Privacy Policy

We collect information you provide directly to us, including: your name, email address, phone number, and business information when you create an account; customer data, vehicle information, and service records you enter into the Software; payment information processed through third-party providers; and usage data such as features used, pages visited, and actions taken within the Software. If you sign in using Google, we receive your name and email address from your Google account. We do not access any other Google data.

We use the information we collect to: provide, maintain, and improve the Software; process transactions and send related information; send you technical notices, updates, and support messages; respond to your comments, questions, and requests; monitor and analyze trends, usage, and activities; detect, investigate, and prevent fraudulent transactions and other illegal activities; and comply with legal obligations.

Your production data is hosted on secure servers located in Canadian regions of our infrastructure provider. Our primary databases, file storage, and backups remain in Canada. Certain third-party service providers that support the Software — such as payment processing and email delivery — may process limited personal information (for example, an email address or payment details) outside Canada. In those cases, we share only the information necessary for the service and require appropriate contractual safeguards.

We implement appropriate technical and organizational security measures to protect your information, including encryption of data in transit and at rest, regular security assessments, access controls and authentication requirements, and regular backups. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We may share your information with third-party service providers who perform services on our behalf, such as payment processing (e.g., Stripe), email delivery services, cloud hosting providers, and analytics services. These providers are contractually obligated to protect your information and may only use it for the purposes we specify.

We use essential cookies to maintain your authenticated session. The main cookie ('authToken') identifies you after login so you don't have to re-enter your credentials on every page. For the kiosk mode (shared workshop tablets), we use two additional cookies: 'kioskToken' to remember the tablet's shop connection and 'kioskUserToken' to identify the employee currently clocked in. All cookies are HTTP-only and secure, meaning they cannot be accessed by JavaScript. They are automatically deleted when you log out. We also store your language and theme preferences in your browser's local storage for convenience. We do not use any third-party tracking, advertising, or analytics cookies. Because we use only strictly necessary cookies and no tracking, advertising, or analytics cookies, we do not display a cookie consent banner.

Under applicable privacy laws, including Quebec's Law 25 and PIPEDA, you have the right to: access your personal information; correct inaccurate information; request deletion of your information; withdraw consent for data processing; receive a copy of the personal information you provided to us in a structured, commonly used technological format (this applies to information you gave us, not to records we created, such as invoices); and file a complaint with the relevant privacy authority. To exercise these rights, please contact us using the information provided in the Contact section.

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information after account closure for legal compliance, dispute resolution, and enforcement of agreements. Business data (invoices, estimates, customer records) may be retained as required by tax and business record-keeping laws.

The Software is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and, where appropriate, by email notification. Your continued use of the Software after changes are posted constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at info@glppro.net or through the Contact page on our website.