How we handle your data under Jamaica's Data Protection Act 2020.
Contact details (phone, email), account information, vehicle details, reminder dates, document details and files you upload, support-request details, payment and subscription records, and - where a specific workflow requires it - limited verification or ticket or portal information you provide. We collect this to run your Garage, send reminders, store documents, support operator-assisted requests, and maintain basic security and payment records.
If you use AutoTrust without signing in, your vehicle and reminder information is stored locally in your browser on your own device. It is not transmitted to or held by AutoTrust, and we are not the data controller for information that never leaves your device.
When you sign in, your vehicles, compliance dates, uploaded documents and related records are stored securely in our cloud database so they can sync across your devices. For this cloud-stored data, AutoTrust acts as the data controller under the DPA 2020. Access is restricted to your own account through row-level security, and AutoTrust staff access it only for support or regulatory-compliance purposes. We rely on infrastructure and communications providers (such as Supabase, Vercel, Resend, Meta/WhatsApp and Telegram) that process data on our behalf as service providers; some of this infrastructure may be located outside Jamaica, and we take reasonable steps to keep your data protected.
When you use AutoTrust's document storage feature, files you upload (certificates of fitness, registration certificates, insurance documents, etc.) are stored securely and used to provide the document vault, build your vehicle history, and enable reminder features. When you ask AutoTrust to read a file, AutoTrust first tries to read it on your device. If a photo remains unclear or key details are missing, a smaller copy of that photo may be sent to our AI service provider to suggest visible details. Those suggestions do not update your vehicle until you review and save them. We do not verify the authenticity or accuracy of uploaded documents, and you must confirm any document details before they are relied on. Documents are retained for as long as your account is active and are deleted upon account deletion or on your request. AutoTrust staff may access stored documents only for support, a test you authorize, or regulatory compliance purposes.
Renewal dates you enter (registration, fitness, insurance) are stored and used to generate reminder notifications. These dates are not shared with government agencies, insurers, or any third party except where required by law. The accuracy of reminders depends on the dates you enter - AutoTrust does not independently verify expiry dates against government records.
If you choose bank transfer, you may upload a screenshot, image, or PDF receipt so AutoTrust can match your payment reference and amount against the settled bank entry. These files may contain transaction details, so they are stored in a private payment-proof area and are available only to your account and authorized AutoTrust operators reviewing the payment. Uploading a receipt does not by itself confirm payment or activate service. Payment proofs and their review records may be retained for payment reconciliation, fraud prevention, disputes, accounting, and legal obligations, then deleted when no longer required.
We record timestamps and related audit details for actions such as document uploads, support requests, payment activation, and other account actions that need a service or security trail. Where consent is the lawful basis, you may withdraw it, but that may prevent us from providing the feature that depended on that consent.
We process data to provide the service you request, secure the platform, meet legal obligations, and - where appropriate - based on consent. You may request access to, correction of, or deletion of your data, and you may withdraw consent for optional processing at any time.
A signed-in member can permanently delete the account inside the iPhone or Android app, or throughthe web account-deletion page. Deletion removes the AutoTrust login and associated private Garage records and files. Payment-provider and transaction records may be retained only where required for accounting, fraud prevention, disputes or law, then removed when no longer required. Account deletion does not create a refund.
AutoTrust uses cookies or local browser storage for core functions such as sign-in state, demo/session preferences, referral or source attribution, and your cookie-consent choice. If you accept analytics cookies, we may also use measurement and retargeting tools such as PostHog and Meta Pixel to understand site usage and advertising performance. Those optional analytics and advertising tools are not switched on until you accept them.
Some optional features may use AI service providers to help extract details from a price-board photo or document you choose, or draft a message reply for review. When those features are enabled, the relevant photo, document image, PDF, or message content may be processed by that provider only for the requested feature. AI output can be wrong, so you or our team must review important details before relying on them. Garage photo details are suggested by an AI image reader and require your review. A bounded copy of a photo you choose may be sent for that reading. If you save a fuel purchase with a photo, the original image stays in your private Vehicle documents. A photo may contain a capture time and GPS location. We use those details to suggest a time and nearby fuel stations; a location is linked to the purchase only after you confirm it. Nearby place lookup sends the photo coordinates to OpenStreetMap services when GPS is present.
We share only what is necessary with licensed lenders, insurers, attorneys and inspectors to deliver the service you request. We do not sell your personal information. Aggregated, de-identified valuation data may be used to build market indices.
Data requests: adam@apeirondp.com