MakrLog

1. Introduction

MakrLog is a product of Tovi Labs LLC ("we", "us", "our"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding your personal data when you use our platform at makrlog.com.

By using MakrLog, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the platform.

2. Information We Collect

2.1 Information You Provide

Account information: Your name, email address, and password when you create an account. If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
Build data: All content you create within MakrLog, including build details (vehicle type, make, model, year), tasks, budget categories, expenses, parts lists, notes, and descriptions.
Uploaded files: Receipt images, photos, and documents you upload to the platform.
Feedback and support: Messages, feedback, and bug reports you submit through the platform.

2.2 Information Collected Automatically

Usage data: Pages visited, features used, session duration, and interaction patterns to help us improve the product.
Device information: Browser type, operating system, and screen resolution for compatibility purposes.
Log data: IP addresses, access times, and error logs for security and troubleshooting.

2.3 Payment Information

Payment information (credit card numbers, billing addresses) is collected and processed directly by Stripe, our payment processor. We do not store your full credit card number on our servers. We receive only a limited set of information from Stripe, including the last four digits of your card, card brand, and subscription status.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing the service: To operate MakrLog, store your builds and data, and deliver the features you use.
AI features: When you use AI Insights or Smart Scan, your relevant build data and uploaded images are sent to our AI provider (Anthropic) to generate responses. This data is processed in real time and is not used to train AI models.
Account management: To manage your subscription, process payments, and send transactional emails (account verification, password resets, billing receipts).
Communication: To respond to your feedback, support requests, and to send important service updates. We will never send marketing emails without your explicit consent.
Improvement: To analyze aggregated, anonymized usage patterns to improve MakrLog's features, performance, and user experience.
Security: To detect and prevent fraud, abuse, and security threats to protect our platform and users.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Service providers: We share data with trusted third-party providers that help us operate MakrLog, including Stripe (payments), Anthropic (AI processing), Google (authentication), Cloudflare R2 (file storage), Neon (database hosting), Resend (transactional email), and Vercel (hosting and analytics). Each provider is contractually obligated to protect your data.
Legal requirements: We may disclose information if required by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

5. Data Storage and Security

Your data is stored in encrypted databases hosted on secure cloud infrastructure.
Uploaded files (receipts, photos) are stored in Cloudflare R2 object storage with access controls that restrict access to your account only.
All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
We conduct regular security reviews and follow industry best practices for data protection.
While we implement strong security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

Active accounts: We retain your data for as long as your account is active.
Expired subscriptions: Your data is preserved in read-only mode indefinitely, allowing you to resubscribe and regain access at any time.
Deleted accounts: When your account is deleted, we permanently remove your personal data and build content within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.
Legal obligations: We may retain certain information for longer periods if required by law (e.g., financial records for tax compliance).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: You can view and access your personal data at any time through your account settings.
Correction: You can update or correct your personal information through your account settings.
Deletion: You can request deletion of your account and all associated data at any time by contacting us at support@makrlog.com.
Data export: You may request a copy of your data in a portable format by contacting us at support@makrlog.com.
Objection: You may object to certain types of data processing where we rely on legitimate interests as the legal basis.

To exercise any of these rights, contact us at support@makrlog.com. We will respond to requests within 30 days.

8. Cookies and Tracking

MakrLog uses only essential cookies required for the platform to function, including authentication session cookies and theme preferences. We do not use third-party advertising cookies or cross-site tracking technologies. We use Vercel Web Analytics, a privacy-respecting analytics tool, to understand page view patterns in aggregate. Vercel Analytics does not use cookies or collect personal information.

9. Children's Privacy

MakrLog is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@makrlog.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. By using MakrLog, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@makrlog.com.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include: performance of our contract with you (providing the service), your consent (where applicable), our legitimate interests (improving our service, security), and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Effective date" at the top of this page and notify you via email or through the platform. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@makrlog.com