Privacy Policy

1.General provisions

Victor Mishkin, trading as AutoCore, Tbilisskaya 13, Almaty 050000, Kazakhstan, is the seller and controller for personal data collected through the AutoCore product and website.

This policy describes how personal and operational data is processed in AutoCore, a cloud application for auto dismantlers and repair shops.

By using the AutoCore web app or desktop client, you confirm that you have reviewed this policy. Company admins are responsible for the accuracy of data for the employees they invite into their organization.

2.Who this policy applies to

This policy applies to owners and employees of customer companies, users of demo access, and visitors to the myautocore.com marketing site.

• Company owners and admins
• Employees with role-based access (warehouse, shop floor, accounting, etc.)
• Trial and paid subscription users

3.What data we process

We only process the data necessary to operate the product, support our users, and comply with legal requirements.

• Account data: email, name, sign-in provider ID (Google, Apple, etc.)
• Company data: name, business details, branding settings, plan
• Operational data: warehouse, work orders, accounting, documents, VINs, and vehicle records
• Activity log: who changed what, and when, within the system
• Technical data: IP address, device type, client version, error diagnostics

4.Purposes of processing

Data is used to provide and improve AutoCore, perform our contract with customers, meet legal obligations, and pursue legitimate interests in service security, fraud prevention, support, and product improvement. Consent is used where required, including for non-essential cookies or marketing.

• Sign-up, authentication, and managing employee access
• Syncing data across web and desktop
• Generating documents, reports, and notifications
• Processing payments and managing subscriptions
• Technical support and security incident investigation

5.Storage and protection

Data is stored on secure Google Cloud / Firebase infrastructure. Access is restricted by security rules at the company (tenant) level and by employee roles (RBAC).

Data is transferred between client and server over encrypted channels (TLS). Critical operations are additionally checked on the server, not just in the interface.

We retain account and operational data while the account is active and for as long as needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations. When no longer needed, data is deleted or anonymized under our retention and backup procedures.

6.Sharing with third parties

We do not sell personal data. To operate the service we work with vetted processors that act under contract and only to the extent required to deliver the service.

• Google Firebase: authentication, database, hosting
• Google Analytics and Google Ads: aggregated website and product usage statistics, and measurement of advertising campaigns including subscription conversions
• Paddle: merchant of record for product sales, subscription management, payments, tax compliance, invoicing, and refunds
• Stripe and app-store payment providers: legacy or platform-specific subscription processing where applicable
• Email and support providers: transactional communications and customer support
• Professional advisers and public authorities where required by law or needed to protect rights and safety

7.Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing relies on consent and complain to the relevant data-protection authority.

Send privacy requests to support@myautocore.com. We may verify your identity before acting on a request. A company admin manages employee access and can deactivate accounts within the organization.

When a company is deleted, operational data is removed in accordance with our internal retention and backup procedures.

8.Cookies and analytics

The marketing site and the AutoCore app load the Google tag (Google Analytics 4 and Google Ads) so we can understand how visitors find us and measure advertising campaigns, including subscription conversions. Measurement cookies are set only after you accept analytics in the cookie banner; until then the tag runs in Consent Mode with storage denied. After consent, events such as page views, sign-up, workspace creation, trial start, and subscription purchase may be recorded.

We do not send your name, email address, company name, or any content you store in AutoCore to Google Analytics. Events carry only which step occurred and, for a purchase, which billing interval was chosen.

Within the AutoCore app, cookies are also used to maintain your sign-in session; these are technical and cannot be switched off without breaking sign-in.

You can opt out of Google Analytics on any site by installing the Google Analytics Opt-out Browser Add-on, or by blocking analytics cookies in your browser. Doing so does not affect your use of AutoCore.

9.Changes to this policy

We may update this policy as product features or legal requirements change. The current version is always available on this page, with the update date noted.

10.Contact

For privacy questions or rights requests, email support@myautocore.com with "Privacy" in the subject line, or write to Victor Mishkin, AutoCore, Tbilisskaya 13, Almaty 050000, Kazakhstan.