LEGAL

Privacy Policy

Last updated 5 October 2026

Workshop Assistant (https://workshopassistant.online) helps you find workshop-manual procedures for your vehicle. This policy explains what personal data we collect, why, who we share it with, and the choices you have.

1. Who is responsible

The data controller is Alexander Widmark, operating Workshop Assistant. You can reach us at hello@workshopassistant.online for any privacy question or request.

2. What we collect

Account dataEmail address, display name, and a password (stored hashed by our authentication provider, never in readable form). If you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.

Vehicle dataThe vehicles you save in your garage: model code, nickname, and the decoded engine, drivetrain and body details.

Questions and answersThe questions you ask, the vehicle context sent with them, and basic usage details (time, status, how long the answer took) used for your monthly quota, quality and cost monitoring.

Feedback and notesFeedback you send, ratings of answers, and community notes you submit, together with the question and vehicle they refer to.

Billing dataIf you subscribe to a paid plan, payment is handled by Stripe. We store your Stripe customer and subscription identifiers and status. We never see or store your full card number.

Technical dataYour IP address and basic request data are processed by our hosting and security systems, and temporarily (as a one-way hash) to limit abusive sign-ups. Your browser stores a sign-in session in local storage so you stay signed in.

We do not collect sensitive personal data, and the service is not directed at children under 16.

3. How we use it and our legal basis

Provide the service (create your account, answer your questions, save your garage, enforce your monthly quota, process payments). Basis: performance of a contract.
Keep the service safe and working (rate limiting, abuse prevention, debugging, measuring answer quality and cost). Basis: our legitimate interests.
Improve answers and coverage (reviewing feedback, ratings and manual requests). Basis: our legitimate interests.
Send service emails such as account and billing messages. Basis: performance of a contract.
Meet legal obligations such as bookkeeping. Basis: legal obligation.

We do not sell your personal data. We do not use it to profile you for advertising.

4. Sign in with Google

If you choose “Continue with Google”, we use Google sign-in only to authenticate you. We request your basic profile (name) and email address and use them to create and identify your account. We do not access your Gmail, Drive, contacts, calendar or any other Google data. Google’s handling of your data is described in Google’s Privacy Policy. You can revoke our access at any time in your Google Account permissions. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Meta (Facebook, Instagram) and TikTok

Workshop Assistant does not currently use the Meta Pixel, TikTok Pixel or any advertising or tracking SDK on this website or in the app, and it does not collect data from your Meta or TikTok accounts. If you reach us through a Meta or TikTok ad, page or message, those platforms process your data under their own privacy policies (Meta, TikTok). If we later add advertising or conversion measurement from either platform, we will update this policy first and ask for consent where the law requires it.

If you contact us through a Meta or TikTok channel, we use what you send us only to reply to you. To have it removed, see data deletion.

We use service providers (processors) who handle data on our behalf under data-processing terms:

SupabaseAuthentication, database and file storage for accounts, garages, usage, feedback and notes.

VercelHosting of the website and its API.

RenderHosting of the answer pipeline that searches the manual.

Anthropic and OpenAIAI providers that turn your question and the retrieved manual text into an answer, and that create search embeddings. The text of your question and the vehicle context are sent to them. We do not send your name or email address.

StripePayment processing for paid plans.

ResendSending service emails.

GoogleSign-in, only if you choose it.

We may also disclose data if required by law or to protect our rights. Community notes you submit are shown to other users only after review, without your name or email.

7. International transfers

Some providers are located outside the EU/EEA, for example in the United States. Where that happens we rely on appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

8. How long we keep data

Account, garage, question history and feedback: while your account exists. When you ask us to delete your account we remove them within 30 days.
Billing records: as long as bookkeeping law requires (in Sweden, 7 years).
Sign-up rate-limit records (hashed): up to 2 days.
Backups: removed on the normal backup cycle after deletion.

9. Your rights

Under the GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to its processing, and receive a portable copy. Where we rely on consent you can withdraw it at any time. Email hello@workshopassistant.online and we will respond within one month. You also have the right to complain to your supervisory authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY, imy.se).

10. Deleting your data

You can have your account and associated data deleted at any time. Follow the steps on our data deletion page.

11. Security

Data is encrypted in transit (HTTPS) and access to it is restricted by account-level permissions in our database. No system is perfectly secure, so please use a strong, unique password.

12. Cookies and local storage

We use your browser’s local storage to keep you signed in and to remember your garage. We do not use advertising or third-party tracking cookies.

Terms

Use of the service is also governed by our Terms of Service.

13. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will tell you about material changes in the app or by email.

14. Contact

Alexander Widmark
Workshop Assistant
hello@workshopassistant.online