Last Updated: March 25, 2026
A.S.H. (Auto Service Hub) ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
We collect name, email address, phone number, and mailing address when you create an account. For technicians, we also collect professional credentials, insurance documentation, and business information.
We collect vehicle details including VIN, make, model, year, mileage, and service history to facilitate maintenance services.
Payment processing is handled by Stripe. We only store your Stripe customer ID and the last 4 digits of your payment method. We never store, process, or have access to full card numbers.
With your permission, we collect location data to connect you with nearby technicians and facilitate service dispatch.
We use your information to provide and improve our services, process transactions, communicate with you, ensure safety and security, and comply with legal obligations.
Service request records are retained for 3 years after completion, then automatically purged. Technician documents are retained for 1 year after account termination. Unverified accounts are removed after 30 days. Metrics data follows configurable retention periods (30-90 days).
We encrypt sensitive personal information (phone numbers, addresses) at rest using AES-256-GCM encryption. All data in transit is protected via TLS. Passwords are hashed using bcrypt with 12 salt rounds.
You may access, update, or delete your personal information at any time through the app settings. You may request a complete export of your data.
If you are in the European Economic Area, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You may also withdraw consent and lodge a complaint with a supervisory authority.
California residents have the right to know what personal information is collected, request deletion, opt out of the sale of personal information (we do not sell your data), and non-discrimination for exercising these rights.
We share information only with service providers necessary to operate the platform (Stripe for payments, Resend for email communications). We do not sell your personal data to third parties.
The Service is intended only for individuals who are at least 17 years of age. We do not knowingly collect personal information from individuals under 17. If we become aware that we have collected data from a person under 17, we will promptly delete that information and terminate the associated account.
For privacy-related questions or to exercise your data rights, please contact us through the app or email our support team.