, individuals under 18 years of age.
We may update this Privacy Policy from time to time. If we make material changes, we will notify Account Holders (for example, by email or an in-app notice) before the changes take effect. Continued use of the Service after a change becomes effective constitutes acceptance of the revised Policy.
This Policy is governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles, except where superseded by applicable state or federal privacy law based on where you reside.
Questions about this Privacy Policy or how we handle information can be sent to dav.vazquez1719@gmail.com.