AppointPrivacy policy
AppointAuto is a free directory of auto service shops. You can use it without an account and without giving us your name. We do not sell or share your personal information, and analytics cookies load only if you accept them.
Who we are
AppointAuto (appointauto.com, "we") runs this website. For any privacy question or request, email privacy@appointauto.com.
What we collect and why
| What | When | Why | Where it is stored |
|---|---|---|---|
| Technical request data: IP address, browser (user agent), page requested, time | Every visit | Deliver the site, keep it secure, block abusive traffic | Cloudflare (hosting, firewall) |
| Click counts: which listing, which button (call, website, directions), which day | When you press a button on a listing | Show shops how many drivers we sent them. No IP address or identifier is stored with it. | Cloudflare D1 |
| Usage analytics: pages viewed, device type, approximate location (city level), clicks and scrolls | Only after you accept analytics cookies | Understand which pages help drivers and fix problems | Google Analytics 4, Microsoft Clarity |
| Feedback: your message, rating and, if you give it, your email address | When you send the feedback form | Read and answer your feedback | Supabase; sent to our inbox by Cloudflare Email |
| Listing claims: name, role, email, phone, requested corrections | When a shop owner claims a listing | Verify the owner, apply corrections, send the monthly report they asked for | Cloudflare D1 |
| Removal or correction requests: name, email, relationship to the business, request details | When you send the removal form | Handle the request and keep a record that it was handled | Cloudflare D1; sent to our inbox by Cloudflare Email |
| Shop owner account: email address and password (stored hashed) | If a shop owner creates an account | Sign in to the shop panel | Supabase Auth |
| Settings in your browser: language, cookie choice, saved vehicles | When you use the app | Remember your choices. This stays in your browser and is not sent to us. | Your browser (local storage) |
We do not collect precise location. If you use "near me", your browser asks for permission and the location is used only to sort shops by distance; it is not stored.
Cookies and analytics
Strictly necessary storage (your language and cookie choice) is always on. Google Analytics 4 and Microsoft Clarity are optional: they load only after you press Accept in the cookie banner, and we use Google Consent Mode so Google stores nothing before that. You can change your choice at any time with the cookie settings link in the footer. We honor the Global Privacy Control (GPC) signal. We do not use advertising cookies, and Google Signals and ads personalization are turned off.
- Google Analytics 4: Google LLC, data kept for 14 months. Google privacy policy.
- Microsoft Clarity: Microsoft Corporation, session recordings kept for 30 days and aggregated heatmaps for 13 months. Text you type into forms is masked. Microsoft privacy statement.
Who processes data for us
We use service providers that process data only on our instructions: Cloudflare (hosting, security, database, email), Supabase (database and shop owner sign-in), Google (analytics, only with consent) and Microsoft (Clarity, only with consent). Some of them process data outside your state or country, including in the United States. We do not sell personal information to anyone, and we do not share it for cross-context behavioral advertising.
How long we keep it
- Firewall and request logs: as long as Cloudflare keeps them (days to weeks).
- Click counts: kept in aggregate, with no personal data.
- Feedback: 24 months, then deleted.
- Listing claims: while the listing stays claimed, plus 24 months.
- Removal and correction requests: 36 months, so a removed listing does not come back in a later data update.
- Analytics: 14 months (Google Analytics), 30 days for recordings and 13 months for heatmaps (Clarity).
- Shop owner accounts: until the account is deleted.
Your choices and rights
Wherever you live, you can ask us to tell you what we hold about you, correct it or delete it, and you can withdraw consent to analytics at any time. Email privacy@appointauto.com. We answer within 45 days and do not charge for it.
California privacy rights (CCPA/CPRA)
If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you these rights:
- Right to know the categories and specific pieces of personal information we collected about you, the sources, the purposes and the categories of third parties we disclose it to.
- Right to delete personal information we collected from you, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of; we still honor GPC as an opt-out.
- Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA.
- Right to non-discrimination for using any of these rights.
Notice at collection. In the last 12 months we collected these categories: identifiers (IP address, email, name, phone for claims and requests), internet activity (pages viewed and clicks, analytics only with consent), approximate geolocation derived from IP, and commercial information about businesses (shop owner claims). Sources: you, your browser, and our service providers. Purposes and retention are listed above. We disclosed these categories only to the service providers listed above for business purposes. We have not sold or shared personal information, including of consumers under 16.
How to make a request. Email privacy@appointauto.com with your request and the email address or phone you used with us. We confirm receipt within 10 business days and answer within 45 days (we may extend once by 45 days and will tell you why). To protect you, we verify a request by matching it to information we already hold, for example by replying to the email address you used. You may use an authorized agent; we will ask for your signed permission and may ask you to confirm your identity directly.
Children
AppointAuto is meant for drivers and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us information, email us and we will delete it.
Security
All traffic uses HTTPS. Databases are access-restricted and forms are protected against automated abuse. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.
Business listings
The directory lists businesses, not people, using public sources described on the data sources page. A business owner can ask us to correct or remove a listing on the removal and correction page.
Changes
We will update this page when our practices change and show the date at the top. Material changes will also be announced on the home page.
Contact
Privacy requests: privacy@appointauto.com. Legal notices: legal@appointauto.com. General help: support@appointauto.com.