Privacy Policy

JustPickedUp ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

We are based in Quebec, Canada, and operate the justpickedup.vin website and mobile app (the "Service").

1. What Information We Collect

Information You Provide Directly

• Account Registration: Email address, username, display name, and optional location.
• Car Information: Vehicle Identification Number (VIN), photos, text updates, and maintenance records.
• Subscription Data: Billing information (processed securely through Stripe; we do not store full card numbers).
• Communication: Any messages, feedback, or support requests you send us.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, clicks, and interactions (collected through privacy-focused Vercel Web Analytics, which does not use cookies or fingerprinting).
• Device Information: Browser type, operating system, and IP address (for security and analytics purposes).
• Authentication Cookies: Supabase uses minimal session cookies only for authentication—not for tracking.

2. How We Use Your Information

• Service Delivery: Creating and managing your account, storing your car profiles, and processing subscriptions.
• AI Processing: Parsing your text updates with Claude AI (Anthropic's language model) to automatically organize them into structured maintenance records, mod lists, and known issues. Only your update text is sent to Claude; this processing is subject to Anthropic's Privacy Policy.
• Profile Sharing: Displaying your car profile publicly if you choose to publish it (followers, view counts, etc.).
• Notifications: Sending email notifications about followers, comments, and account activity via Resend.
• Service Improvement: Analyzing usage trends, identifying bugs, and building new features.
• Legal Compliance: Responding to legal requests, preventing fraud, and protecting user safety.

3. Third-Party Services and Data Sharing

We use the following third-party services to operate JustPickedUp. Your data may be shared with these partners only as necessary to provide the Service:

• Supabase (auth.supabase.com): Authentication and session management. Email addresses stored here for login verification.
• Stripe (stripe.com): Payment processing and subscription billing. We do not store full credit card details; Stripe handles all sensitive payment information securely.
• Cloudflare R2: Photo and image storage. Your uploaded car photos are stored in Cloudflare's secure object storage.
• Anthropic (Claude API): AI text parsing for your maintenance updates. Only the update text you provide is sent to Claude for analysis.
• Vercel Web Analytics: Usage analytics (privacy-focused, no cookies, no fingerprinting).
• Resend (resend.com): Transactional email delivery for notifications about followers and activity.

We do not sell, rent, or trade your personal data with advertisers or data brokers. These third-party services are bound by confidentiality agreements and are prohibited from using your data for their own marketing purposes.

4. Data Retention

We retain your personal data for as long as your account is active or as long as necessary to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where:

• We are required to retain it by law (e.g., tax records).
• We need it to resolve disputes or enforce our agreements.
• We have anonymized or aggregated it for analytics (no longer identifiable).

5. Cookies and Tracking Technologies

Minimal Cookie Use: We use only essential authentication cookies from Supabase to maintain your logged-in session. We do not use third-party tracking cookies, pixels, or fingerprinting technologies.

Vercel Web Analytics: Our analytics platform is privacy-focused and does not use cookies or device fingerprinting. It collects only basic usage information (page views, clicks, session duration) in a way that respects your privacy.

6. Your Rights and Choices

Depending on where you live, you may have the following rights:

• Access: You can request a copy of all personal data we hold about you.
• Correction: You can update or correct inaccurate information in your account.
• Deletion: You can request that we delete your account and associated data (subject to legal retention requirements).
• Export: You can request your data in a portable, machine-readable format.
• Opt-Out of Notifications: You can unsubscribe from email notifications in your account settings.

To exercise any of these rights, contact us at hello@justpickedup.vin.

7. Children's Privacy

JustPickedUp is not intended for users under 13 years old. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you believe we have inadvertently collected data from a child, please contact us at hello@justpickedup.vin.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Secure authentication through Supabase.
• Limited employee access to personal data (need-to-know basis only).
• Regular security audits and vulnerability testing.

While we strive to protect your data, no security system is 100% foolproof. We cannot guarantee absolute security. If you have security concerns, please contact us immediately.

9. International Data Transfers

JustPickedUp is based in Canada. Some of our third-party service providers (Supabase, Stripe, Cloudflare, Anthropic) may process your data in the United States or other countries. By using JustPickedUp, you consent to the transfer of your data internationally as necessary to provide the Service. We ensure that any transfers comply with applicable privacy laws.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

We will respond to your request within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date above. Your continued use of JustPickedUp after such changes constitutes your acceptance of the updated policy.