Privacy Policy
Effective date: May 2026
1. What Data We Collect
When you sign up for GearboxOS, we collect information necessary to operate the platform and deliver your AutoPilot intelligence briefs:
- Shop name, business address, and DRP affiliations
- Owner and manager contact information (phone number and email)
- Business metrics synced from CCC One, including capture rate, CSI scores, sales data, calibration records, and gross profit figures
- User preferences for alerts, notifications, and dashboard configuration
2. How We Use Your Data
We use the data we collect strictly to operate and improve the GearboxOS platform:
- Powering your live shop dashboard and Six Intelligence Buckets
- Generating and delivering your daily AutoPilot morning brief via SMS and email
- Flagging operational issues like missed calibrations or declining capture rates
- Providing customer support and onboarding assistance
- Improving our AI agents and recommendation accuracy
3. Data Sharing
We never sell your data to third parties. We do not share your shop's business metrics, customer information, or operational data with advertisers, data brokers, or unrelated service providers.
We only share data with trusted subprocessors necessary to operate the platform (e.g., cloud hosting, SMS delivery providers), and only under strict contractual confidentiality obligations.
4. SMS Opt-In & Messaging
By providing your phone number during onboarding, you explicitly consent to receive daily AutoPilot intelligence briefs and operational alerts via SMS. Message frequency varies based on shop activity and alert settings, typically 1–3 messages per day.
You can reply STOP at any time to unsubscribe from SMS alerts. Reply HELP for assistance. Message and data rates may apply.
5. Data Security
All data is encrypted at rest and in transit using industry-standard TLS and AES-256 encryption. Our infrastructure runs on enterprise-grade cloud providers with SOC 2 Type II compliant data centers.
Access to production data is strictly limited to authorized personnel and protected by multi-factor authentication and role-based access controls.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. Contact us at privacy@gearboxos.com to exercise these rights.
7. Contact
Questions about this privacy policy? Reach us at privacy@gearboxos.com.