Service VIN — Legal

Privacy Policy

This Privacy Policy explains what information Service VIN collects, how we use and protect it, and the choices you have. It includes a dedicated section on the Google user data we access when you connect Google to Service VIN.

Last updated: July 17, 2026

1. Who we are

Service VIN (“Service VIN,” “we,” “us,” or “our”) is an all-in-one operations platform for auto detailing, paint protection film (PPF), vinyl wrap, window tint, and ceramic coating studios. We provide quoting, online bookings, scheduling, invoicing, customer records, and optional integrations with third-party services. Service VIN is operated from Calgary, Alberta, Canada.

This policy applies to our website and web application (together, the “Service”), reachable at servicevin.com. If you have any questions, contact us at info@servicevin.com.

2. Information we collect

We collect the following categories of information:

  • Account information. When you create an account or are invited to a shop, we collect your name, email address, and — if you sign in with Google — your Google profile name and picture. We store an authentication record but never your Google password.
  • Business & customer data you enter. Information you add to run your shop: customers, vehicles, quotes, bookings, invoices, inventory, messages, and notes. You are responsible for the data you enter about your own customers.
  • Google user data. If you choose to connect a Google account, we access only the specific data described in Section 3 below.
  • Usage & device data. Basic technical data such as IP address, browser type, and pages viewed, used to keep the Service secure and reliable.
  • Payments. If you subscribe or accept payments, billing is handled by our payment processor (Stripe). We do not store full card numbers on our servers.

3. How we access and use Google user data

Connecting Google to Service VIN is always optionaland initiated by you. We request the narrowest set of scopes needed for each feature, and we only access Google data after you grant consent on Google’s own permission screen. You can disconnect at any time (see Section 8). Below is exactly what we request and why.

a. Sign in with Google

Scopes: openid email (and basic profile)

What we access: your email address, and your basic Google profile (name and profile picture).

Why: to authenticate you and create or sign you in to your Service VIN account, and to label your account with your name and email. We do not use these details for advertising.

b. Google Calendar

Scope: https://www.googleapis.com/auth/calendar.events

What we access: the events on the Google Calendar you choose to connect.

Why:to keep your shop’s schedule and Google Calendar in sync. When a job is booked, moved, or cancelled in Service VIN, we create, update, or delete the matching calendar event (with the vehicle, service, and bay); and we read events so the calendar and the booking board stay consistent. We access calendar data only to power these scheduling features that are visible in the app.

c. Google Business Profile

Scope: https://www.googleapis.com/auth/business.manage

What we access: your Google Business Profile location(s) and their reviews.

Why: to help you collect and manage reviews. When a job is marked complete, Service VIN can time a review request to your Google Business Profile, and it pulls new reviews back into the app so you can read and reply to them without leaving Service VIN. We access Business Profile data only to power these review-management features that are visible in the app.

What we do not do: we do not use Google user data for advertising; we do not sell it; and we do not use it to train generalized artificial-intelligence or machine-learning models.

4. Google API Services User Data Policy — Limited Use

Service VIN’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In keeping with those requirements, we specifically confirm that we:

  • limit our use of Google user data to providing or improving the user-facing features described above that are prominent in the Service VIN interface;
  • do not transfer or sell Google user data to third parties such as advertising platforms, data brokers, or information resellers;
  • do not use or transfer Google user data for serving ads, including retargeting, personalized, or interest-based advertising; and
  • do not allow humans to read Google user data unless we first obtain your explicit consent to read specific data, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

5. How we store and protect your data

  • Encryption in transit and at rest. All traffic to the Service is served over HTTPS/TLS. Data is stored in managed, access-controlled databases.
  • OAuth tokens. The access and refresh tokens Google issues when you connect an account are encrypted before they are stored, and are used only to make the API calls needed for the features you enabled.
  • Access controls.Access to production data is limited to authorized personnel and is governed by per-shop isolation, so one shop cannot see another shop’s data.

6. How we share information

We do not sell your personal information or Google user data. We share information only in these limited cases:

  • Service providers (sub-processors) who process data on our behalf under contract and only as needed to run the Service — for example: Supabase (application database and authentication), Stripe (payments), Twilio (calls and messaging), and Resend (email). These providers are not permitted to use your data for their own purposes.
  • Within your shop.Data you enter is visible to the members of your own shop’s workspace according to their roles.
  • Legal and safety. When required to comply with applicable law, enforce our terms, or protect the rights, safety, and security of our users and the public.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect a Google integration, we stop accessing that Google account and delete or render unusable the stored OAuth tokens for it. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Your choices and controls

  • Disconnect Google. In Service VIN, go to Settings → Integrations and disconnect Google Calendar or Google Business Profile at any time. This revokes our access and removes the stored tokens for that connection.
  • Revoke at Google.You can also review and revoke Service VIN’s access directly from your Google Account at myaccount.google.com/permissions.
  • Access, correct, or delete. You may request access to, correction of, or deletion of your personal information by emailing info@servicevin.com. Depending on where you live, you may have additional rights under laws such as PIPEDA (Canada) or the GDPR (EU/UK).

9. Cookies

We use cookies and similar technologies that are necessary to keep you signed in, remember preferences (such as light/dark theme), and keep the Service secure. We do not use advertising or cross-site tracking cookies.

10. Children's privacy

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. International users

We operate from Canada and may process and store information in Canada, the United States, and other countries where our service providers operate. By using the Service you understand your information may be transferred to and processed in these countries, with safeguards appropriate to the transfer.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact us at info@servicevin.com. You can also review our Terms of Service.