Contents
1. Who we are & our roles
The Developer provides AutoCore to garages and workshops (each a "Garage") on a subscription basis. In this Policy:
- For account and Garage-staff data and for operating the platform, the Developer acts as a controller.
- For the data a Garage enters about its own customers and vehicles, the Garage is the controller and the Developer acts as a processor handling that data on the Garage's behalf and instructions. If you are a customer of a Garage, please contact that Garage regarding your records; we will support them in responding.
2. Data we collect
| Category | Examples |
|---|---|
| Account & staff | Name, email, phone, role/permissions, hashed password, company name, last login. |
| Garage's business records | Customer names and contacts, vehicles, appointments, quotations and invoices, job cards, inspections, quality checks, notes. |
| Media & signatures | Inspection/QA/work photos and videos, and signatures captured on screen or device. |
| Usage & device | Log data, IP address, browser/device type, actions taken, and — for the mobile app — a push-notification token. |
| Communications | Messages you send us and support requests. |
We do not intentionally collect special categories of data. Please do not submit data you are not authorised to process.
3. How we use data
- To provide, operate, secure and maintain the Service and its features (bookings, inspections, job pipeline, QA, invoicing, notifications, reporting);
- To authenticate users and enforce roles and permissions;
- To send transactional and service messages (including push notifications, and — where a Garage enables it — email/SMS to that Garage's customers on the Garage's behalf);
- To provide support, prevent fraud/abuse, and ensure security and integrity;
- To improve the Service and develop new features (using aggregated or de-identified data where practicable);
- To comply with legal obligations and enforce our Terms.
4. Legal bases
Depending on the context, we rely on: performance of a contract (providing the Service you subscribe to); our legitimate interests (securing and improving the Service) balanced against your rights; your consent (e.g. optional integrations or marketing, which you may withdraw); and compliance with legal obligations. For data processed on a Garage's behalf, the Garage is responsible for the legal basis of that processing.
5. The AutoCore Tech mobile app
The mobile app requests device permissions only for features you use:
- Camera & Photos — to capture and attach inspection, QA and work-step photos to a job. Photos are uploaded to the Service (and, if the Garage has enabled it, to the Garage's own cloud storage).
- Notifications — to alert staff about new job assignments and updates. If you enable push, a device token is registered to deliver notifications; you can disable notifications in your device settings.
The app stores your login session securely on the device and communicates with our API over encrypted connections.
6. Sharing & processors
We do not sell personal data. We share it only as needed to run the Service:
- Infrastructure & hosting providers that host the platform and databases;
- Communications providers used to deliver email/SMS and push notifications (e.g. a push-notification gateway);
- Optional integrations you enable using your own accounts — for example Google Drive, Zoho WorkDrive, Zoho Invoice and QuickBooks Online — to which data is sent at your direction and governed by their privacy policies;
- Professional advisers, authorities or acquirers where required by law or in connection with a corporate transaction.
Our processors are bound to appropriate confidentiality and security obligations and may process data only on our instructions.
7. International transfers
Where data is transferred outside the UAE, we take steps required by the PDPL to ensure an adequate level of protection, such as appropriate contractual safeguards.
8. Retention
We retain personal data for as long as your account/subscription is active and as needed to provide the Service, then for a limited period afterwards to meet legal, accounting or dispute-resolution requirements, after which it is deleted or anonymised in the ordinary course (subject to backup cycles). A Garage controls the retention of its own business records within the Service.
9. Security
We use technical and organisational measures appropriate to the risk, including per-Garage data isolation, encryption of secrets at rest, encryption in transit (HTTPS), hashed passwords, role-based access controls, and audit logging. No system is perfectly secure, but we work to protect your data and to respond to incidents appropriately.
10. Your rights
Subject to applicable law (including the PDPL), you may have the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise these rights over your personal account data, contact us using the details below. If your data was entered by a Garage (its own customer records), please contact that Garage; we will assist it as processor. You may also lodge a complaint with the competent UAE data-protection authority.
11. Cookies
The web portal uses strictly necessary cookies and similar local storage to keep you signed in and to remember preferences. The public marketing site uses minimal cookies. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may affect sign-in.
12. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, take reasonable steps to notify you. Continued use after changes take effect constitutes acceptance.
14. Contact
Faiz Information Technology Consultants L.L.C
Office M02-13, Al Sahel Al Akhdar Real Estate Building, Al Khubaisi, Dubai, United Arab Emirates
Email: tahir@faizit.com · Phone/WhatsApp: 056 786 5253