Privacy policy
Version 2026-11-08. Creating a shop records that you accepted this version, and the time you did.
Have a lawyer review this before you rely on it. It describes what this software stores. It is not a substitute for Alberta PIPA or federal privacy law.
Who this covers
Pitcards is desk software for an independent repair shop. This policy covers the shop account and the customer records the shop types in. Questions go to hello@pitcards.com.
The shop account
Creating a shop stores the owner's name and email, the shop name, and a hash of the password. The password itself is not kept. Sign-in is the shop name and that password. A confirmation message is sent to the owner's email before the shop opens.
What the shop enters
The desk can store customer names, phone numbers, email addresses, and addresses, plus vehicle year, make, model, plate, and VIN. It also stores estimates, repair orders, appointments, invoices, and payments. A payment record is the amount, the method, and a reference. Card numbers are not stored. Prices and tax rates are numbers the shop enters.
Those customer records belong to the shop. In Alberta, personal information about customers is the shop's responsibility under PIPA. Pitcards keeps the records so the desk can use them. It does not decide what the shop is allowed to collect.
Who else handles it
The app runs on Vercel and the records are stored in a Neon Postgres database. Those providers host the software. They are not given the records for their own marketing. When email delivery is turned on, the confirmation message is sent through Resend. A 17-character VIN lookup is sent to the NHTSA vPIC database in the United States so the year, make, and model can be filled in. The shop can type those details instead.
Sign-in on this device
Signing in stores a session cookie on that device. Remember this shop keeps the cookie for 30 days. Leave it unchecked and the cookie ends when the browser closes. The server copy of an unchecked sign-in ends after 12 hours. A shop stays signed in on two devices. A third sign-in closes the oldest one.
How long it stays
Shop and customer records stay while the shop account exists. They are not sold. To close a shop or ask for a copy of the account, email hello@pitcards.com. Customer questions about a repair record go to the shop that wrote it.
If this policy changes
A new version date means the text changed. A shop created after that date accepts the new version. This page shows the version in force for new shops.