Security and data protection

Your data belongs to you

What you put in MyGaragio stays yours. The owner can download everything at any time — the shop’s complete database with every photo and document, in one .zip file — as well as CSV exports of customers, vehicles, repair orders, inventory and reports.

We don’t use your data for our own purposes and never sell it. If you leave, you keep everything; if you ask for the account to be deleted, deletion follows a cooling-off period, as our Terms describe.

One database per shop

Every shop has its own database and its own folder of files, separate from every other shop’s. Each request is tied to a single shop, and a request that names none is refused. Photos and documents are served only to the shop they belong to, or through customer links that can’t be guessed.

Where your data is hosted

Shops’ servers and data are hosted in Canada, with Amazon Web Services (Lightsail) in its Montréal, Canada region (ca-central-1). Off-site backups are kept with Amazon Web Services in Canada (Montréal).

A few things are processed in the United States, by providers bound by contract: AI features and subscription billing. The full list, with each one’s location, is on the Subprocessors page.

Encryption

• In transit: every connection uses HTTPS (TLS); plain HTTP requests are redirected to HTTPS.
• At rest: our hosting provider’s storage volumes are encrypted, and backups are encrypted in an off-site bucket.
• Secrets: passwords, PINs and session tokens are stored only as hashes; your integrations’ keys are never shown on staff screens. The full database download is for the owner only, after entering their password again.

Backups

• Database, every night, off-site: each shop’s database is copied, checked and encrypted into a versioned Amazon S3 bucket in Canada (Montréal); daily copies are kept for 30 days and monthly copies for 12 months, and a removed copy stays recoverable for 30 more days.
• Photos and documents, every night, off-site: they are copied into the same bucket (Canada (Montréal)); a removed file is erased from it after 30 days. On top of that, daily snapshots of the server’s encrypted storage are kept for 7 days.
• Your own copy: the owner can download the full database with every photo and document at any time.

So a mistake or a deletion can be recovered. What happens to backups after an account is deleted is described in our privacy governance policy.

Accounts and access

• Roles and permissions: owner, manager, service advisor, technician, parts manager and bookkeeper; every screen and every request checks the permission. Technicians never see costs, and see prices only if you allow it.
• Two-step sign-in with an authenticator app, and recovery codes.
• Lockouts after repeated wrong passwords, PINs or codes, so guessing doesn’t work.
• PIN switching between staff on shared counter computers, with its own lockout.
• Activity log of important changes, for managers.
• API keys and signed webhooks (HMAC-SHA256) for integrations, under your control.

Safeguards in the app

• Uploaded files can never run script in the app.
• Browser security headers are on, and requests to change data coming from other websites are refused.
• Links sent to customers (estimate, portal, payment) carry random tokens that can’t be guessed, and links in texts are built from our official address, never from a request’s headers.
• Card payments are processed by Stripe: MyGaragio never sees or stores a full card number.

How AI is used

MyGaragio’s AI features use Anthropic’s Claude models, through MyGaragio’s own key — there’s no account for you to set up.

• What is sent: only what the request needs — for example the vehicle and the jobs to write an explanation, or a customer’s text to answer it.
• No training: under Anthropic’s commercial terms, this data is not used to train its models.
• Checks: the text receptionist checks every link and dollar amount against your data before sending; the voice receptionist reads out a car’s status or a balance only after verifying who is calling.
• Under your control: a monthly allowance per shop, and an owner can turn AI features off at any time — they keep working in an offline mode, without AI.

Incidents and reporting

We keep a register of confidentiality incidents. If an incident affects your shop’s data, we tell you without undue delay — our target is 48 hours after confirming it — with what you need for your own notices, as the Data Processing Addendum describes.

Found a vulnerability? Write to security@mygaragio.com. We answer quickly, and thank you for giving us time to fix it before sharing it.

Privacy and compliance

MyGaragio is built for Quebec’s Law 25 and PIPEDA: a person in charge of the protection of personal information, an incident register, an assessment before information is communicated outside Quebec, and no advertising or analytics cookies. See the Privacy Policy, the Data Processing Addendum and the list of subprocessors.