BayOps Privacy Policy
Effective date: [DATE YOU PUBLISH]
BayOps ("we," "us") operates bayops.io, a self-serve audit for auto repair shops. This policy explains what we collect, why, and what happens to it. It's written to be read, not skimmed past.
The short version
- Your free result is calculated in your browser. You don't need an email address to see it.
- If you finish the audit, your answers are saved so we can build your report if you purchase it.
- If you buy the full plan, your answers are processed by an AI model once to generate your personalized report, which is emailed to you.
- We never see your card details. Payments are handled by Paddle, our merchant of record.
- We do not sell your data, and no vendor pays us to see it or to be recommended in your report.
1. What we collect
Audit answers. The numbers and selections you type into the audit — things like car count, average ticket, labor rate, no-show counts, staffing, and how your shop handles estimates and phones. You choose what to enter; enter only what you're comfortable sharing.
Shop and contact details. Your first name and shop name (used to personalize your report), and — only if you purchase — the email address where your report is delivered, plus an optional second (CC) address you can add.
Payment information. Collected and processed entirely by Paddle, our merchant of record. Paddle handles the checkout, charges your card, and issues refunds. We receive confirmation that a purchase happened and the email you used — never your card number. Paddle's handling of your data is covered by Paddle's privacy policy.
Technical and usage data. Standard web logs (IP address, browser type, pages viewed) and, where enabled, analytics and advertising events (see "Cookies and advertising" below).
2. What we use it for
- To show your free result — calculated in your browser from your own inputs.
- To generate your paid report. Your answers are sent to an AI model (currently provided by OpenAI) in a single generation run to produce your personalized 60-day plan. This is disclosed here plainly: your report is AI-generated from your answers, measured against the industry benchmarks stated inside the report itself.
- To deliver your report by email, and to re-send it if you update your delivery address.
- To handle support and refunds under our refund policy.
- To improve the product and measure advertising — aggregate, non-identifying usage patterns.
We do not use your audit answers for advertising, and we do not sell, rent, or trade your information with anyone.
3. Who processes your data on our behalf
We use a small number of service providers, each for one job:
| Provider | What they do with your data |
|---|---|
| Paddle | Merchant of record — checkout, payment, tax, refunds |
| Lovable Cloud (Supabase) | Hosts the app and stores your submission |
| OpenAI | Processes your answers once to generate your report |
| Render | Runs the background service that builds your report |
| Resend | Sends your report and service emails |
| Meta | Advertising measurement via the Meta pixel (see below) |
These providers process data only to provide their service to us. None of them may use your audit answers for their own purposes beyond what their service terms require.
4. Cookies and advertising
We use the Meta pixel to measure whether our advertising works — events like starting the audit, viewing a result, and completing a purchase. This involves cookies or similar identifiers set by Meta. You can limit ad tracking through your browser settings and through Meta's own ad preferences. We do not send your audit answers (your shop's numbers) to Meta — only the fact that funnel events occurred.
5. How long we keep it
We keep your submission and generated report so that your permanent report link keeps working — that link is part of what you bought. If you want your submission and report deleted, email us (below) and we'll remove them; note your report link will stop working. Payment records are retained by Paddle as required for tax and accounting law.
6. Your rights
Depending on where you live (including under US state privacy laws such as the CCPA/CPRA, and the GDPR if you're in the EU/UK), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of targeted advertising. To exercise any of these, email us at the address below — we honor these requests for everyone, regardless of location. We will never discriminate against you for exercising them.
We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.
7. Data location
BayOps is operated from Pakistan; our service providers store and process data in the United States and other regions where they operate. By using BayOps you understand your information may be processed outside your home country, protected by the contractual safeguards our providers offer.
8. Security
Data is transmitted over HTTPS and stored with access controls that restrict who and what can read it. No internet service can promise perfect security, but we deliberately collect little: no card numbers, no logins, no accounts.
9. Children
BayOps is a business tool for shop owners and is not directed at anyone under 18. We do not knowingly collect information from minors.
10. Changes
If we change this policy, we'll update the effective date at the top. Material changes will be noted on this page.
11. Contact
Questions, deletion requests, or privacy rights requests:
BayOps · bayops.io