What this covers
This notice explains the data the Restore Replace review build is designed to handle. Final operational contact details and payment-processor disclosures will be added before live checkout.
Account data
When you sign in through ChatGPT, the app may receive the email address and optional display name forwarded for account access.
Vehicle and project data
The app can store vehicle identity, VIN or chassis details you choose to enter, project notes, budgets, job records, supplier evidence, build history and uploaded photographs.
How it is used
Data is used to provide your garage, photo record, restore-or-replace workflow, parts comparison, budget tracking and build history. AI Fuel balances, reservations, usage receipts and provider-cost audit records are stored to prevent overspend and show your history. It is not used to pretend an order, shipment or supplier relationship exists.
Public-site measurement
The public site asks before storing optional first-party measurement data. If you allow it, Restore Replace records a random browser session identifier, page path, campaign tags, referring site without its query string, scroll or tool-completion events and first/last attribution. It does not put vehicle records, private photos or account content into public analytics. Essential-only mode keeps the public pages and tools available. Google Analytics, Google Ads, Meta Pixel, Conversions API and Clarity are not connected in the current build.
Garage TV viewing data and external players
Public Garage TV cards do not load the YouTube player until the viewer deliberately taps Play. That action loads a privacy-enhanced YouTube embed and sends the normal connection and playback data to YouTube under its own terms. With a signed-in account, Restore Replace can store watchlist choices, viewing position, topic preferences, hidden sources, source reports and project-linked timestamp notes. It does not enable infinite autoplay. These records are included in account export and deletion controls.
Community, Build Threads and messaging
A Garage profile, posts, reactions, follows, saves, message requests and moderation records are stored when those features are used. Direct messaging is opt-in for both members. Private Build Threads, rooms and media are private by default. Public or member sharing requires a separate owner choice; project media is never made public automatically. Reports and moderation actions may be retained as needed to protect members and handle appeals.
Community media and Engineering Passport evidence
Photos and short videos are checked for allowed type and size, kept in private object storage and served through signed-in ownership checks. Public derivatives are not created automatically. Engineering drawings, measurements, documents, inspection plans and certificate copies are private evidence records. Uploading a document does not verify it or mark a certificate issued; that status requires a verified licensed human record.
Swap Meet, stocktake and transaction records
Listings, Wanted posts, saved searches, offers, protected messages, exchange records, reviews, reports, Shed Sweep zones, inventory items, value assumptions and selected evidence photos are account scoped. Public listings use a separate owner-approved metadata-stripped derivative and show only broad location, masked vehicle identity where relevant and non-sensitive seller information. Exact addresses, complete VINs, private maximum budgets, private contact details and private shed zones are not exposed publicly.
Seller walkarounds and QR stock labels
Seller walkarounds use explicit camera and microphone permission and retain only selected evidence frames by default. Multiparty live calling is not claimed where unsupported. Private QR stock labels open an authenticated owner-authorised inventory route; an unauthenticated scan cannot reveal the private record.
Reviews, case studies and public proof
Customer reviews, project stories, counters and press or partner relationships remain hidden unless the underlying record is verified, consent or permission is recorded, moderation is complete and publication is explicitly approved. Private garage records and photographs are never turned into public proof automatically.
Garage Guy Dispatch
An email address is stored only after the person explicitly opts in to the Garage Guy Dispatch. The consent wording, time, source and first/last attribution are retained with the subscription, and every future marketing email must include unsubscribe. Email delivery is not active until an approved sender, provider and authenticated domain are configured. Restore Replace does not buy email lists or add journalists to marketing lists.
Storage
Structured records use the Sites database and uploaded images use Sites object storage. Access controls and server-side ownership checks protect customer records. The app uses per-file limits, client compression where supported, duplicate-content checks and storage accounting; it does not silently delete project media.
Sharing and outside actions
Restore Replace does not send vehicle data to suppliers or process payment. Supplier, email, calling, freight and payment connections require appropriate approval and are not active in the current build.
Photo intelligence
Photo intelligence remains off until the project owner securely configures and approves the external provider. While it is off, no photograph is sent for automated analysis and every manual workflow remains available. When activated, only the photographs and vehicle or listing evidence the signed-in owner selects are sent server-to-server to the OpenAI API. Provider credentials stay on the server, private photos are sent as request data rather than public image URLs, and the request is marked store: false. OpenAI states that API data is not used to train its models by default; standard abuse monitoring may retain API content for up to 30 days unless the account is approved for different data controls. Automated suggestions can be incomplete or wrong and require owner confirmation, correction or dismissal.
AI Garage Assistant voice and camera
The AI Garage Assistant remains off until the project owner configures and approves its external provider. When activated, microphone audio is used for the live conversation and deliberately captured still frames are sent only while camera analysis is enabled. Continuous camera preview stays on the device, raw continuous video is not uploaded or stored by default, and raw microphone audio is not stored by Restore Replace. A concise summary can be saved; the text transcript is saved only when the owner chooses. The user can stop camera or microphone sharing at any time.
Retention and deletion
Signed-in owners can export their structured Restore Replace records and permanently delete their garage data from Settings. Deletion removes vehicle records, jobs, parts, activity, photo-intelligence reviews, Fuel balance and private photo objects. A one-way account fingerprint may be retained solely to prevent repeated Starter Fuel claims after account recreation; it does not contain the email address. Final financial-record retention wording requires legal review before checkout. Avoid uploading documents that are not needed for the restoration workflow.
Profiles and personalisation
Garage Guidance, Marketing Preferences and Commercial/Licence records are separate. Garage Guidance can include a user-chosen Build Style, finish line, time, skills and project limits to order recommendations. Marketing Preferences require a separate choice. Restore Replace does not infer or target pension status, age, disability, hardship, intoxication, addiction or other sensitive traits, and does not send detailed project budgets or accessibility choices to ad platforms. Personalisation changes the path, never the public core price. Signed-in users can view, edit, reset or delete their profile controls.
Automated personalisation
At a high level, the chosen Build Style changes which safe options appear first: Budget First prioritises owned stock, reuse and zero-cost tasks; Fast Track prioritises speed and availability; Dream Build adds premium and custom possibilities while keeping lower-cost comparisons. Automated profiling does not approve purchases, make safety-critical decisions, deny access, vary price or hide lower-cost options.
Security
No online service can promise perfect security. Use only the information needed for the job and keep original project records where important.
Contact
A privacy contact address will be published before public checkout is activated.